Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a383030303a3a2f33332d3333203d3e20323731333533.roa
File:                     323830343a376133303a383030303a3a2f33332d3333203d3e20323731333533.roa (raw, json)
Hash identifier:          ZvvpsPenVezIbmcRrDCwkmOoZER2CcMX1xMVvXS/rG8=
Subject key identifier:   83:2C:D4:16:43:E7:79:C4:69:0D:87:D3:20:25:43:9D:55:76:E0:1C
Certificate issuer:       /CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
Certificate serial:       4E9BBC06E507F392D76D6DAEB61A10798A9C888E
Authority key identifier: 63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a383030303a3a2f33332d3333203d3e20323731333533.roa
Signing time:             Thu 04 Apr 2024 20:55:46 +0000
ROA not before:           Thu 04 Apr 2024 20:50:46 +0000
ROA not after:            Thu 03 Apr 2025 20:55:46 +0000
asID:                     271353
IP address blocks:        2804:7a30:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9b:bc:06:e5:07:f3:92:d7:6d:6d:ae:b6:1a:10:79:8a:9c:88:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
        Validity
            Not Before: Apr  4 20:50:46 2024 GMT
            Not After : Apr  3 20:55:46 2025 GMT
        Subject: CN=832CD41643E779C4690D87D32025439D5576E01C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:52:53:94:d5:07:4e:92:d1:08:6f:80:76:
                    39:35:af:4e:43:61:0f:fb:db:5f:cb:8b:fd:e7:63:
                    3d:22:54:15:d5:17:0e:a2:df:71:d2:98:02:d9:61:
                    5c:5b:e6:48:86:22:fd:55:7f:79:86:0d:3d:24:6b:
                    56:3f:08:13:8a:11:d8:57:03:27:a5:e3:b4:79:70:
                    57:ab:6c:c6:9d:30:14:6c:6f:c8:99:bd:79:60:16:
                    b0:93:1f:fc:2d:fc:95:b9:7e:55:b7:ea:fa:67:40:
                    d5:33:75:5f:5f:01:b5:31:b5:fe:92:09:21:cf:5e:
                    33:3e:c4:06:2e:23:31:63:78:1d:86:56:3b:38:d5:
                    b1:aa:5d:13:89:38:aa:27:f3:0a:0b:f2:42:fb:dd:
                    21:1d:f0:19:a7:10:7d:8d:f8:e4:a7:c9:5e:c9:c0:
                    21:f4:ae:1c:e8:fd:ca:03:00:a2:6b:2e:55:3d:43:
                    84:d1:26:83:c0:4b:10:0c:ae:21:4e:5b:14:32:0c:
                    f6:3d:b0:9d:25:31:37:0a:22:77:fe:45:af:e6:71:
                    1d:75:30:7d:4d:c7:23:60:d8:c1:6f:fb:26:95:0f:
                    93:50:26:55:5c:a2:9b:2b:36:bb:80:b0:95:8e:42:
                    67:37:b6:c1:05:8b:6a:64:36:23:bd:9f:27:ad:36:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2C:D4:16:43:E7:79:C4:69:0D:87:D3:20:25:43:9D:55:76:E0:1C
            X509v3 Authority Key Identifier:
                keyid:63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a383030303a3a2f33332d3333203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:66:6b:fb:86:76:e3:54:7e:dd:a3:68:e8:66:8f:86:2c:bf:
         d7:d2:fe:79:9b:0c:69:ed:c7:10:9e:1c:30:a7:3b:0e:8e:5f:
         75:f2:c7:41:a0:11:b4:2b:ab:eb:db:ad:2d:e1:eb:f7:64:9f:
         b2:44:65:14:6f:a9:00:a0:ca:05:22:ad:58:be:ec:b8:32:cf:
         7f:47:e9:c1:21:fc:30:b9:fd:3a:1f:96:17:e3:92:97:3c:c5:
         41:af:0a:9f:db:71:cf:0d:cc:31:c8:e0:8b:8c:3e:b3:8d:16:
         39:2a:7a:6e:92:b5:9e:bf:34:ef:c1:22:8c:34:c7:12:d7:9c:
         88:08:2d:2e:fa:e5:0a:cf:38:5d:57:b9:34:e2:d3:1b:76:97:
         22:cc:4c:8a:2e:06:13:8a:02:43:3a:f7:db:ca:94:4a:4e:01:
         7b:f0:0c:11:0a:49:a1:9f:d1:d7:1d:79:37:f7:3b:7c:7e:14:
         d6:43:1a:19:d8:ea:46:cd:62:6c:39:8b:b2:ba:bb:a8:16:59:
         c4:c5:20:eb:5c:61:e4:3e:13:b2:e7:eb:d3:36:41:8e:27:aa:
         a1:db:f1:e4:4d:80:99:5e:21:8a:39:b4:82:7e:cf:df:a0:7a:
         02:8c:d4:f2:17:7b:bb:34:00:91:8f:98:84:30:d2:7b:07:c8:
         ba:33:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 14:31:32 2024 by rpki-client on console-ams.rpki-client.org