Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa
File:                     323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa (raw, json)
Hash identifier:          mdI7o6Jr/9dAO7AEmlpp8Y3NDMOwYyVqWMRwhOiRl/Q=
Subject key identifier:   EC:C2:A9:C3:5B:4E:07:44:5B:91:F7:36:1E:C6:12:3C:AA:54:37:4E
Certificate issuer:       /CN=BDBF088AD60886FED4A9616708283717E8AD2443
Certificate serial:       2D12D4A2019C95828CDBAE573363271F86DD64A0
Authority key identifier: BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa
Signing time:             Wed 03 Apr 2024 19:11:21 +0000
ROA not before:           Wed 03 Apr 2024 19:06:21 +0000
ROA not after:            Wed 02 Apr 2025 19:11:21 +0000
asID:                     271504
IP address blocks:        2804:7c90:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:12:d4:a2:01:9c:95:82:8c:db:ae:57:33:63:27:1f:86:dd:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDBF088AD60886FED4A9616708283717E8AD2443
        Validity
            Not Before: Apr  3 19:06:21 2024 GMT
            Not After : Apr  2 19:11:21 2025 GMT
        Subject: CN=ECC2A9C35B4E07445B91F7361EC6123CAA54374E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a6:1f:07:fd:8b:e1:23:c6:fc:87:81:8a:2d:
                    25:38:63:c5:3b:97:35:8d:e9:82:af:a2:fb:64:7d:
                    65:cf:29:82:01:33:0a:91:80:8b:fb:3f:fe:6c:fc:
                    c1:c3:ca:a4:14:46:c7:a7:0a:d5:52:51:e3:53:e4:
                    7b:c2:fb:bd:0e:5f:f6:7a:b8:b0:ed:f8:81:aa:d0:
                    26:be:31:66:b4:e0:5d:ca:ea:15:a0:5f:da:14:70:
                    35:d4:c3:e8:11:34:b0:ac:b7:94:82:28:08:b3:7b:
                    c0:cc:6f:c9:a3:14:8c:03:7b:81:d5:7c:f6:91:32:
                    14:5d:db:40:b0:fa:d0:a1:94:4e:b1:08:78:04:82:
                    bb:9a:58:fd:c0:7a:16:04:50:cc:bf:41:60:60:72:
                    00:0b:77:c9:f7:d4:e2:1d:eb:ba:16:86:6e:2d:c4:
                    c6:4e:5d:a0:60:bc:14:ff:ea:5e:7a:14:d0:f6:3e:
                    36:56:bc:de:93:6d:24:99:6a:4e:78:f1:85:93:f8:
                    5b:ca:7b:68:35:e4:0b:96:85:7d:e7:78:60:96:52:
                    ff:ff:92:b7:3c:d6:1f:ce:84:3b:56:e4:0c:06:52:
                    e1:76:eb:03:d5:75:98:06:54:1c:e8:d0:eb:00:eb:
                    d1:c6:31:07:49:27:a8:5b:62:21:fb:b0:93:61:57:
                    73:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C2:A9:C3:5B:4E:07:44:5B:91:F7:36:1E:C6:12:3C:AA:54:37:4E
            X509v3 Authority Key Identifier:
                keyid:BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/BDBF088AD60886FED4A9616708283717E8AD2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c90:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:ed:0e:d4:d2:9f:e4:1f:0c:8b:b2:d6:87:1c:e0:a4:2f:
         54:ea:6f:d3:e9:1e:d5:71:72:d6:fd:e6:7a:9c:95:4e:d0:c7:
         69:21:16:85:8b:8e:a5:d5:04:ea:3c:95:19:98:a3:97:71:46:
         dd:e0:7b:96:d6:89:22:3d:97:10:ac:6c:df:25:de:fd:1c:7a:
         09:3d:0e:04:fb:a0:7c:6c:00:5d:98:53:df:b4:a1:b3:0c:71:
         1d:bd:de:89:ee:e7:c7:78:90:fd:73:43:79:f0:ab:30:eb:af:
         47:70:93:b9:c3:4a:59:fd:59:8d:d4:46:14:8f:06:c5:ad:06:
         18:0d:c6:ef:6a:bc:18:b4:ec:b7:bc:72:cf:63:65:da:ec:3d:
         79:91:01:10:1a:0e:eb:d6:55:b2:e2:ae:e6:40:46:53:9d:83:
         09:be:38:a2:54:8a:13:d8:5a:00:39:51:fe:a2:9b:49:fb:9d:
         34:11:ba:08:8a:e3:5e:dd:fe:5a:24:8d:dd:66:2a:e9:5b:ed:
         d8:21:53:95:3a:1f:b7:bd:ad:a8:b5:c7:56:11:49:6b:99:40:
         be:31:9f:c2:c1:13:42:8f:ea:c0:26:1f:a0:33:ae:f6:a3:6e:
         77:7f:2f:86:e7:8e:ab:a5:9f:7e:09:60:81:39:de:6b:e6:d9:
         54:0d:25:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 04:03:12 2024 by rpki-client on console-fra.rpki-client.org