Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/323830343a383664633a383030303a3a2f33342d3334203d3e20323732363731.roa
File:                     323830343a383664633a383030303a3a2f33342d3334203d3e20323732363731.roa (raw, json)
Hash identifier:          8YGZXrUvN5ISss6SC6P1CJe2F18HUUiBcXT0o4o20aQ=
Subject key identifier:   8E:76:2E:7B:8C:F8:4F:97:10:A6:D1:56:28:21:A3:D5:19:46:FC:A3
Certificate issuer:       /CN=89CC368C6617311D256B7895B2037F34C4664792
Certificate serial:       56335B0CB296FD457AEC47EFE5AE2E4D45078A14
Authority key identifier: 89:CC:36:8C:66:17:31:1D:25:6B:78:95:B2:03:7F:34:C4:66:47:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89CC368C6617311D256B7895B2037F34C4664792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/323830343a383664633a383030303a3a2f33342d3334203d3e20323732363731.roa
Signing time:             Thu 04 Apr 2024 01:51:57 +0000
ROA not before:           Thu 04 Apr 2024 01:46:57 +0000
ROA not after:            Thu 03 Apr 2025 01:51:57 +0000
asID:                     272671
IP address blocks:        2804:86dc:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:33:5b:0c:b2:96:fd:45:7a:ec:47:ef:e5:ae:2e:4d:45:07:8a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CC368C6617311D256B7895B2037F34C4664792
        Validity
            Not Before: Apr  4 01:46:57 2024 GMT
            Not After : Apr  3 01:51:57 2025 GMT
        Subject: CN=8E762E7B8CF84F9710A6D1562821A3D51946FCA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:f7:d0:71:2a:4b:e9:01:a9:dc:96:32:03:
                    7f:8f:f5:64:49:62:cb:69:27:97:1a:5a:d2:07:2c:
                    61:ea:87:9a:71:7c:62:97:b8:54:4c:6a:71:6b:6e:
                    3a:0f:7c:05:40:59:df:cf:5f:fb:25:ad:90:ed:cd:
                    53:1f:ce:b1:3e:0c:27:05:5c:4e:13:eb:65:1d:1d:
                    80:3f:aa:9d:c8:9d:40:8b:3a:bd:7d:95:55:f6:e5:
                    87:ad:20:2f:39:ba:e6:92:d0:cd:3c:5a:33:1c:09:
                    a2:a9:85:91:6d:29:e7:72:ad:2c:50:8b:09:1a:46:
                    85:91:a9:92:71:e5:54:53:16:7f:6f:cb:e8:bb:49:
                    43:9f:b1:86:ff:7f:36:d2:22:d4:9b:96:1a:99:f8:
                    d4:78:b0:54:58:e0:05:c6:d1:46:09:fd:17:67:d4:
                    ce:c0:87:53:1b:a1:73:bc:3a:9b:04:40:99:3a:f1:
                    9f:14:58:7e:71:71:5a:35:62:32:a2:da:e4:91:f2:
                    14:0b:52:7d:53:fd:27:b6:f3:e0:99:ba:ed:2d:f4:
                    51:b3:94:f6:47:30:f8:3a:e5:f3:33:69:61:8e:87:
                    79:c0:aa:5e:21:f8:c9:02:ed:63:a2:f9:b2:19:7a:
                    c3:34:9c:d0:e6:12:3f:cd:55:e3:22:2a:8e:6c:05:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:76:2E:7B:8C:F8:4F:97:10:A6:D1:56:28:21:A3:D5:19:46:FC:A3
            X509v3 Authority Key Identifier:
                keyid:89:CC:36:8C:66:17:31:1D:25:6B:78:95:B2:03:7F:34:C4:66:47:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/89CC368C6617311D256B7895B2037F34C4664792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89CC368C6617311D256B7895B2037F34C4664792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/323830343a383664633a383030303a3a2f33342d3334203d3e20323732363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86dc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:db:d7:b4:2b:73:32:3c:d5:c5:b3:70:24:31:1b:67:76:ba:
         0d:4a:7d:c3:59:b2:db:78:85:22:8b:6a:b6:4d:51:b7:0a:af:
         52:3d:b6:d7:f6:69:ee:83:24:de:c6:03:bd:5d:4a:c0:4c:05:
         11:e1:e6:b2:dd:cd:82:32:8b:c8:83:3a:46:75:23:2b:e9:74:
         5d:c0:3c:97:1d:1c:e2:44:79:66:65:8d:20:14:d0:43:fb:b9:
         b0:21:fe:31:c7:4e:0e:9e:30:6d:57:5e:7d:90:6c:f3:e5:eb:
         bf:8b:a9:50:29:3b:90:bc:d2:5d:45:be:c2:a0:c7:b6:4d:cb:
         c3:3b:32:b3:16:1b:81:61:59:4e:53:90:af:ef:a5:89:a5:22:
         ad:72:aa:83:6e:67:c1:d0:cb:94:c4:dc:01:09:14:ad:d0:26:
         0f:fe:0b:56:e3:11:71:5a:89:10:d4:3d:e9:20:5c:d9:79:44:
         29:fd:7b:75:05:ef:91:72:c3:8e:19:de:fb:ba:27:dd:18:59:
         39:f4:61:f0:e7:2a:0c:d8:e4:13:13:02:41:1a:6e:39:75:fb:
         fc:63:d2:c2:19:54:73:a6:e8:7b:a3:b8:64:6e:12:96:ed:4d:
         c7:b0:b6:aa:ca:4d:10:85:dd:bb:fa:6a:60:ff:63:92:e2:ac:
         1b:b2:c7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 15:25:48 2024 by rpki-client on console-ams.rpki-client.org