Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a3a2f33332d3333203d3e20323730393436.roa
File:                     323830343a373365633a3a2f33332d3333203d3e20323730393436.roa (raw, json)
Hash identifier:          T0mtaURiGurB6EiTONM0tfjZG7mdtjiPY7JCBnUCU8o=
Subject key identifier:   93:63:33:E6:31:87:1D:34:76:B5:48:D4:0D:4A:37:5C:B6:C6:AF:CE
Certificate issuer:       /CN=52699658780E9F763780991668B33774ACEDCAE9
Certificate serial:       4BB5B3956393C3BCDC08494225431C02E894D51C
Authority key identifier: 52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a3a2f33332d3333203d3e20323730393436.roa
Signing time:             Thu 04 Apr 2024 06:49:08 +0000
ROA not before:           Thu 04 Apr 2024 06:44:08 +0000
ROA not after:            Thu 03 Apr 2025 06:49:08 +0000
asID:                     270946
IP address blocks:        2804:73ec::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b5:b3:95:63:93:c3:bc:dc:08:49:42:25:43:1c:02:e8:94:d5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52699658780E9F763780991668B33774ACEDCAE9
        Validity
            Not Before: Apr  4 06:44:08 2024 GMT
            Not After : Apr  3 06:49:08 2025 GMT
        Subject: CN=936333E631871D3476B548D40D4A375CB6C6AFCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:08:3d:b7:46:45:19:2e:97:70:a0:ec:c0:
                    6f:64:40:b0:59:cb:2c:47:48:f8:3b:3d:39:1f:c5:
                    d9:89:6e:5e:32:ba:1c:24:0a:ca:77:af:69:e3:7b:
                    ba:df:ff:5e:91:48:12:a8:81:7d:35:c1:36:db:28:
                    3c:99:45:f0:5e:89:cc:9e:9d:19:35:82:88:26:fd:
                    7a:50:08:8e:cc:c3:c8:73:c7:a5:31:1a:16:fd:72:
                    6b:cb:48:d5:46:a9:14:2f:3c:01:47:e9:40:f2:b8:
                    79:d9:51:c3:1d:d1:06:19:d7:dd:e4:3c:a0:72:39:
                    eb:7f:36:23:61:56:62:9f:0b:1d:ae:28:79:fe:2f:
                    65:f2:a1:0c:65:dc:9b:c3:11:9b:ec:12:3b:43:31:
                    e9:8d:7a:1d:c5:3a:37:6f:fc:d0:8a:ed:47:46:a2:
                    ce:73:16:92:c5:58:04:bf:e5:46:15:0c:83:bb:43:
                    69:58:e2:bf:bb:9f:8a:ed:b6:3b:66:6e:a9:d1:98:
                    02:55:da:ab:af:0d:06:71:22:a8:59:2e:4e:92:c6:
                    9a:9a:14:82:51:51:fb:4f:cb:a4:59:f2:73:9a:5b:
                    e8:07:30:05:b9:43:7b:ad:d4:5c:6a:07:d4:64:bc:
                    a9:60:36:8b:18:da:ae:2f:44:9a:5a:ce:94:e1:72:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:63:33:E6:31:87:1D:34:76:B5:48:D4:0D:4A:37:5C:B6:C6:AF:CE
            X509v3 Authority Key Identifier:
                keyid:52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a3a2f33332d3333203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ec::/33

    Signature Algorithm: sha256WithRSAEncryption
         b8:ba:be:cf:dc:39:f8:ed:90:d8:3a:1f:37:b7:c0:12:5f:92:
         14:43:ae:ac:a8:08:d0:f3:f0:81:71:cf:2e:5b:05:7d:61:58:
         49:60:75:a3:58:ba:ff:82:4a:58:0f:5d:43:5f:f2:e5:5d:b3:
         52:a2:12:74:a1:1d:93:ed:81:52:e1:a2:35:c2:f4:14:77:f5:
         d7:41:78:50:8f:fb:a3:3e:ee:fa:e6:0b:2d:5a:dd:7a:7e:f0:
         8e:a5:24:f3:1a:73:19:e2:5a:71:af:2a:b9:b5:7f:52:b7:23:
         5b:eb:bc:dc:30:49:1a:f8:cc:65:53:e8:94:5e:8f:fb:35:40:
         bc:16:fe:ab:58:6e:0b:b4:dd:c9:cd:df:39:48:8c:c7:49:36:
         16:f9:1d:fc:7f:bc:0d:47:25:4b:93:da:c8:3f:7f:86:e0:83:
         8f:10:52:bc:73:8b:ff:9d:00:65:42:5d:53:f7:d9:95:a0:07:
         04:90:af:4a:ae:9e:20:8a:5c:b6:f5:16:29:32:f1:b1:a1:9b:
         85:41:33:a9:aa:f4:20:f9:78:d2:90:ab:a2:f4:6a:72:82:a2:
         4f:80:8c:57:6f:2d:95:46:cf:9d:c4:fe:86:06:50:a4:dc:6c:
         cc:60:a5:87:8c:fa:f6:8f:9b:3f:e6:85:a8:88:5e:47:52:14:
         bc:70:76:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 02:49:01 2024 by rpki-client on console-ams.rpki-client.org