Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a3a2f33332d3333203d3e20323731333533.roa
File:                     323830343a376133303a3a2f33332d3333203d3e20323731333533.roa (raw, json)
Hash identifier:          fHhQJ+NZde7Ny3G3sAymPb6k0KpDdJPwneI2qJz7dtk=
Subject key identifier:   DE:94:18:E0:4A:12:E4:83:CA:DF:06:1A:17:0D:EB:ED:F2:4E:8F:CF
Certificate issuer:       /CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
Certificate serial:       77A260712B4FEA10DB833772A0700DF572CB4D47
Authority key identifier: 63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a3a2f33332d3333203d3e20323731333533.roa
Signing time:             Thu 04 Apr 2024 20:55:47 +0000
ROA not before:           Thu 04 Apr 2024 20:50:47 +0000
ROA not after:            Thu 03 Apr 2025 20:55:47 +0000
asID:                     271353
IP address blocks:        2804:7a30::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a2:60:71:2b:4f:ea:10:db:83:37:72:a0:70:0d:f5:72:cb:4d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
        Validity
            Not Before: Apr  4 20:50:47 2024 GMT
            Not After : Apr  3 20:55:47 2025 GMT
        Subject: CN=DE9418E04A12E483CADF061A170DEBEDF24E8FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:16:bf:2d:fc:3d:9d:fe:be:48:1d:0c:1f:
                    d1:a1:ee:33:26:55:0f:a4:0e:19:38:92:aa:60:f8:
                    28:e5:e0:11:0b:56:f4:af:43:43:ed:0f:b5:1f:92:
                    b1:91:39:c2:73:85:66:4f:08:9e:cc:21:cc:6a:2d:
                    98:00:61:c8:14:2d:0a:dd:d5:25:93:07:f3:a1:f1:
                    74:09:06:03:f0:1d:07:2a:10:ef:b7:9b:09:b3:b1:
                    5b:7b:61:04:4d:a8:c8:62:e8:9d:dd:8b:e5:13:46:
                    be:e2:2d:32:fa:53:c2:a1:85:8c:8a:b0:f0:10:c3:
                    f7:96:6d:a2:f7:99:3f:05:25:21:17:01:7c:f9:21:
                    c1:d5:8d:ff:e5:99:f8:df:5e:7a:18:4d:69:96:f3:
                    5e:ea:9a:ae:66:bc:19:89:33:e5:2e:e2:5e:aa:b4:
                    6e:a6:79:41:bb:57:fa:75:2f:6f:96:1c:00:e2:f9:
                    ef:25:fd:c2:5f:29:d8:35:f7:19:e4:0b:74:0d:5f:
                    ca:f6:15:1a:ee:34:f5:87:86:10:55:fe:a6:a8:fb:
                    77:3e:ef:15:58:c1:0b:0d:07:dc:b3:b3:fa:03:90:
                    cd:ad:19:2f:38:0d:30:39:73:5d:23:df:b3:0b:05:
                    a0:1c:87:7f:85:c8:67:b7:eb:2c:d1:a0:a0:e8:11:
                    2c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:94:18:E0:4A:12:E4:83:CA:DF:06:1A:17:0D:EB:ED:F2:4E:8F:CF
            X509v3 Authority Key Identifier:
                keyid:63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a3a2f33332d3333203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30::/33

    Signature Algorithm: sha256WithRSAEncryption
         56:07:05:2f:be:b4:19:18:7f:27:8b:4f:68:ae:07:47:e1:44:
         73:ed:20:0d:f1:61:08:62:0c:9b:3d:0e:ae:26:5b:be:5d:c3:
         80:76:9d:74:46:49:86:61:3e:f4:0a:c8:20:17:6b:d5:5b:9b:
         0d:be:49:8b:64:c4:42:a2:32:14:c6:4f:98:bd:4d:d1:8c:4d:
         68:5f:b2:bb:fb:da:f8:80:da:76:31:29:51:38:2b:86:c1:7c:
         52:b2:46:35:a9:3d:ee:e9:60:b4:33:d2:2b:65:53:33:5f:3f:
         fb:35:f3:6e:5d:d1:e9:72:c4:b1:c6:7e:4b:4b:4b:a4:2a:c1:
         7a:1f:27:ca:e4:6c:ae:11:64:4c:a3:2a:40:04:1c:b9:58:19:
         5c:89:e0:8a:c0:8c:b4:1f:14:db:45:e1:97:5d:3e:4c:77:b4:
         ef:fd:8e:2b:cd:64:83:01:0b:91:3c:84:6a:66:68:8a:ee:9b:
         ff:08:b3:7f:f6:16:ca:fa:7a:2a:bb:b2:9b:08:fb:45:99:d7:
         4b:5c:f1:33:5f:bc:bd:d7:dc:31:d3:27:05:5b:ef:31:96:63:
         1d:32:99:6c:2e:ce:81:99:c4:7b:28:25:3f:b3:f0:3f:a2:5d:
         d0:45:7d:34:16:14:42:2f:7f:48:9e:34:23:35:9e:2e:3e:ba:
         d8:a4:c7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 13:31:48 2024 by rpki-client on console-fra.rpki-client.org