Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/323830343a323039383a3a2f33342d3334203d3e20323634353030.roa
File:                     323830343a323039383a3a2f33342d3334203d3e20323634353030.roa (raw, json)
Hash identifier:          t0jFGXm7BmUMvhHYfVZNzks/wDRsK3eTv/toQV+qY7E=
Subject key identifier:   3F:C0:CD:B6:CC:57:A2:A8:7B:C4:17:67:E4:E2:EB:46:0F:7B:C1:7D
Certificate issuer:       /CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
Certificate serial:       1722B991CE325AF53402168A86DE0183FA76C0ED
Authority key identifier: 01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/323830343a323039383a3a2f33342d3334203d3e20323634353030.roa
Signing time:             Thu 04 Apr 2024 04:27:47 +0000
ROA not before:           Thu 04 Apr 2024 04:22:47 +0000
ROA not after:            Thu 03 Apr 2025 04:27:47 +0000
asID:                     264500
IP address blocks:        2804:2098::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:22:b9:91:ce:32:5a:f5:34:02:16:8a:86:de:01:83:fa:76:c0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
        Validity
            Not Before: Apr  4 04:22:47 2024 GMT
            Not After : Apr  3 04:27:47 2025 GMT
        Subject: CN=3FC0CDB6CC57A2A87BC41767E4E2EB460F7BC17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:40:0d:53:e0:00:a4:6c:57:4d:65:de:91:67:
                    9b:29:83:65:34:6a:82:ca:d5:66:dd:75:63:09:6e:
                    c6:f9:be:01:3a:08:44:45:5c:36:c9:ce:e7:71:52:
                    e9:ea:78:af:4b:b0:5c:2e:e8:56:c2:9d:a9:53:be:
                    b4:30:ff:0d:f0:f4:3e:3e:bf:8d:70:57:c6:6d:f7:
                    fb:51:5f:ad:89:b9:be:82:2c:f5:73:74:f9:22:53:
                    69:dc:70:09:70:b3:2f:66:98:5a:1c:2e:cc:ea:13:
                    6b:ba:d6:38:6c:d0:fc:3b:29:2b:c4:e7:b5:f0:47:
                    5b:d1:29:84:0e:c6:30:e2:d9:95:74:b8:5b:d8:dd:
                    d2:53:88:ae:e3:de:f6:ea:e3:5f:af:fb:28:a1:13:
                    23:29:d8:2b:f9:4b:5f:a9:d0:a8:7a:ba:60:1e:c3:
                    ce:af:51:f8:d6:a6:ed:8e:b1:f7:5e:54:3b:c4:72:
                    de:17:6b:96:7a:a9:fe:77:e8:9f:a8:09:48:48:32:
                    c6:f6:f7:95:85:95:cb:89:3c:be:a6:96:a6:9f:39:
                    42:ff:5e:e3:9c:31:59:e4:60:b7:de:70:46:17:98:
                    06:7c:44:b3:5e:59:05:95:1e:29:ef:ef:9f:2f:91:
                    04:89:81:2d:f7:84:d8:24:17:aa:3a:9d:fb:bb:d4:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C0:CD:B6:CC:57:A2:A8:7B:C4:17:67:E4:E2:EB:46:0F:7B:C1:7D
            X509v3 Authority Key Identifier:
                keyid:01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/323830343a323039383a3a2f33342d3334203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:b0:79:b8:f3:3c:94:9c:9c:3c:24:e8:c2:e3:4e:da:d3:28:
         c4:3d:74:61:43:6e:b4:e4:1d:26:e2:65:f2:c9:47:11:0b:a6:
         5e:bb:59:9d:8f:b1:14:ec:a2:dc:aa:ae:a3:d3:3f:a0:90:98:
         f9:d9:74:a0:2f:7f:24:ee:b9:d9:be:70:b1:77:b8:16:d0:7a:
         f8:d6:13:9d:ef:40:a4:b6:b0:47:26:db:7b:ec:cf:af:7e:11:
         38:09:9a:2d:6d:53:76:63:55:5d:de:08:ff:88:ca:52:fd:ee:
         78:7d:39:c8:b7:09:c5:cd:29:24:ba:9a:db:4f:d3:5e:fc:88:
         d4:90:c1:de:f2:d5:05:77:6a:bd:73:81:59:4c:88:72:74:69:
         20:92:fd:87:03:76:63:cf:b4:b2:db:8e:a3:c5:77:6d:e0:be:
         64:3d:0c:9c:f1:57:49:90:34:f7:10:e0:c6:8b:68:33:c8:eb:
         e8:ac:85:68:27:1e:eb:57:c6:bd:72:e6:4a:20:bb:98:2d:b7:
         a9:07:00:84:34:a4:c0:a2:34:2b:a8:2b:b9:ad:bc:5d:21:f6:
         8a:35:66:be:6c:80:47:37:ff:73:1e:0a:e1:ad:7c:08:80:3f:
         3a:50:7a:43:60:22:8d:ac:cc:b0:5c:d0:c5:46:32:e1:f5:6e:
         d4:bb:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 23:04:26 2024 by rpki-client on console-fra.rpki-client.org