Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa
File:                     323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa (raw, json)
Hash identifier:          sOKfN9TjDIMaloH9Ql0/nNYS2uTmLX58Q+cmXVDPmuE=
Subject key identifier:   91:02:6B:40:AA:FC:D8:89:99:1F:86:AB:B6:B7:8F:60:C4:18:FA:E3
Certificate issuer:       /CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
Certificate serial:       6B1FFE23F7E8066F46D3C13F1DC4FE2272A2A4F1
Authority key identifier: 2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa
Signing time:             Thu 04 Apr 2024 17:02:47 +0000
ROA not before:           Thu 04 Apr 2024 16:57:47 +0000
ROA not after:            Thu 03 Apr 2025 17:02:47 +0000
asID:                     271478
IP address blocks:        2804:7c24:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1f:fe:23:f7:e8:06:6f:46:d3:c1:3f:1d:c4:fe:22:72:a2:a4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
        Validity
            Not Before: Apr  4 16:57:47 2024 GMT
            Not After : Apr  3 17:02:47 2025 GMT
        Subject: CN=91026B40AAFCD889991F86ABB6B78F60C418FAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:2f:d0:2b:67:8f:0e:59:89:04:87:66:69:
                    52:de:ad:34:bb:61:81:71:cd:5c:90:bb:61:2f:b8:
                    65:8e:3c:85:2a:52:63:f7:f5:40:1a:8f:09:c4:9b:
                    89:a1:7d:3d:51:fe:59:6b:30:67:aa:73:f7:fc:59:
                    4c:cc:94:50:30:af:2e:41:2a:c4:93:34:57:d5:e1:
                    d3:3f:8a:c8:93:0c:07:c0:01:a6:e8:12:29:55:35:
                    ae:92:2f:03:f5:db:28:40:db:91:68:74:75:ff:a2:
                    06:56:f7:7c:34:fa:fd:9b:7d:e1:cd:1b:6e:cd:10:
                    f9:be:bf:f1:75:7a:64:64:60:2e:31:24:68:0e:bb:
                    41:75:7e:fb:75:3c:47:c1:92:21:d5:ef:50:de:c5:
                    9b:69:7f:85:36:91:73:1d:a2:f3:e6:03:ac:91:bf:
                    e5:21:9a:f6:fd:8e:45:67:c9:e1:a4:ea:25:38:f2:
                    1b:96:4d:d0:31:33:85:56:1a:4f:0d:2a:e0:22:0c:
                    c4:00:d7:23:9b:f9:6e:6c:06:73:5a:bc:4b:38:c8:
                    a2:03:f0:6d:9d:16:46:2e:b9:f4:c7:ff:4e:68:4c:
                    22:d2:bd:d3:ee:66:e6:c8:93:49:07:75:b3:2c:a1:
                    eb:35:33:c8:17:df:40:4d:bf:1d:d1:d4:d4:15:ec:
                    0e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:02:6B:40:AA:FC:D8:89:99:1F:86:AB:B6:B7:8F:60:C4:18:FA:E3
            X509v3 Authority Key Identifier:
                keyid:2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         57:ce:f6:dc:10:68:7a:d4:ce:e6:cb:b1:e6:86:cf:83:92:d1:
         aa:7d:97:24:20:15:62:1d:75:62:d4:ea:a6:49:b8:18:53:ae:
         b0:5b:5f:31:f6:f2:85:3a:7c:63:dd:9c:4a:8d:ed:0c:8f:e7:
         14:54:ed:16:5d:98:9d:c1:62:55:9e:7b:9e:0a:4f:09:da:15:
         57:04:22:c3:0d:3e:ae:ec:55:ff:17:35:19:66:7d:56:ed:96:
         a6:96:75:8c:d2:c5:3d:19:b8:2d:f7:f7:db:2f:db:dc:bb:d4:
         9b:4c:05:22:4a:0a:2a:d7:74:96:01:95:f6:3c:bf:16:06:ab:
         24:a2:7e:5e:3b:18:e0:2b:1f:a1:34:b6:03:a7:49:c3:d1:82:
         70:86:06:2c:a8:f9:69:26:fc:74:b0:ad:52:c5:84:e2:00:11:
         4d:57:bf:2d:8a:ff:41:2a:8e:7e:f0:5d:aa:d4:5c:52:e0:d8:
         f6:63:67:b5:97:70:28:69:99:9d:fa:67:28:64:be:da:af:cd:
         62:33:c6:c9:6b:12:86:10:31:3c:20:08:93:d4:fa:31:0a:dc:
         a0:c0:fa:33:89:14:86:7e:89:46:55:41:5c:c5:75:0a:01:39:
         a4:cd:fc:d8:3e:a7:b1:3a:ce:88:d8:8e:ff:bd:97:c9:b6:bc:
         ad:b1:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 09:39:47 2024 by rpki-client on console-ams.rpki-client.org