Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/323830343a323039383a633030303a3a2f33342d3334203d3e20323634353030.roa
File:                     323830343a323039383a633030303a3a2f33342d3334203d3e20323634353030.roa (raw, json)
Hash identifier:          zMDpUc1cR2oRWgmwL8X8jBFewRJ5lKJkakFb1VxJTo8=
Subject key identifier:   08:27:44:39:DD:49:9A:6C:AA:E1:4B:ED:DF:6C:D9:49:24:80:88:75
Certificate issuer:       /CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
Certificate serial:       306704F97CCF26C53E01BE294F10F4E79654E5AF
Authority key identifier: 01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/323830343a323039383a633030303a3a2f33342d3334203d3e20323634353030.roa
Signing time:             Thu 04 Apr 2024 04:27:37 +0000
ROA not before:           Thu 04 Apr 2024 04:22:37 +0000
ROA not after:            Thu 03 Apr 2025 04:27:37 +0000
asID:                     264500
IP address blocks:        2804:2098:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:67:04:f9:7c:cf:26:c5:3e:01:be:29:4f:10:f4:e7:96:54:e5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
        Validity
            Not Before: Apr  4 04:22:37 2024 GMT
            Not After : Apr  3 04:27:37 2025 GMT
        Subject: CN=08274439DD499A6CAAE14BEDDF6CD94924808875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:26:8a:c6:96:25:44:f4:23:23:be:3b:ab:
                    03:97:fe:83:51:ba:59:0b:ec:db:f1:88:27:83:79:
                    bd:d4:38:a6:7f:f8:b8:ec:51:28:43:c7:b7:87:69:
                    b2:94:17:f0:03:26:04:c0:08:76:56:7d:16:0d:69:
                    10:50:8a:8d:b1:c1:89:49:a1:20:d9:ff:73:ef:82:
                    09:38:0c:37:3a:a7:6b:ce:fb:ad:8a:52:83:8f:c8:
                    56:f0:5f:b3:2e:51:f3:8b:b1:9b:b4:0b:6d:dc:bf:
                    2b:93:20:ca:29:74:2d:c0:ff:09:b3:24:5d:92:fb:
                    b5:65:3d:a7:39:31:cb:04:b5:8c:2c:90:dc:6b:a5:
                    c5:b2:e8:81:61:78:92:cc:2d:c3:9f:fa:e3:b6:cb:
                    54:50:da:01:6b:ca:70:4f:99:c0:68:85:b9:ac:59:
                    02:e6:67:94:0a:26:09:74:20:50:8f:3c:67:b8:c0:
                    a6:76:37:80:8c:11:c7:99:ea:8e:cc:78:37:b1:89:
                    51:fc:c2:99:d9:3e:08:e5:69:67:94:a7:55:40:fa:
                    5b:8a:4d:6b:06:e3:23:e8:7a:3d:79:b6:7c:c9:d6:
                    75:a8:58:bb:0a:83:75:7f:0f:58:a6:7e:8b:ce:cc:
                    b1:87:96:ab:52:de:57:23:c9:9c:18:17:61:cb:a4:
                    5b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:27:44:39:DD:49:9A:6C:AA:E1:4B:ED:DF:6C:D9:49:24:80:88:75
            X509v3 Authority Key Identifier:
                keyid:01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/323830343a323039383a633030303a3a2f33342d3334203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:a7:e4:0b:13:e3:d2:d4:6d:83:17:d2:a8:ab:83:5a:17:
         ac:32:61:06:8d:0e:da:e8:f5:d1:ed:7b:75:5e:73:ba:86:a1:
         41:03:9a:66:0f:f4:6c:7a:11:7f:96:5d:55:b2:1c:de:00:ce:
         8a:23:1b:98:c8:04:44:a9:64:c9:7a:82:48:12:e2:90:54:16:
         7f:f2:19:38:66:93:9a:35:c9:6e:0b:cc:1c:1c:ac:17:4d:71:
         3d:8f:3c:3a:da:3b:00:03:99:8b:89:b5:43:9b:e2:e1:61:69:
         b0:e2:65:e0:f2:74:94:5b:bf:7d:5f:51:51:b2:00:62:41:45:
         9d:8c:02:5f:bc:a4:38:9e:9a:fc:f7:c2:7c:46:6c:a0:b7:61:
         2b:c3:9f:7e:c4:09:da:af:4c:33:02:9f:e1:6e:fc:ce:01:06:
         33:24:cc:fc:5c:3d:45:a6:c4:6b:ca:3d:86:f6:59:5d:28:55:
         63:15:e4:d8:7d:01:de:32:9a:31:7d:9a:9a:47:44:80:7b:1f:
         58:b4:5e:fb:7a:4d:b3:dc:62:9f:cf:a0:08:dc:e9:fe:9f:85:
         1d:e2:0b:cb:25:5d:2f:8a:55:ba:22:b6:ce:c2:c7:7b:50:84:
         0a:05:3b:20:fc:df:02:be:95:f8:2c:e6:79:75:5b:14:55:bd:
         7a:3d:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 23:04:26 2024 by rpki-client on console-fra.rpki-client.org