Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a3a2f33342d3334203d3e20323732373339.roa
File:                     323830343a383765383a3a2f33342d3334203d3e20323732373339.roa (raw, json)
Hash identifier:          PTonuZaT86ekorfx7aWDTo0SfmhKkLo1gyiYFGuG9js=
Subject key identifier:   CE:6E:A1:FB:6E:1D:F8:4D:7B:C6:A0:CF:59:19:62:DD:89:05:B3:55
Certificate issuer:       /CN=23FF06DF1B1108721C3400360AFA788F0387915B
Certificate serial:       6B07EEFF430BAC3E0BD1D8C7686348C5D858F8D9
Authority key identifier: 23:FF:06:DF:1B:11:08:72:1C:34:00:36:0A:FA:78:8F:03:87:91:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23FF06DF1B1108721C3400360AFA788F0387915B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a3a2f33342d3334203d3e20323732373339.roa
Signing time:             Sat 17 Aug 2024 15:37:25 +0000
ROA not before:           Sat 17 Aug 2024 15:32:25 +0000
ROA not after:            Sat 16 Aug 2025 15:37:25 +0000
asID:                     272739
IP address blocks:        2804:87e8::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:07:ee:ff:43:0b:ac:3e:0b:d1:d8:c7:68:63:48:c5:d8:58:f8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23FF06DF1B1108721C3400360AFA788F0387915B
        Validity
            Not Before: Aug 17 15:32:25 2024 GMT
            Not After : Aug 16 15:37:25 2025 GMT
        Subject: CN=CE6EA1FB6E1DF84D7BC6A0CF591962DD8905B355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:ae:7e:bb:ab:c6:0a:4d:d8:33:f6:86:e4:
                    2f:a5:ce:ed:87:9f:6e:1c:b2:7b:b2:32:21:b1:11:
                    9f:cc:d8:af:5b:cd:58:77:fa:df:f8:35:b1:68:c7:
                    30:fa:75:d1:75:c0:67:4a:bc:5c:29:05:25:4d:96:
                    13:18:8f:e6:27:40:24:5f:52:40:b1:9a:6a:6d:81:
                    61:c0:85:e4:ea:fd:a4:e3:c3:bf:19:12:ca:76:5c:
                    eb:ec:f1:e4:a1:b0:db:a1:40:3e:56:53:56:47:99:
                    7e:f8:92:da:9f:58:6d:b6:34:ba:f1:81:8d:45:c7:
                    e6:6e:cc:77:58:26:88:21:18:a8:92:24:5a:1f:66:
                    4c:6b:64:b7:e3:7e:ed:da:33:8b:8b:db:e8:12:81:
                    d2:99:3a:2b:90:ea:0a:37:2d:13:44:ef:79:70:b6:
                    57:c0:c9:f1:fe:0a:d8:16:72:75:eb:f5:39:3b:7d:
                    c6:18:cd:c5:9d:fb:7c:b2:db:86:e2:b9:b3:7f:3d:
                    7d:8b:97:77:ac:b5:b9:2a:4b:7f:91:b7:e7:9d:81:
                    80:8d:00:47:4a:75:b7:e5:0a:b1:ef:80:84:cd:cf:
                    d3:22:13:6f:cc:bc:c8:86:44:3a:1c:26:4e:58:55:
                    2a:46:3d:6c:89:f7:7a:14:51:dd:89:91:fb:30:6d:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6E:A1:FB:6E:1D:F8:4D:7B:C6:A0:CF:59:19:62:DD:89:05:B3:55
            X509v3 Authority Key Identifier:
                keyid:23:FF:06:DF:1B:11:08:72:1C:34:00:36:0A:FA:78:8F:03:87:91:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/23FF06DF1B1108721C3400360AFA788F0387915B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23FF06DF1B1108721C3400360AFA788F0387915B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a3a2f33342d3334203d3e20323732373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87e8::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:b5:74:f4:73:5c:d6:08:e6:76:59:d5:7c:7c:74:3a:a2:71:
         4b:4e:68:92:2e:8e:58:ef:6e:fb:33:2b:db:16:09:f4:24:06:
         b2:1a:6c:95:26:4c:be:ca:61:50:5a:78:f2:4e:04:04:69:c8:
         a6:94:13:d0:60:54:6d:e0:ef:7c:e1:e9:f6:bc:91:b4:4b:8d:
         bf:e2:1d:ea:69:f9:11:e0:36:23:ab:e1:d1:8d:cc:6c:d2:b2:
         a4:6a:a8:8f:c1:6d:2c:0b:e3:e9:21:08:3a:fc:15:33:48:56:
         94:ab:53:b3:82:b0:54:d1:ff:f8:f6:5d:6e:25:ad:1b:40:e5:
         ef:52:38:16:6b:53:76:23:e8:28:f7:4d:c3:2b:71:b6:1e:a1:
         de:87:99:f2:24:b4:b0:ff:d7:74:84:3c:8f:12:b4:db:14:79:
         52:ec:d7:ce:d8:38:20:96:3f:76:89:1d:44:fa:16:61:ac:e0:
         dd:c2:40:ec:ea:e9:1a:a7:4b:9e:8b:30:53:f4:54:82:84:7c:
         40:5f:d8:29:4f:38:a2:35:7b:a6:dd:ba:30:a4:5e:23:fa:d0:
         67:a5:d0:f5:78:9d:da:a7:15:f2:24:1d:9f:b1:c4:63:c3:a8:
         a7:f9:09:0e:8f:97:d1:e7:ce:3a:a9:02:02:7e:f1:f8:2a:dc:
         72:50:b7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 14:42:34 2024 by rpki-client on console-ams.rpki-client.org