Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/323830343a376339303a3a2f33322d3332203d3e20323731353034.roa
File:                     323830343a376339303a3a2f33322d3332203d3e20323731353034.roa (raw, json)
Hash identifier:          ac5oA7ddCzHi2y5yEZHW1hslUlWdfI8jSmvFlZta7fg=
Subject key identifier:   78:02:96:57:34:F0:A6:B8:CA:39:63:E5:09:75:DE:3A:FB:C4:48:24
Certificate issuer:       /CN=BDBF088AD60886FED4A9616708283717E8AD2443
Certificate serial:       22858D8D77DD4EC825DE68DA26DC8BF6B1DDAF02
Authority key identifier: BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/323830343a376339303a3a2f33322d3332203d3e20323731353034.roa
Signing time:             Wed 03 Apr 2024 19:11:21 +0000
ROA not before:           Wed 03 Apr 2024 19:06:21 +0000
ROA not after:            Wed 02 Apr 2025 19:11:21 +0000
asID:                     271504
IP address blocks:        2804:7c90::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:85:8d:8d:77:dd:4e:c8:25:de:68:da:26:dc:8b:f6:b1:dd:af:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDBF088AD60886FED4A9616708283717E8AD2443
        Validity
            Not Before: Apr  3 19:06:21 2024 GMT
            Not After : Apr  2 19:11:21 2025 GMT
        Subject: CN=7802965734F0A6B8CA3963E50975DE3AFBC44824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:3f:78:05:b0:3e:2b:67:41:82:c3:fa:bd:
                    89:4f:fd:94:fc:21:a3:0c:8c:03:6b:cf:75:bc:42:
                    c6:52:4b:eb:32:b2:a0:e4:a5:3e:b2:fe:e1:a4:91:
                    a9:5f:4d:bb:ed:40:46:c2:cb:75:b2:20:2f:de:f5:
                    f8:01:a9:69:e4:c0:69:1e:f9:85:ca:eb:cf:8b:57:
                    e2:36:56:d7:09:34:3d:f0:0f:8c:58:9f:d3:34:a7:
                    83:8b:69:fa:5f:07:c7:a9:21:3e:c2:9c:d1:81:7c:
                    78:32:6d:81:6b:c5:c2:1f:79:67:94:ee:2c:2a:69:
                    1c:1b:29:4a:7b:e8:8b:52:83:aa:27:11:f0:fc:17:
                    75:2a:24:e8:ce:45:82:70:3c:29:80:44:c5:4a:00:
                    19:98:62:4b:fd:c6:d9:ce:7b:ba:98:42:a9:46:e8:
                    de:2b:be:e3:7c:b1:88:af:85:f7:4f:82:d2:66:ba:
                    df:05:5a:cf:9a:5e:85:a1:35:41:68:af:68:25:ef:
                    9b:76:65:eb:42:5b:0f:86:04:3f:b9:c3:f2:d7:02:
                    88:44:8b:13:e7:cb:28:0c:65:3b:b6:ec:a9:d4:d1:
                    ee:71:54:5f:5b:1d:64:47:ce:7b:80:0b:e3:18:61:
                    fc:5a:1b:a2:d5:32:14:2f:f7:46:35:ae:9d:0d:d1:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:96:57:34:F0:A6:B8:CA:39:63:E5:09:75:DE:3A:FB:C4:48:24
            X509v3 Authority Key Identifier:
                keyid:BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/BDBF088AD60886FED4A9616708283717E8AD2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/323830343a376339303a3a2f33322d3332203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:c6:23:63:1f:11:8a:21:c1:c0:c4:3e:68:72:3a:1a:2d:e3:
         1a:87:59:5e:09:d2:1f:5d:7a:3b:4b:9b:fc:62:b9:fe:e5:6c:
         00:1d:ba:8c:9c:11:14:f6:82:95:e4:e5:42:6a:a3:38:15:c6:
         08:29:fa:8c:4c:0b:5b:4d:c3:9c:e9:cf:8e:49:2c:4d:65:55:
         f7:63:44:f9:c0:ec:b9:1c:c8:9d:6b:11:18:02:b5:d2:fc:ca:
         71:cf:09:c6:ce:ea:74:58:1d:90:c6:62:84:28:9d:82:44:5f:
         6b:f3:68:aa:ab:2b:ab:04:18:10:be:b0:47:1e:61:df:62:89:
         31:2d:9b:db:a1:dc:2b:91:f9:05:d1:ce:20:cc:89:43:0c:6e:
         3c:ab:e8:66:f1:a5:af:12:a5:7e:8a:e5:8a:ba:aa:6d:ab:bb:
         b6:ac:4e:d5:a1:38:bc:1e:b8:d3:4d:86:f2:00:14:af:e7:d2:
         9d:c2:ac:5e:63:78:f8:2f:4b:f5:18:4c:d7:52:84:9e:0c:e0:
         08:4e:ef:94:99:3d:41:48:60:88:ff:dd:9a:38:de:ca:e0:04:
         31:ad:38:f0:86:b2:33:3f:02:b8:ef:52:73:e7:23:a5:fd:90:
         34:9a:81:98:96:30:de:cf:59:92:04:be:8c:f7:ae:d2:77:33:
         f1:d4:47:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 04:08:18 2024 by rpki-client on console-ams.rpki-client.org