Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/323830343a3334303a323030303a3a2f33362d3336203d3e203238313635.roa
File:                     323830343a3334303a323030303a3a2f33362d3336203d3e203238313635.roa (raw, json)
Hash identifier:          kfoA0PiTpsXKYKsx6+cl8oIuVxo9Pj6F4R//vBb4u6E=
Subject key identifier:   9E:70:45:B5:FE:70:EB:A8:2F:40:C3:79:DD:52:7A:33:71:C0:32:75
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       0C4717FBA68987C4C10F25DFD984CBA6DF919D11
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/323830343a3334303a323030303a3a2f33362d3336203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 18:45:24 +0000
ROA not before:           Mon 01 Jul 2024 18:40:24 +0000
ROA not after:            Mon 30 Jun 2025 18:45:24 +0000
asID:                     28165
IP address blocks:        2804:340:2000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:47:17:fb:a6:89:87:c4:c1:0f:25:df:d9:84:cb:a6:df:91:9d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 18:40:24 2024 GMT
            Not After : Jun 30 18:45:24 2025 GMT
        Subject: CN=9E7045B5FE70EBA82F40C379DD527A3371C03275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:be:fa:ba:cf:43:76:11:55:64:92:b0:e1:1d:
                    7a:0c:2c:e9:87:f0:83:fe:f3:50:7e:28:25:e8:49:
                    40:91:44:17:87:c1:2b:2a:35:89:c7:9d:53:8f:56:
                    5d:bf:74:e5:21:19:b5:2a:51:2e:97:64:28:ec:07:
                    37:18:93:42:95:8f:7a:65:c0:3f:12:e2:03:30:27:
                    04:16:a5:83:1c:2c:0f:6e:55:8d:e4:c2:2c:8c:a4:
                    e4:81:16:87:c4:ad:be:32:9a:a1:2f:64:d9:2e:b9:
                    b9:92:81:54:e6:4a:47:ab:bb:80:dc:be:3e:aa:3d:
                    77:b3:ac:14:ec:ca:2a:f8:5e:73:21:fa:b7:42:62:
                    92:35:d4:cc:b5:d3:69:ac:e3:e3:d0:08:da:7d:1f:
                    82:99:2d:ba:c2:8b:e5:71:0d:3c:26:f7:f9:67:74:
                    bf:35:f3:9b:9c:07:65:c7:9f:cf:5d:8d:b9:31:23:
                    a7:37:f6:df:d6:41:d2:2d:d2:5c:79:0d:ad:26:e7:
                    31:0e:70:d3:8a:a4:8e:1e:59:19:44:ea:f9:d5:ce:
                    14:09:8d:f2:4d:c9:13:24:81:b2:6e:8c:bd:18:2d:
                    36:5a:f4:07:6a:b8:c3:96:db:5b:2d:2e:0b:d2:39:
                    76:ef:d1:e1:fa:30:d4:08:21:ea:fe:da:d8:88:97:
                    32:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:70:45:B5:FE:70:EB:A8:2F:40:C3:79:DD:52:7A:33:71:C0:32:75
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/323830343a3334303a323030303a3a2f33362d3336203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:340:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         73:98:ab:5b:d5:a7:e7:e7:2d:e3:06:9a:b7:f1:1f:bc:53:30:
         17:b3:60:1e:4a:b6:2b:43:a6:b8:30:e5:81:7a:13:d9:47:1d:
         25:40:5d:67:99:cb:71:f6:ab:5b:9b:38:da:38:40:dc:d8:52:
         2c:d8:85:dd:f1:fd:a3:78:09:b0:db:5d:81:0c:7d:79:60:21:
         c2:e6:dc:5e:5a:8b:f2:a5:4a:8c:b0:0a:98:04:f1:fd:f1:0d:
         aa:9b:fa:c3:28:7f:38:18:b1:08:24:d7:0e:d3:44:60:6e:3f:
         50:a5:d7:bd:65:ea:31:55:e5:18:2a:f8:98:63:d6:19:5a:ec:
         9a:4e:6a:25:b9:17:4e:f6:07:47:16:ac:37:9c:13:d5:d7:0a:
         e8:9c:54:6c:f0:97:c1:e4:9b:40:a8:34:6d:8c:a6:70:b6:03:
         47:a2:d9:ec:81:fa:0c:e7:02:7b:3b:ca:73:cf:32:f2:6e:0b:
         74:10:db:19:9f:59:b3:e9:0a:99:a8:b4:86:74:ed:39:2e:46:
         2e:8e:6b:70:43:37:0f:df:f7:46:48:ee:09:e9:e2:11:1e:4f:
         71:a8:86:80:83:b1:ec:4c:e0:74:70:d8:92:89:3b:26:21:f3:
         4f:ed:49:35:f0:a1:30:26:a1:4d:d1:f1:e0:bf:44:73:bc:d6:
         ff:88:3a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org