Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa
File:                     323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa (raw, json)
Hash identifier:          c4lqBR5W/56mHsm8JbkhCzvhNGbvW6Hx32mb/83DpFQ=
Subject key identifier:   BD:84:5E:44:A6:56:9A:5A:51:6C:43:AD:76:5F:60:5F:AA:7A:1B:1D
Certificate issuer:       /CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
Certificate serial:       59446A59B97D45618553EB01C64C5624E83E06CF
Authority key identifier: 2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa
Signing time:             Thu 04 Apr 2024 17:02:48 +0000
ROA not before:           Thu 04 Apr 2024 16:57:48 +0000
ROA not after:            Thu 03 Apr 2025 17:02:48 +0000
asID:                     271478
IP address blocks:        2804:7c24:c000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:44:6a:59:b9:7d:45:61:85:53:eb:01:c6:4c:56:24:e8:3e:06:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
        Validity
            Not Before: Apr  4 16:57:48 2024 GMT
            Not After : Apr  3 17:02:48 2025 GMT
        Subject: CN=BD845E44A6569A5A516C43AD765F605FAA7A1B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:6f:6d:29:e9:61:0a:5a:f0:25:eb:b6:c9:
                    15:3c:be:92:20:4b:93:7a:48:10:fa:d3:b6:c1:12:
                    13:88:cf:fc:3e:7b:c5:00:8b:87:23:d9:64:22:55:
                    a6:db:c0:1f:21:02:f0:ae:c9:94:41:af:30:4c:cc:
                    6b:ce:4d:d8:fa:f1:15:12:fc:07:b0:9a:31:e7:fb:
                    eb:83:51:7b:17:c0:e8:7e:35:d3:8a:d4:c6:dd:f5:
                    6e:cd:13:f6:d4:25:11:82:3b:6b:15:6f:7d:44:d3:
                    0c:2c:10:31:55:bb:e2:28:3a:36:d2:1a:c8:b3:4b:
                    b9:7b:80:14:df:e1:8d:5e:e2:2b:6f:e1:19:5f:92:
                    75:16:ca:7d:2f:74:22:76:10:39:bd:14:62:11:f2:
                    b8:74:dc:ad:ac:5c:55:87:d9:a7:66:d3:af:1d:0c:
                    03:f4:ec:a7:04:1e:8e:e0:a6:50:b6:e1:ea:44:a0:
                    06:d6:f0:3a:7f:d1:d6:07:28:a9:14:7b:08:b0:3e:
                    8c:e1:5f:37:31:8d:bb:43:2d:c8:14:bd:dc:0a:7f:
                    a1:0b:bd:2b:74:f2:e8:f5:5a:59:a3:37:67:50:a5:
                    c8:15:92:8c:83:0c:7c:75:8d:c0:05:d6:f1:e2:ae:
                    e2:86:60:42:a6:7b:00:44:94:7e:d2:19:a3:bc:35:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:84:5E:44:A6:56:9A:5A:51:6C:43:AD:76:5F:60:5F:AA:7A:1B:1D
            X509v3 Authority Key Identifier:
                keyid:2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9e:8e:3f:9b:27:6c:cf:3f:7d:30:1e:a9:ef:2f:f1:01:47:0e:
         3e:cc:5a:e2:d6:3b:de:b4:cd:e5:f9:8a:cc:77:9b:b1:96:97:
         71:d9:9e:15:56:f2:8a:ea:54:95:f2:88:25:bb:38:1d:61:28:
         ae:58:bb:78:b5:94:84:eb:bc:48:2b:04:f1:f9:4d:24:6b:b1:
         59:56:4e:4d:b2:d0:d2:94:58:47:9a:5a:ac:07:e1:81:76:e5:
         6c:55:f5:76:53:ea:f1:7f:53:27:f4:fa:72:3b:25:ed:d8:5e:
         88:34:f9:dd:9a:81:0e:74:bf:b6:59:a9:a5:d1:80:43:2a:c8:
         c3:ba:05:74:ae:c6:39:70:46:db:93:50:8d:28:30:95:94:c2:
         4e:cb:d6:f3:ad:51:1c:7b:d4:93:22:84:82:66:32:23:5c:7b:
         8c:e8:30:e1:40:82:a7:1c:60:9e:3a:88:ca:34:bf:8b:2e:b2:
         8b:4e:2d:ba:4c:96:e7:36:f4:29:27:d9:93:88:2a:8f:2d:33:
         d3:81:d7:00:71:16:76:68:34:6f:65:f0:ab:d9:99:cc:80:4c:
         1e:a2:81:86:4c:aa:ee:bc:ea:01:7b:17:98:00:35:01:e6:a6:
         38:e6:06:fb:dc:e9:64:38:f4:44:f4:aa:46:be:94:42:21:d2:
         bd:cc:ac:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 09:16:36 2024 by rpki-client on console-fra.rpki-client.org