Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/323830343a373262343a3a2f33322d3336203d3e20323730383730.roa
File:                     323830343a373262343a3a2f33322d3336203d3e20323730383730.roa (raw, json)
Hash identifier:          DVJoj8AfmpUPRdw9OApKSEeKrgnW7jaGcptwous0w8M=
Subject key identifier:   74:4D:10:E1:C9:54:12:B4:3C:1E:21:3C:F1:A1:35:74:6A:BD:FF:AA
Certificate issuer:       /CN=DD435A9764327F6D37555BA0F1795CEF97B6A225
Certificate serial:       0C2417C2CC1088BEBF3ECEF9583EC49F5E0C9C33
Authority key identifier: DD:43:5A:97:64:32:7F:6D:37:55:5B:A0:F1:79:5C:EF:97:B6:A2:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD435A9764327F6D37555BA0F1795CEF97B6A225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/323830343a373262343a3a2f33322d3336203d3e20323730383730.roa
Signing time:             Tue 20 Aug 2024 20:51:27 +0000
ROA not before:           Tue 20 Aug 2024 20:46:27 +0000
ROA not after:            Tue 19 Aug 2025 20:51:27 +0000
asID:                     270870
IP address blocks:        2804:72b4::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:24:17:c2:cc:10:88:be:bf:3e:ce:f9:58:3e:c4:9f:5e:0c:9c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD435A9764327F6D37555BA0F1795CEF97B6A225
        Validity
            Not Before: Aug 20 20:46:27 2024 GMT
            Not After : Aug 19 20:51:27 2025 GMT
        Subject: CN=744D10E1C95412B43C1E213CF1A135746ABDFFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:fe:c8:21:50:92:18:9c:5b:75:e1:17:1c:
                    24:24:c3:c5:ee:8e:ad:71:04:05:73:a9:b8:84:e0:
                    23:26:5e:fc:a8:9c:29:d4:dc:03:dd:3d:cc:e0:69:
                    ba:a5:82:4e:65:94:b5:f2:b9:dc:49:b4:4c:17:9e:
                    5b:59:2c:8d:d0:90:a8:a1:8a:de:7e:c1:52:ff:b7:
                    87:2c:7f:14:f2:4d:29:7b:ad:06:67:b5:9f:d6:ac:
                    5a:00:6f:7f:3e:7d:fa:af:ac:6b:3e:aa:0c:14:e4:
                    4a:c6:aa:be:6e:e8:8f:6f:cf:51:38:c9:6d:73:09:
                    50:0c:ed:e1:f2:98:52:f5:05:10:54:2b:77:dd:f4:
                    01:89:27:e4:90:87:c3:98:ed:d8:13:98:d4:78:6f:
                    96:77:3d:f7:8d:9a:b6:cc:9e:72:24:52:87:99:50:
                    36:e3:d6:3d:64:86:bd:2e:7f:41:31:89:f3:22:76:
                    48:20:d8:5d:cc:3d:1d:f8:31:31:20:5f:9b:3f:c4:
                    38:f1:87:78:20:b9:25:22:28:ce:2c:24:26:03:76:
                    ef:46:29:2d:e0:95:57:ba:b0:53:7d:2a:a3:56:42:
                    b1:98:b0:57:75:c4:32:7d:79:a7:69:04:46:53:76:
                    92:67:e8:f0:c2:fc:b5:f3:a3:6e:9d:cd:3d:1e:d1:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4D:10:E1:C9:54:12:B4:3C:1E:21:3C:F1:A1:35:74:6A:BD:FF:AA
            X509v3 Authority Key Identifier:
                keyid:DD:43:5A:97:64:32:7F:6D:37:55:5B:A0:F1:79:5C:EF:97:B6:A2:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/DD435A9764327F6D37555BA0F1795CEF97B6A225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD435A9764327F6D37555BA0F1795CEF97B6A225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/323830343a373262343a3a2f33322d3336203d3e20323730383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:ae:21:21:f4:81:b4:b0:a2:58:30:5e:cd:6d:50:84:89:
         27:70:75:70:b6:a5:05:ff:fd:b9:84:03:3e:73:17:79:29:5a:
         5c:a5:e8:13:d5:f9:fa:5d:2f:11:54:89:b8:60:aa:c9:98:f8:
         56:83:de:23:3f:54:40:fd:f9:29:60:b3:05:a1:f8:8f:1e:2e:
         e9:e2:69:c9:37:ad:65:d5:65:f4:89:40:6b:cd:f1:0a:71:bf:
         a5:a6:ce:49:3c:3e:a0:7f:6a:a2:80:9f:7e:0b:aa:2f:b0:43:
         53:7b:1f:21:a3:24:d1:7b:c9:2d:88:29:cc:59:67:11:6b:c7:
         9f:01:81:75:33:48:aa:72:8e:63:c1:54:ba:ca:b1:2d:d9:81:
         29:29:da:14:1b:e4:f5:f7:cd:32:5e:d3:8f:66:91:c5:3e:09:
         a4:07:1e:df:2b:25:a5:e2:be:60:90:b4:c0:89:7f:01:1c:f3:
         25:11:0c:08:4a:e8:d8:8e:ed:17:6e:5e:3d:fe:eb:b0:d6:db:
         de:97:79:df:94:5b:d2:c7:65:4e:5d:c6:40:d4:e9:b7:41:2a:
         52:3f:b6:ee:90:7b:1c:e6:f9:7f:97:84:65:af:16:6e:b2:d0:
         cc:13:1f:0b:6a:87:db:b7:d8:cd:94:21:3b:85:a9:ab:75:ca:
         c9:56:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 12:04:27 2024 by rpki-client on console-fra.rpki-client.org