Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a343030303a3a2f33342d3334203d3e20323730393436.roa
File:                     323830343a373365633a343030303a3a2f33342d3334203d3e20323730393436.roa (raw, json)
Hash identifier:          x/uZM6VdYyGXETYowWr1heablAnuPFDoknaijNZkwlk=
Subject key identifier:   87:2E:F6:AC:2E:AD:7F:D9:EB:92:D4:5C:67:82:EC:B4:A2:E0:BA:B9
Certificate issuer:       /CN=52699658780E9F763780991668B33774ACEDCAE9
Certificate serial:       7CA933F78615D6A94786980479A2706F1873A037
Authority key identifier: 52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a343030303a3a2f33342d3334203d3e20323730393436.roa
Signing time:             Thu 04 Apr 2024 06:49:08 +0000
ROA not before:           Thu 04 Apr 2024 06:44:08 +0000
ROA not after:            Thu 03 Apr 2025 06:49:08 +0000
asID:                     270946
IP address blocks:        2804:73ec:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a9:33:f7:86:15:d6:a9:47:86:98:04:79:a2:70:6f:18:73:a0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52699658780E9F763780991668B33774ACEDCAE9
        Validity
            Not Before: Apr  4 06:44:08 2024 GMT
            Not After : Apr  3 06:49:08 2025 GMT
        Subject: CN=872EF6AC2EAD7FD9EB92D45C6782ECB4A2E0BAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:4c:1f:6f:5c:1c:73:78:fe:04:17:f9:f9:
                    94:18:09:bb:75:cf:b0:14:8b:43:f9:fd:b8:58:e3:
                    95:7c:d9:68:aa:b7:8d:3f:71:9d:64:45:05:81:81:
                    d5:6b:df:f5:66:0b:42:da:10:fc:6e:58:cd:a1:cc:
                    12:71:fe:84:95:02:1b:53:3f:f2:7f:41:aa:4f:f0:
                    29:f0:10:37:50:67:8b:6e:81:88:f0:8a:b2:ff:fb:
                    a7:8d:8b:d8:c1:ba:c9:ec:42:10:a2:b9:1e:99:f5:
                    d2:93:b9:9b:ab:56:71:16:a3:77:6b:30:f3:e7:61:
                    9e:22:a6:f6:dc:c1:a2:28:44:51:de:81:23:51:f6:
                    42:39:69:cf:ea:b4:e8:ec:e3:8f:e7:21:ba:05:fd:
                    0d:ea:fe:7e:ed:55:4b:87:d3:13:04:51:32:60:71:
                    66:25:db:ee:a9:51:e2:e4:ad:4b:b5:00:18:44:9f:
                    41:4f:72:ea:1c:e1:1b:ba:ba:08:6c:c2:f3:ed:55:
                    12:b3:fd:89:57:ed:43:be:4b:5b:ee:37:d9:11:89:
                    c9:67:aa:37:03:76:9f:25:82:d5:a5:93:bb:50:cf:
                    1c:56:38:50:6c:a5:a8:a3:ef:49:d8:ae:65:9c:b8:
                    44:89:be:c6:a4:61:b7:d7:24:79:2d:7a:90:7b:89:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2E:F6:AC:2E:AD:7F:D9:EB:92:D4:5C:67:82:EC:B4:A2:E0:BA:B9
            X509v3 Authority Key Identifier:
                keyid:52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a343030303a3a2f33342d3334203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ec:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:a2:34:39:e7:44:fb:9c:57:69:88:d8:a1:1d:ad:63:65:
         47:ff:f2:5f:ae:39:a5:7e:02:1b:bf:4b:38:e9:ea:87:f3:ad:
         93:dd:cb:81:43:92:41:69:6a:1a:4a:61:3a:48:8f:3c:00:06:
         42:83:ef:d5:fc:26:89:c5:3e:bb:08:79:d2:d6:06:c2:b1:6d:
         bf:dd:de:9d:21:8b:f5:dc:c3:41:00:5c:f8:02:52:75:43:39:
         11:45:c7:a3:97:b7:d2:54:89:2d:5b:6e:cd:00:a0:fa:1d:d1:
         45:27:9c:25:84:0b:fd:e2:bb:e4:a4:a5:14:ed:2e:ff:c0:2a:
         e4:d1:8a:9e:6f:f5:51:bb:c7:2e:53:da:fe:94:95:61:a2:0d:
         d3:bb:d9:3a:b8:95:05:8d:12:32:3e:bf:55:1c:e2:3e:60:72:
         6b:d2:a5:c9:37:e1:ba:0a:6d:f3:80:9d:64:8c:39:14:b2:5e:
         d0:4d:14:4e:12:a2:71:c8:a0:7e:db:7d:ba:b0:ce:f7:5d:47:
         bf:86:5b:cf:05:ef:35:7d:33:08:a0:a6:03:df:ed:f9:54:05:
         cd:f5:ff:ed:e2:75:4c:c7:55:ec:c0:87:2a:fc:48:a6:33:7d:
         1a:6f:84:8d:23:af:da:a7:e3:7d:8f:11:56:fe:27:26:ad:f5:
         16:1a:46:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 02:49:01 2024 by rpki-client on console-ams.rpki-client.org