Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/1/323830343a363765343a3a2f33322d313238203d3e20323639363537.roa
File:                     323830343a363765343a3a2f33322d313238203d3e20323639363537.roa (raw, json)
Hash identifier:          dEnho1HEObwurmzRfVzAAcf4nd6cbpkPkgmre5KqDwc=
Subject key identifier:   61:30:6C:BD:78:10:45:BE:30:E0:AF:64:F3:2E:71:C7:01:F2:B9:D3
Certificate issuer:       /CN=09CC851BEB4072E175A58F34F41B9BFC39C31839
Certificate serial:       218E5F948C7C13A56BF46F18B090F44806FFB7A1
Authority key identifier: 09:CC:85:1B:EB:40:72:E1:75:A5:8F:34:F4:1B:9B:FC:39:C3:18:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CC851BEB4072E175A58F34F41B9BFC39C31839.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/1/323830343a363765343a3a2f33322d313238203d3e20323639363537.roa
Signing time:             Thu 04 Apr 2024 03:40:58 +0000
ROA not before:           Thu 04 Apr 2024 03:35:58 +0000
ROA not after:            Thu 03 Apr 2025 03:40:58 +0000
asID:                     269657
IP address blocks:        2804:67e4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8e:5f:94:8c:7c:13:a5:6b:f4:6f:18:b0:90:f4:48:06:ff:b7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09CC851BEB4072E175A58F34F41B9BFC39C31839
        Validity
            Not Before: Apr  4 03:35:58 2024 GMT
            Not After : Apr  3 03:40:58 2025 GMT
        Subject: CN=61306CBD781045BE30E0AF64F32E71C701F2B9D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a3:8d:78:1b:93:37:ee:ac:1a:48:58:b8:af:
                    16:ad:f9:91:26:0e:d4:46:33:fe:24:ea:d8:3e:db:
                    2e:9d:b1:68:4a:4f:09:b6:48:64:9b:b1:88:0c:16:
                    0c:12:0a:49:24:54:fb:9b:b6:5c:44:50:4d:fc:c8:
                    a0:2b:1c:54:4c:b0:f6:52:15:c4:1c:7a:2f:e4:a9:
                    24:f2:04:53:af:e4:a2:a6:44:eb:31:a0:08:30:0d:
                    e8:1d:96:3d:a4:4b:a5:43:07:a3:aa:b0:ce:af:6f:
                    64:8d:b7:6f:15:a5:14:22:4a:c6:19:46:1c:93:7e:
                    ac:fb:fa:5b:a2:17:ea:c9:39:06:d5:c5:64:28:4f:
                    b2:c8:ef:00:51:58:ac:cc:ad:c5:21:c3:f7:31:2d:
                    b9:b9:ad:22:df:f5:9d:7c:61:96:b5:83:6b:ef:c7:
                    c1:1c:7b:71:f0:98:2d:26:1e:cc:08:94:76:a0:23:
                    61:d5:3a:92:71:00:a8:40:10:3b:bd:57:a9:b5:ff:
                    0a:8d:56:0a:c5:ce:fd:c4:fd:9d:7a:ee:36:87:60:
                    ee:30:14:7a:d2:10:5e:22:67:f3:9f:48:b5:06:01:
                    b0:c9:63:67:04:0d:ea:6c:4f:38:29:f0:73:86:7d:
                    1b:af:20:76:da:44:4f:cc:4e:8e:94:fa:00:c1:5c:
                    58:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:30:6C:BD:78:10:45:BE:30:E0:AF:64:F3:2E:71:C7:01:F2:B9:D3
            X509v3 Authority Key Identifier:
                keyid:09:CC:85:1B:EB:40:72:E1:75:A5:8F:34:F4:1B:9B:FC:39:C3:18:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/1/09CC851BEB4072E175A58F34F41B9BFC39C31839.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CC851BEB4072E175A58F34F41B9BFC39C31839.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/1/323830343a363765343a3a2f33322d313238203d3e20323639363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:a2:a7:c2:3a:18:88:78:16:c8:38:3c:7e:c1:bc:b9:75:
         d0:a4:43:d7:65:b2:8a:03:02:51:89:c1:6c:3b:38:71:48:b3:
         4e:72:77:95:e5:51:d9:f3:46:12:e1:32:20:53:51:28:29:0e:
         d4:f3:94:e3:dd:28:c6:1b:74:0a:b6:c3:3f:50:2b:d8:ac:fd:
         4d:94:16:ca:89:07:c7:67:d6:74:e1:77:48:c9:14:c4:72:86:
         db:1a:75:e1:7c:0c:4f:c9:c3:93:6b:48:b3:1c:76:23:71:69:
         91:b1:1d:11:cf:c9:5a:03:0a:8f:cb:12:26:ee:1f:40:bd:07:
         37:e3:c7:5a:9e:66:2e:da:f6:0a:80:2b:ca:bc:48:3f:90:19:
         e5:86:c8:4b:99:e8:fa:58:1c:8d:8b:89:68:60:5a:fd:d9:aa:
         00:8b:9f:df:8a:c0:17:d1:1a:81:51:04:6c:2d:ec:17:e6:fc:
         3d:ec:51:a8:34:9b:96:e6:a4:a1:66:77:b2:23:ba:7b:a5:5d:
         05:ec:e8:f2:f1:42:a6:94:25:ff:55:6a:ec:2f:44:9c:e8:11:
         63:01:89:81:7b:cb:d8:09:4b:f7:62:05:25:ac:8a:c7:1f:b7:
         56:30:3b:5e:57:14:d3:38:e2:ed:1c:cb:8a:bc:2e:cb:7a:6e:
         ab:f3:df:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 18:20:14 2024 by rpki-client on console-ams.rpki-client.org