Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/323830343a386463383a3a2f33322d313238203d3e20323733333830.roa
File:                     323830343a386463383a3a2f33322d313238203d3e20323733333830.roa (raw, json)
Hash identifier:          RuImCJJG+mdri8eNpWIsO44moueEe/yeAM1mgtc9dY8=
Subject key identifier:   77:7F:D5:D0:67:FC:7B:EF:F4:71:1A:07:13:D5:F9:E4:23:BB:BA:C3
Certificate issuer:       /CN=73C6CA6B6D6035095703AC37B90558CAF03A7527
Certificate serial:       6EB79064A4067649C5A8FA155EE3FD30A0ACDF9C
Authority key identifier: 73:C6:CA:6B:6D:60:35:09:57:03:AC:37:B9:05:58:CA:F0:3A:75:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C6CA6B6D6035095703AC37B90558CAF03A7527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/323830343a386463383a3a2f33322d313238203d3e20323733333830.roa
Signing time:             Fri 04 Oct 2024 13:20:34 +0000
ROA not before:           Fri 04 Oct 2024 13:15:34 +0000
ROA not after:            Fri 03 Oct 2025 13:20:34 +0000
asID:                     273380
IP address blocks:        2804:8dc8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b7:90:64:a4:06:76:49:c5:a8:fa:15:5e:e3:fd:30:a0:ac:df:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C6CA6B6D6035095703AC37B90558CAF03A7527
        Validity
            Not Before: Oct  4 13:15:34 2024 GMT
            Not After : Oct  3 13:20:34 2025 GMT
        Subject: CN=777FD5D067FC7BEFF4711A0713D5F9E423BBBAC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8a:00:a1:f8:b1:71:78:31:23:6a:fd:0a:e1:
                    a3:73:31:32:5a:50:c3:ec:b9:d1:3c:dc:f3:29:01:
                    4c:ea:e6:5a:b3:82:b2:4b:e7:f5:60:be:8c:7c:9d:
                    e6:72:bc:39:21:dd:fe:80:fd:44:47:7d:0c:f7:c4:
                    76:0c:90:7a:f3:22:e3:df:9b:73:08:2f:1a:00:0b:
                    19:3b:82:69:a9:3a:25:dc:c1:07:2c:99:0e:ef:80:
                    bc:2a:99:b6:53:2d:3f:07:d2:0a:68:cf:98:d6:84:
                    f6:5b:10:de:76:4c:2c:29:d8:28:c7:f1:ed:ae:37:
                    ac:1a:d6:87:b7:c9:dd:3f:14:c1:ea:81:ba:fa:c2:
                    d8:f3:fe:29:bd:59:1d:8c:dc:94:97:7f:43:76:7e:
                    a0:18:f9:e9:e3:de:87:2a:20:f1:59:68:aa:b7:1a:
                    fe:30:50:87:25:5d:d9:5f:d9:78:d5:a8:f6:88:14:
                    f7:42:d4:6a:31:d2:59:c2:70:1b:67:87:a7:cb:29:
                    e9:81:1b:b5:af:b0:6d:13:00:cf:aa:8d:9a:17:a6:
                    6a:cd:8b:2c:b0:21:b6:e5:7e:7b:9a:f2:4d:bf:8a:
                    57:d3:e9:70:d8:3b:a7:4d:e9:8c:eb:08:ae:bc:db:
                    3f:f4:14:67:58:6b:6e:01:78:b8:13:e6:65:e2:63:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7F:D5:D0:67:FC:7B:EF:F4:71:1A:07:13:D5:F9:E4:23:BB:BA:C3
            X509v3 Authority Key Identifier:
                keyid:73:C6:CA:6B:6D:60:35:09:57:03:AC:37:B9:05:58:CA:F0:3A:75:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/73C6CA6B6D6035095703AC37B90558CAF03A7527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C6CA6B6D6035095703AC37B90558CAF03A7527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/323830343a386463383a3a2f33322d313238203d3e20323733333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:e0:e8:84:29:77:05:30:77:58:17:db:dd:ab:8e:0c:ae:bb:
         95:79:83:84:3a:82:fb:31:59:b2:83:4e:80:21:e0:a8:21:29:
         43:b8:d3:4d:80:23:35:f7:3a:5f:f2:51:68:ad:4e:fc:ec:7f:
         3b:66:28:4a:64:72:97:0e:d3:a9:52:90:0c:1e:8c:5f:d8:41:
         0c:ca:66:7f:fe:56:71:f4:72:f3:98:e0:79:98:24:58:b1:41:
         b8:6d:5f:b6:a1:69:6d:13:b3:af:cf:d3:c0:88:da:21:cf:82:
         c4:c4:28:e7:9e:c4:af:d5:be:38:e9:46:0d:24:27:ba:b4:1c:
         41:b4:14:4d:f9:b8:85:c9:e0:2d:e8:db:6d:d5:e2:1e:ce:90:
         b2:c9:69:b4:80:9e:00:6c:82:1e:ae:e9:51:96:97:54:27:28:
         84:29:e3:9a:9c:25:73:6c:ce:64:3d:2e:0b:6c:1c:bf:aa:17:
         d3:91:ac:47:b2:bf:66:d0:58:54:96:e4:e4:a6:ff:76:61:0a:
         7e:a4:cc:b6:d1:50:a1:f6:f0:d5:a7:c0:1f:29:33:b1:e8:d9:
         7c:67:fd:75:2d:2d:48:06:a2:df:73:a2:99:97:a6:9e:f7:61:
         98:85:29:ae:5f:3c:0f:63:23:40:b5:82:d2:3c:8c:17:e4:55:
         15:38:bf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 19:11:13 2024 by rpki-client on console-ams.rpki-client.org