Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/323830343a336532383a3a2f33322d313238203d3e20323636353737.roa
File:                     323830343a336532383a3a2f33322d313238203d3e20323636353737.roa (raw, json)
Hash identifier:          kgXK7ulK2sdK5ZWZzlxMutPTFtPSbJjqev23QuzAm3k=
Subject key identifier:   CC:A1:A7:0B:4E:D3:E3:D1:1A:D9:85:A1:EF:CF:95:E7:7B:E4:4A:16
Certificate issuer:       /CN=7E693FC0717C202DB4CEF639324A1433D6C128C8
Certificate serial:       0AABFD6FDC7209B43DA47D4F0F5D9C927F1BDA79
Authority key identifier: 7E:69:3F:C0:71:7C:20:2D:B4:CE:F6:39:32:4A:14:33:D6:C1:28:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E693FC0717C202DB4CEF639324A1433D6C128C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/323830343a336532383a3a2f33322d313238203d3e20323636353737.roa
Signing time:             Wed 24 Jul 2024 13:33:01 +0000
ROA not before:           Wed 24 Jul 2024 13:28:01 +0000
ROA not after:            Wed 23 Jul 2025 13:33:01 +0000
asID:                     266577
IP address blocks:        2804:3e28::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ab:fd:6f:dc:72:09:b4:3d:a4:7d:4f:0f:5d:9c:92:7f:1b:da:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E693FC0717C202DB4CEF639324A1433D6C128C8
        Validity
            Not Before: Jul 24 13:28:01 2024 GMT
            Not After : Jul 23 13:33:01 2025 GMT
        Subject: CN=CCA1A70B4ED3E3D11AD985A1EFCF95E77BE44A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:a2:b2:6d:8d:87:89:b0:18:a8:8f:7e:ca:
                    80:a3:1d:08:88:bc:03:da:ea:90:8b:d3:83:13:8c:
                    58:d3:64:f6:e6:0d:0d:6e:a1:b1:30:c3:5b:d9:8d:
                    3b:ff:f8:ef:c4:31:66:4b:5c:65:3c:60:c2:05:e6:
                    f0:3a:2a:0f:2f:6d:e3:30:eb:9a:92:70:76:d2:dc:
                    85:e5:20:e5:c5:32:96:25:4f:94:c2:25:4b:23:42:
                    93:43:3a:bc:86:65:16:5a:6c:10:8d:c8:bc:d5:1e:
                    2a:2b:70:ee:8b:69:b5:be:83:27:00:b1:6d:0a:cc:
                    2f:d0:5d:e5:70:d3:d7:3c:cc:ee:dc:4d:cd:a5:53:
                    88:08:49:1d:e3:a4:d3:0a:46:2c:e8:a7:0f:fb:24:
                    04:56:7d:35:5d:c1:fb:be:c1:ad:9f:68:26:9d:08:
                    e9:cc:fd:05:d7:d9:48:ad:91:e5:d8:d2:1b:74:21:
                    68:c0:8d:e1:a3:19:7f:fb:21:66:c2:fc:5a:df:2a:
                    69:ad:d4:58:41:6f:22:91:c4:44:39:21:7d:29:41:
                    55:52:0f:8a:25:43:5a:cb:12:5f:86:40:b6:f7:c6:
                    d3:1a:a4:78:67:b0:e6:b3:ac:97:78:c4:7b:fa:ea:
                    5f:2f:01:ad:79:4c:49:51:32:ea:35:b0:38:da:ee:
                    97:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A1:A7:0B:4E:D3:E3:D1:1A:D9:85:A1:EF:CF:95:E7:7B:E4:4A:16
            X509v3 Authority Key Identifier:
                keyid:7E:69:3F:C0:71:7C:20:2D:B4:CE:F6:39:32:4A:14:33:D6:C1:28:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/7E693FC0717C202DB4CEF639324A1433D6C128C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E693FC0717C202DB4CEF639324A1433D6C128C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/323830343a336532383a3a2f33322d313238203d3e20323636353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:76:e2:5e:c3:c5:d4:a0:a0:05:ed:3f:f1:0f:66:30:a6:3d:
         06:98:5f:b4:cd:7f:97:50:22:cf:b4:a0:95:c5:d9:8c:4f:1f:
         b6:61:15:31:b2:42:f8:c6:36:dd:46:cc:9e:a5:3d:41:ff:02:
         73:6e:da:07:95:0b:67:ae:81:81:76:b6:de:ae:9f:b4:d7:86:
         39:a8:14:89:d6:75:04:a9:cd:08:8f:a5:3c:84:60:e7:2a:90:
         90:6c:20:fd:69:f3:d5:c3:82:45:b7:e3:25:91:5a:65:68:19:
         17:d8:13:a8:95:e7:13:d3:44:9e:b1:0a:8b:0c:95:71:73:6d:
         56:74:20:81:15:7a:80:ac:0f:45:d9:22:84:46:3c:79:b8:50:
         6a:43:84:cc:12:5d:cc:50:74:24:e8:ba:fc:cf:4d:8a:48:66:
         34:79:45:cb:96:66:85:bb:1f:93:2d:7e:ce:9e:a9:71:05:21:
         42:ca:b0:46:20:01:70:3b:01:53:0c:34:13:44:f9:dc:56:c5:
         59:94:31:c7:af:ea:78:bf:97:63:c5:fe:88:85:cb:60:dc:ad:
         a0:11:4f:ed:e8:bb:fa:9f:53:34:63:1c:1a:02:0c:ed:79:7a:
         36:32:55:44:dd:d2:8f:a9:7b:58:a2:a9:71:56:06:85:c9:8d:
         a4:53:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 19:23:31 2024 by rpki-client on console-fra.rpki-client.org