Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/323830343a373133633a3a2f33322d3334203d3e20323730373736.roa
File:                     323830343a373133633a3a2f33322d3334203d3e20323730373736.roa (raw, json)
Hash identifier:          kILX8uBl+28OlRFzdnupkykoIt1e3wghRaoyCpAs37E=
Subject key identifier:   39:9F:3B:32:00:03:68:18:91:B4:5D:1D:7B:1D:11:26:37:C8:5E:03
Certificate issuer:       /CN=E9B14AE5FC1A89493A4406FDDBDCC82C3A601E41
Certificate serial:       42A297648F49C282D6465696257252CD7F4BBE52
Authority key identifier: E9:B1:4A:E5:FC:1A:89:49:3A:44:06:FD:DB:DC:C8:2C:3A:60:1E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B14AE5FC1A89493A4406FDDBDCC82C3A601E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/323830343a373133633a3a2f33322d3334203d3e20323730373736.roa
Signing time:             Mon 29 Jul 2024 13:43:27 +0000
ROA not before:           Mon 29 Jul 2024 13:38:27 +0000
ROA not after:            Mon 28 Jul 2025 13:43:27 +0000
asID:                     270776
IP address blocks:        2804:713c::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a2:97:64:8f:49:c2:82:d6:46:56:96:25:72:52:cd:7f:4b:be:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9B14AE5FC1A89493A4406FDDBDCC82C3A601E41
        Validity
            Not Before: Jul 29 13:38:27 2024 GMT
            Not After : Jul 28 13:43:27 2025 GMT
        Subject: CN=399F3B320003681891B45D1D7B1D112637C85E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:6c:52:05:b6:cf:44:ac:f6:d3:be:1f:a2:
                    3e:5b:08:39:92:89:79:f8:74:4b:b8:ec:b9:67:82:
                    5b:2c:93:03:ae:0d:4c:62:99:5a:b3:4f:de:27:05:
                    81:a3:c0:12:0e:db:75:31:0f:05:f3:ad:2a:94:d4:
                    d8:31:d5:29:76:fa:62:72:14:34:ec:d5:cf:7c:2b:
                    b2:31:dc:45:50:ba:83:2b:ac:c2:84:2a:bd:b7:4d:
                    5d:7c:66:e9:99:94:8f:5a:a9:a0:56:b2:9c:ec:75:
                    96:77:74:be:1f:53:18:d9:6b:72:7c:4e:d5:69:e4:
                    12:66:0a:80:a2:d6:79:0d:cc:03:23:e1:79:8d:99:
                    1f:a4:0c:d1:41:0b:37:85:de:4f:e9:89:e2:94:24:
                    fe:c5:d0:b1:5b:04:00:b0:af:35:d1:01:42:fa:ba:
                    8e:8d:75:db:c9:87:ad:86:19:5a:f4:07:b0:cb:7f:
                    bc:cc:f4:9c:23:84:7c:10:55:7a:d3:b8:62:a4:46:
                    37:1e:25:b9:54:bc:cc:4b:1b:48:33:07:e3:b7:6e:
                    34:79:b8:ce:ba:b8:ce:35:c3:4b:1a:bd:3d:66:5b:
                    45:02:e5:3b:ab:3e:ae:ae:31:2d:af:69:11:37:69:
                    c7:21:1a:44:52:3f:f5:f3:ef:9b:72:35:56:86:19:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9F:3B:32:00:03:68:18:91:B4:5D:1D:7B:1D:11:26:37:C8:5E:03
            X509v3 Authority Key Identifier:
                keyid:E9:B1:4A:E5:FC:1A:89:49:3A:44:06:FD:DB:DC:C8:2C:3A:60:1E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/E9B14AE5FC1A89493A4406FDDBDCC82C3A601E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B14AE5FC1A89493A4406FDDBDCC82C3A601E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/323830343a373133633a3a2f33322d3334203d3e20323730373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:713c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:e7:a3:54:74:50:97:b7:ab:de:a0:f2:5b:b6:b4:10:8f:5d:
         48:b2:90:c4:5b:0a:c3:6e:98:61:ff:20:19:3b:9f:30:57:da:
         c9:eb:fe:36:96:23:3a:24:ae:22:ff:41:06:fe:17:f6:f4:1d:
         64:f6:71:e0:b0:06:fd:a7:62:87:24:c2:10:e7:4f:79:55:59:
         04:81:a3:fc:d1:0e:8a:0c:77:31:fc:e5:9e:ca:6b:3c:4f:64:
         07:9a:71:fa:65:5f:2f:88:01:2d:a7:04:b7:11:fd:98:6b:8b:
         50:9a:ab:6a:62:26:e7:34:97:07:fb:df:dc:83:b2:c1:de:5b:
         94:60:ce:df:d7:d9:a7:ed:e0:bd:d8:ee:cc:ed:f8:7d:78:00:
         aa:0e:40:47:8e:8f:06:bf:d2:cd:6c:7f:19:ea:b6:9e:9b:f1:
         f7:68:2d:d7:2a:e5:e3:53:3a:0c:6b:75:76:1d:88:2c:65:e6:
         5c:fb:84:dd:ab:8d:b9:e6:2c:7a:76:f0:63:94:94:f5:e2:22:
         d6:b0:1b:67:14:8e:8a:9d:d4:f1:b0:99:ba:5e:1d:c8:b4:2d:
         4e:77:ed:f2:89:1f:da:27:36:b2:28:60:8a:fc:5f:b2:a0:b7:
         2a:c0:aa:d0:30:26:9c:8d:89:06:98:d4:da:6d:95:4e:22:c8:
         80:8d:5e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 12:42:50 2024 by rpki-client on console-ams.rpki-client.org