Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a383030303a3a2f33342d3334203d3e20323730393436.roa
File:                     323830343a373365633a383030303a3a2f33342d3334203d3e20323730393436.roa (raw, json)
Hash identifier:          HO2gyvs7bTLBygHy7xBLszwv4ZGoeeNcrY1bmjKqR90=
Subject key identifier:   42:C4:9D:51:2E:3A:2A:35:36:70:FF:F3:76:EF:F8:76:9F:F1:06:AF
Certificate issuer:       /CN=52699658780E9F763780991668B33774ACEDCAE9
Certificate serial:       31C8D8A82C92D353099EB02E148618A35F08788A
Authority key identifier: 52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a383030303a3a2f33342d3334203d3e20323730393436.roa
Signing time:             Thu 04 Apr 2024 06:49:09 +0000
ROA not before:           Thu 04 Apr 2024 06:44:09 +0000
ROA not after:            Thu 03 Apr 2025 06:49:09 +0000
asID:                     270946
IP address blocks:        2804:73ec:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c8:d8:a8:2c:92:d3:53:09:9e:b0:2e:14:86:18:a3:5f:08:78:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52699658780E9F763780991668B33774ACEDCAE9
        Validity
            Not Before: Apr  4 06:44:09 2024 GMT
            Not After : Apr  3 06:49:09 2025 GMT
        Subject: CN=42C49D512E3A2A353670FFF376EFF8769FF106AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:9f:93:5a:cd:c2:10:55:eb:9b:2f:a4:23:
                    f4:05:58:f2:b8:32:c3:df:12:a7:a6:d0:f9:bc:8e:
                    a1:48:e9:f1:bd:0e:d5:fc:cf:a9:34:c7:86:1e:51:
                    49:0a:9a:43:1b:a9:1f:f5:29:cc:70:9f:b6:38:af:
                    71:06:c3:47:7b:bc:ab:55:ff:e7:9d:5f:b3:76:4a:
                    7e:be:45:38:28:33:12:d0:66:14:63:ef:88:47:bf:
                    7c:8d:35:0d:65:85:75:ed:71:95:60:b9:a0:46:56:
                    aa:09:8c:0a:6d:40:11:04:66:46:f0:20:31:db:11:
                    11:ea:46:3c:f9:ed:9e:5a:7a:f4:e8:cc:3f:5a:27:
                    11:ec:9b:c6:2a:02:a6:2f:ac:42:63:3c:fd:69:d3:
                    73:8c:5a:f0:a8:10:bc:4c:fd:1c:1e:21:56:6c:03:
                    6b:1a:cf:f5:40:55:59:d4:b4:a6:40:0b:ed:3a:b9:
                    a2:ee:b7:70:d3:0d:82:86:e7:65:a0:5d:59:bd:d5:
                    6a:3f:96:5c:1f:35:bb:bf:df:2e:b2:2b:41:b4:4c:
                    fc:f1:e1:90:cb:e8:95:ee:34:1c:a6:15:14:72:2d:
                    90:d6:81:d0:f5:8d:0a:60:88:3b:95:be:9d:1f:21:
                    af:33:d9:ae:fc:26:2c:14:53:7a:ec:0d:fd:17:4a:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C4:9D:51:2E:3A:2A:35:36:70:FF:F3:76:EF:F8:76:9F:F1:06:AF
            X509v3 Authority Key Identifier:
                keyid:52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a383030303a3a2f33342d3334203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ec:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:0b:62:c1:b6:7c:e8:8a:e7:e8:29:5a:61:80:7e:19:c0:44:
         1a:d4:c9:e6:f4:a5:7c:0a:4a:cf:cd:bc:ad:7f:a3:11:2a:03:
         4d:7c:32:b4:e6:e9:06:c0:88:1c:5d:d5:cb:d1:fc:b6:57:07:
         5b:f5:8e:54:07:3e:63:e5:8f:4d:ee:47:d5:d9:da:c7:4b:c2:
         1c:51:4b:02:57:d7:d3:f9:f8:b2:27:26:53:31:e1:04:bf:29:
         bc:43:ca:9f:71:7b:15:0b:42:45:a9:4d:b5:c7:a0:64:15:fc:
         4f:8c:a6:8b:f7:0a:3d:0e:30:b8:5d:f6:5b:8c:69:f7:aa:2a:
         04:db:99:9b:a7:0a:95:0e:4d:7a:08:5b:37:f5:1f:4d:63:ca:
         16:13:ba:ab:c7:69:86:73:c4:ca:05:eb:f9:f1:5b:57:67:dc:
         ad:bf:00:a2:3c:c6:17:30:ff:27:08:d0:fe:b1:52:39:2c:6d:
         be:ee:40:93:21:21:6b:ab:e5:9a:82:a4:d4:29:9e:f0:71:73:
         df:24:50:c2:79:dc:0d:b1:0e:fe:b2:29:42:f5:b1:eb:62:41:
         bf:e8:cb:2c:ff:95:ab:18:58:be:41:d0:eb:37:7b:70:09:0b:
         50:58:9f:1e:ac:73:26:42:7c:a8:cd:19:e3:2b:fa:d6:eb:1c:
         e4:94:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 03:32:09 2024 by rpki-client on console-fra.rpki-client.org