Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a383030303a3a2f33332d3333203d3e20323731313334.roa
File:                     323830343a373663383a383030303a3a2f33332d3333203d3e20323731313334.roa (raw, json)
Hash identifier:          go3iDxOoq+54fGfH/4tuxCCynZG8p871NR6lR0QjsYQ=
Subject key identifier:   05:92:D8:95:AA:8B:2A:E6:38:3B:F0:47:59:A9:B1:CD:42:A4:F0:B6
Certificate issuer:       /CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
Certificate serial:       1B4AC60CE10DCEF4086461AD8FF95C32479B5A69
Authority key identifier: E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a383030303a3a2f33332d3333203d3e20323731313334.roa
Signing time:             Thu 04 Apr 2024 08:42:51 +0000
ROA not before:           Thu 04 Apr 2024 08:37:51 +0000
ROA not after:            Thu 03 Apr 2025 08:42:51 +0000
asID:                     271134
IP address blocks:        2804:76c8:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4a:c6:0c:e1:0d:ce:f4:08:64:61:ad:8f:f9:5c:32:47:9b:5a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
        Validity
            Not Before: Apr  4 08:37:51 2024 GMT
            Not After : Apr  3 08:42:51 2025 GMT
        Subject: CN=0592D895AA8B2AE6383BF04759A9B1CD42A4F0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:da:b5:a0:44:1d:f2:1a:43:27:b3:15:47:3e:
                    00:a4:17:e7:c4:ca:b7:6b:bd:73:b4:6b:cb:49:29:
                    92:96:55:d4:3c:2d:e1:20:c1:e6:77:a5:b9:55:0b:
                    ce:4f:d4:35:5b:70:8b:e3:78:f6:b0:ad:f2:8d:92:
                    39:e3:46:c3:e5:6f:ba:d5:cf:fc:30:86:9d:56:76:
                    3d:bb:89:f3:af:86:ca:6c:d6:61:fc:52:0b:a5:15:
                    a5:39:38:4e:4d:1a:64:0d:40:5d:cc:af:85:b8:02:
                    17:4a:16:ea:86:a1:3f:fb:04:2d:bb:41:2b:38:e0:
                    b5:7b:f2:ce:9b:a1:cd:da:df:42:a8:18:4c:a8:ba:
                    a1:63:46:d3:21:e0:c2:03:78:70:53:07:0d:45:c7:
                    07:20:2a:99:2c:fa:a2:d7:d8:26:55:dc:0a:c7:52:
                    62:d5:5f:8c:65:44:f6:74:30:7d:89:5d:c7:28:e1:
                    77:98:3a:cc:c5:bf:44:d5:37:6a:a5:89:72:ac:fb:
                    3f:60:24:10:59:ab:0d:eb:8a:ed:8f:a3:f6:ce:a4:
                    1d:ff:44:35:77:c1:4f:d8:5f:0a:ff:43:1a:37:0b:
                    8b:74:4a:b4:80:1d:b1:d3:64:4b:a5:57:f0:75:32:
                    a3:c5:5b:ac:aa:4c:47:4e:65:0c:07:7a:68:77:a1:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:92:D8:95:AA:8B:2A:E6:38:3B:F0:47:59:A9:B1:CD:42:A4:F0:B6
            X509v3 Authority Key Identifier:
                keyid:E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a383030303a3a2f33332d3333203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76c8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:12:48:0d:fd:e0:45:2e:ac:b5:fe:93:42:06:50:49:99:bd:
         53:a9:80:19:76:8e:7c:a8:9d:7d:8c:41:d9:55:f0:ee:57:5e:
         09:9a:7b:f0:7b:6a:db:3f:57:bf:3a:2c:ba:8b:c5:fc:58:e6:
         f5:5e:96:87:1c:39:7d:bb:6b:88:67:f9:b0:23:9a:c3:2a:51:
         fb:61:f0:92:ea:c5:76:cf:e3:cf:6b:7a:ee:f5:4a:1d:27:f4:
         f7:12:f2:b0:2c:2c:7a:23:6d:54:1d:88:2d:85:4c:ac:4f:ed:
         5d:86:a1:6f:57:d8:73:b2:50:87:c1:08:50:c9:96:f1:46:ca:
         9c:d6:75:25:b9:cf:0d:fe:8e:f7:0e:9f:94:50:fd:62:de:a8:
         54:93:7a:90:a3:4a:1a:22:af:60:7c:ec:c9:d6:f0:77:bc:d6:
         c5:f0:fe:f5:ec:1f:d0:72:76:bd:08:9b:fa:44:00:73:a6:70:
         54:3a:8d:1f:4d:d6:4a:ac:91:fb:30:48:6d:9a:61:8a:30:3a:
         40:42:b8:7b:5b:f6:b9:ab:cf:7e:7d:9b:7b:22:7c:14:70:7c:
         db:0c:cb:7b:2a:19:e8:d1:71:72:08:13:1c:67:44:9b:9f:a8:
         3a:54:55:b5:7e:ab:18:64:e6:78:a7:0d:dd:20:66:89:1b:0b:
         dd:72:00:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org