Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/323830343a376332343a3a2f33342d3334203d3e20323731343738.roa
File:                     323830343a376332343a3a2f33342d3334203d3e20323731343738.roa (raw, json)
Hash identifier:          WE+HHZErLrRdvf0iGXMZ8f40t2MOBRQ59KKHf+duZ30=
Subject key identifier:   C3:9A:F8:C3:65:0A:B5:BE:E1:A3:69:8B:71:3B:6D:AC:1D:CF:B4:0C
Certificate issuer:       /CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
Certificate serial:       537243A0F0DCEE143E9D93940A88300055403E87
Authority key identifier: 2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/323830343a376332343a3a2f33342d3334203d3e20323731343738.roa
Signing time:             Thu 04 Apr 2024 17:02:47 +0000
ROA not before:           Thu 04 Apr 2024 16:57:47 +0000
ROA not after:            Thu 03 Apr 2025 17:02:47 +0000
asID:                     271478
IP address blocks:        2804:7c24::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:72:43:a0:f0:dc:ee:14:3e:9d:93:94:0a:88:30:00:55:40:3e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
        Validity
            Not Before: Apr  4 16:57:47 2024 GMT
            Not After : Apr  3 17:02:47 2025 GMT
        Subject: CN=C39AF8C3650AB5BEE1A3698B713B6DAC1DCFB40C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:3f:46:f7:9b:ef:3a:6c:be:2c:f4:79:30:
                    1a:a3:ed:d7:8d:be:21:31:45:3c:33:ac:4e:47:df:
                    7f:ea:b8:05:ac:ff:b6:99:fc:ed:ca:5d:61:76:bf:
                    f4:b1:b4:f4:e8:63:c4:14:a7:17:b3:ab:f2:24:d9:
                    55:c3:3c:f6:2b:25:15:af:8d:04:41:c6:30:ec:8a:
                    bd:34:55:ca:69:03:1a:7a:9d:34:4e:22:52:0d:5b:
                    fc:1e:95:3a:30:4a:e9:c1:04:12:fb:b5:60:68:3c:
                    df:d9:a6:dd:fb:85:49:08:34:c1:80:5a:76:02:bf:
                    d2:89:db:53:5c:88:4c:5d:ad:08:99:af:1c:85:29:
                    11:fe:0f:7d:b5:f6:cd:7e:30:8f:54:74:99:12:10:
                    a3:74:10:a4:93:16:d7:c2:a9:01:68:dc:d7:9e:ca:
                    58:8c:75:73:9b:c8:a5:94:c2:bb:3b:1f:37:7c:a1:
                    8e:d9:4c:00:06:3c:06:02:28:2f:6e:2f:c2:05:fd:
                    42:bf:aa:96:60:6d:ae:2b:be:70:f0:87:93:b5:44:
                    0e:cb:a2:19:6d:99:c5:24:95:36:c8:95:b6:70:9a:
                    c7:e5:05:64:33:06:37:79:e4:54:7e:bb:ee:02:dd:
                    d6:a1:1a:89:56:65:00:c1:a3:05:68:84:38:99:bd:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9A:F8:C3:65:0A:B5:BE:E1:A3:69:8B:71:3B:6D:AC:1D:CF:B4:0C
            X509v3 Authority Key Identifier:
                keyid:2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/323830343a376332343a3a2f33342d3334203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:0b:c4:f2:95:94:f6:7b:61:95:8e:90:e3:8f:6e:27:13:b6:
         2b:89:22:2d:26:d6:42:04:d2:b4:d3:40:04:51:ce:08:20:2b:
         82:40:d3:c9:9a:20:e1:5e:51:65:3d:d3:bf:76:5e:33:fe:65:
         bc:07:bb:3e:d8:58:55:c7:90:e1:ce:bd:f0:cc:04:a6:05:34:
         fa:0d:48:96:c1:cc:dc:95:65:03:55:ab:87:65:bd:ff:e8:4f:
         46:80:b1:bc:d7:8a:eb:0b:96:30:9a:83:bf:d0:a4:9a:f0:a8:
         b6:64:fd:bf:32:80:9a:ff:9a:e9:79:a2:30:f6:8d:5e:ee:dd:
         64:ab:90:8f:99:69:f5:c6:f1:59:8c:2a:a2:a9:ef:1b:26:4b:
         5f:f7:6a:d0:80:db:d6:87:1f:d2:7b:18:8b:8c:6c:66:83:b3:
         9f:23:ce:8a:02:5e:77:70:73:f9:53:6d:f3:b8:ec:a5:00:5a:
         e0:34:7b:c3:76:98:44:97:4b:81:32:8d:d8:af:77:90:8b:72:
         80:b9:44:78:7c:0c:da:85:46:63:90:ed:91:ef:0e:10:cf:7d:
         cc:e7:3f:0c:48:5f:33:56:6c:7b:9b:8e:9c:93:8a:fb:9a:46:
         9d:db:61:ac:67:96:69:b4:e7:3b:31:ac:b0:89:1d:f9:d7:eb:
         59:f0:e3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 09:39:47 2024 by rpki-client on console-ams.rpki-client.org