Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a383030303a3a2f33342d3334203d3e20323731313334.roa
File:                     323830343a373663383a383030303a3a2f33342d3334203d3e20323731313334.roa (raw, json)
Hash identifier:          Uc4AdVQGz+5qYjv4uSzv2VMwuXb9LrsxWXsPFQI/ZDw=
Subject key identifier:   A7:8A:E2:4E:3C:4E:B2:5E:12:89:79:05:85:7B:41:39:05:71:F5:A3
Certificate issuer:       /CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
Certificate serial:       0A93D1CAC8D70C30DF8F22ECF5C8CCE1A0CF3F49
Authority key identifier: E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a383030303a3a2f33342d3334203d3e20323731313334.roa
Signing time:             Thu 04 Apr 2024 08:42:52 +0000
ROA not before:           Thu 04 Apr 2024 08:37:52 +0000
ROA not after:            Thu 03 Apr 2025 08:42:52 +0000
asID:                     271134
IP address blocks:        2804:76c8:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:93:d1:ca:c8:d7:0c:30:df:8f:22:ec:f5:c8:cc:e1:a0:cf:3f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
        Validity
            Not Before: Apr  4 08:37:52 2024 GMT
            Not After : Apr  3 08:42:52 2025 GMT
        Subject: CN=A78AE24E3C4EB25E12897905857B41390571F5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:4c:dd:7f:7e:e6:49:4a:83:5e:a8:cb:8c:
                    06:84:54:c2:60:57:2b:d0:2a:7c:f9:ff:3c:41:12:
                    7f:eb:9a:df:7b:5e:99:15:8d:37:05:37:28:da:7b:
                    e0:97:56:76:ef:a3:9e:66:32:f6:34:0f:de:67:77:
                    de:6e:14:ad:e7:37:3f:53:5d:65:08:74:6a:61:e0:
                    0a:1e:78:e8:aa:55:dc:40:4b:4b:4c:a0:76:12:3b:
                    79:ba:55:2e:4c:33:c2:ff:b7:da:5b:97:88:af:96:
                    8e:5c:00:cb:bc:4f:34:bc:56:b2:2e:64:aa:5c:69:
                    28:21:e8:d1:fc:20:88:df:e7:a8:9c:47:83:19:91:
                    f6:05:13:e2:df:bc:29:8d:02:70:89:50:e8:5d:dd:
                    10:a9:e0:d0:26:f5:8d:97:8b:ff:73:ab:f2:7c:40:
                    8d:c2:ff:d1:bf:fb:a9:f5:06:2a:d4:61:b8:03:b6:
                    d1:d5:74:57:2f:30:bc:4c:53:b9:34:ee:6e:21:45:
                    d5:2a:60:1c:40:23:59:b7:2e:e3:9f:03:e9:04:aa:
                    86:33:01:9d:1e:1e:2f:31:7f:b7:2a:ad:89:01:c1:
                    ec:8a:87:6f:4e:86:8b:37:71:db:cc:bd:c9:c5:c6:
                    d4:ba:4d:c8:96:b4:a8:04:71:06:06:66:55:41:97:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8A:E2:4E:3C:4E:B2:5E:12:89:79:05:85:7B:41:39:05:71:F5:A3
            X509v3 Authority Key Identifier:
                keyid:E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a383030303a3a2f33342d3334203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76c8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:98:bc:58:6e:8e:17:95:61:2e:73:fc:0e:5b:ee:fa:0e:
         23:07:9a:22:c4:8d:b5:aa:d7:c3:e9:37:fe:9f:fa:d6:54:3b:
         a4:70:b0:fe:56:52:62:73:4b:d0:df:73:c9:57:0c:44:e6:55:
         58:e1:c8:d4:c3:77:13:f3:41:9e:39:fc:33:67:f3:70:67:fc:
         84:2f:a1:2a:8b:e4:8f:5e:e8:a2:6a:c7:06:c3:f8:ee:59:b5:
         79:7f:13:4b:ac:16:c9:1e:a3:26:58:f5:a1:bf:75:85:b7:c0:
         4a:f6:37:60:66:bc:46:7c:20:26:0a:f1:56:4f:83:70:3a:1d:
         09:83:a7:f7:10:65:99:3c:4a:f3:ef:b2:67:9d:4f:5c:d4:1e:
         2e:34:ca:ff:0b:cc:9e:d5:ba:17:0f:d9:af:3e:87:7f:e7:b6:
         40:0c:9c:f4:05:d0:a7:39:4e:49:50:96:85:f9:12:4b:24:40:
         79:d1:61:2e:40:a8:e0:88:81:ec:ca:c8:7b:ff:e1:e9:73:63:
         f7:59:8e:36:46:aa:98:a2:44:bc:e0:f8:ea:f2:3e:f1:70:a3:
         ef:aa:69:fd:d0:5d:23:5f:15:96:4c:a6:99:c7:51:41:29:d8:
         4c:17:2c:37:de:52:d5:13:92:fd:1f:0c:c6:dc:ec:b8:6e:09:
         08:2b:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org