Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a383030303a3a2f33332d3333203d3e20323730383134.roa
File:                     323830343a6637303a383030303a3a2f33332d3333203d3e20323730383134.roa (raw, json)
Hash identifier:          fKxPb6g1K5ojeQMvren6i/4XEm9h7q2xsBqfD+XvqIU=
Subject key identifier:   24:FD:21:BB:FB:C5:F8:81:44:B9:1E:64:06:09:59:A7:31:A2:B8:65
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       781C08643DE288889E46326C53A0BACB2160B4A2
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a383030303a3a2f33332d3333203d3e20323730383134.roa
Signing time:             Thu 22 Aug 2024 23:14:25 +0000
ROA not before:           Thu 22 Aug 2024 23:09:25 +0000
ROA not after:            Thu 21 Aug 2025 23:14:25 +0000
asID:                     270814
IP address blocks:        2804:f70:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1c:08:64:3d:e2:88:88:9e:46:32:6c:53:a0:ba:cb:21:60:b4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug 22 23:09:25 2024 GMT
            Not After : Aug 21 23:14:25 2025 GMT
        Subject: CN=24FD21BBFBC5F88144B91E64060959A731A2B865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:68:e0:b5:e4:eb:cc:f8:f6:12:b8:ce:35:
                    e0:71:5c:ac:2c:a9:71:59:72:24:d0:f6:9b:ed:5b:
                    58:f0:0c:c1:49:0f:1a:8c:2d:f9:ce:a4:e3:7d:9f:
                    d7:2b:12:c0:84:2e:b2:c7:54:e4:55:29:27:c3:3a:
                    d0:f4:47:03:66:ff:e7:04:bd:eb:4d:c1:45:1b:45:
                    c8:4c:5d:9c:37:fd:4e:61:bf:28:db:3a:ec:ce:87:
                    f0:1c:f1:64:f9:e5:81:06:a3:55:c7:a8:9f:ee:5b:
                    b5:04:a7:36:68:81:d3:e5:29:7a:90:2c:fd:d2:ad:
                    45:03:93:42:b2:3a:4b:15:0b:b1:ca:a2:03:e0:6e:
                    e7:b1:a9:0e:d3:c0:e3:05:d9:1e:db:52:5e:84:e0:
                    01:2f:8c:e8:42:00:50:bb:88:53:da:66:90:4e:6a:
                    f1:9c:1b:70:6c:b1:c6:d0:81:44:f4:08:6d:0d:e8:
                    ea:5f:47:84:78:c3:24:c3:2e:5a:59:3a:64:28:b2:
                    02:b3:86:02:5c:41:a4:39:63:88:d2:b6:d8:dd:73:
                    0b:18:b4:36:16:31:51:c2:be:c2:6c:66:47:6e:98:
                    8c:66:ed:4f:21:e9:12:11:da:1c:7c:89:88:b9:b1:
                    01:5d:07:bf:9b:b3:4a:a9:9d:53:fc:eb:fa:97:f5:
                    77:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FD:21:BB:FB:C5:F8:81:44:B9:1E:64:06:09:59:A7:31:A2:B8:65
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a383030303a3a2f33332d3333203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f70:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3f:c4:79:2b:65:68:b1:0d:10:e1:39:bd:6f:fe:80:35:fa:a8:
         00:6f:bd:84:7c:47:83:a1:71:44:81:26:f8:9c:ed:4d:db:24:
         9f:2b:f6:1f:bc:7e:e0:fe:4a:38:9d:50:c9:b9:1a:5e:ec:4f:
         4b:8f:d4:3a:a8:2d:87:dc:4c:3b:b9:99:18:39:b9:fe:cb:2c:
         a9:3f:a5:47:29:a5:88:f8:a3:68:20:7d:2a:6a:ce:18:2e:c3:
         9e:27:12:db:d0:8c:99:bf:f1:e1:20:89:28:b1:55:bf:ca:0e:
         1e:ec:b0:ba:70:66:d5:c0:ac:e7:bb:68:a0:51:2f:c3:5b:91:
         73:c6:dd:89:f8:aa:a2:4a:83:f7:40:1c:21:65:3d:4a:ca:83:
         ac:2e:41:c6:c0:7f:f2:3f:98:67:65:cf:ab:fe:f5:6c:8a:c6:
         93:c9:75:d8:52:d6:98:9a:27:84:08:3e:46:71:f8:1e:01:3d:
         e5:c8:50:eb:84:fc:9c:81:20:45:cb:6c:ce:e6:5b:b9:fb:c0:
         fb:76:46:ad:65:61:cc:f6:83:91:9b:af:f5:36:34:da:81:d2:
         87:05:93:8f:8b:e6:41:23:dc:cc:28:1d:7e:23:43:9b:d3:78:
         15:17:08:30:33:5b:be:1e:b2:72:01:07:1c:7d:7a:e8:4b:a7:
         1d:98:c6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 06:07:36 2024 by rpki-client on console-ams.rpki-client.org