Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/323830343a373736343a633030303a3a2f33342d3334203d3e20323731313735.roa
File:                     323830343a373736343a633030303a3a2f33342d3334203d3e20323731313735.roa (raw, json)
Hash identifier:          irCjpGx5tnUbpJRuYN9E56U7ETDXRZGqSP5hkORZIJE=
Subject key identifier:   E9:2C:26:BE:AA:0B:8E:72:FC:1D:40:D1:33:38:EC:8E:3D:64:D9:ED
Certificate issuer:       /CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
Certificate serial:       18F84091EA1C0F8FDE24E058EBF7BF7A7EA6D13F
Authority key identifier: E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/323830343a373736343a633030303a3a2f33342d3334203d3e20323731313735.roa
Signing time:             Wed 24 Apr 2024 18:55:17 +0000
ROA not before:           Wed 24 Apr 2024 18:50:17 +0000
ROA not after:            Wed 23 Apr 2025 18:55:17 +0000
asID:                     271175
IP address blocks:        2804:7764:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f8:40:91:ea:1c:0f:8f:de:24:e0:58:eb:f7:bf:7a:7e:a6:d1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
        Validity
            Not Before: Apr 24 18:50:17 2024 GMT
            Not After : Apr 23 18:55:17 2025 GMT
        Subject: CN=E92C26BEAA0B8E72FC1D40D13338EC8E3D64D9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:07:76:cd:2f:78:96:5f:10:9a:b8:04:c7:6e:
                    7d:52:da:52:93:44:f4:01:c7:90:8f:89:28:ef:4e:
                    25:35:c4:de:49:50:f3:cf:78:1c:da:62:86:51:81:
                    dc:7d:5c:45:f3:1d:b5:b2:4c:cc:95:01:78:a4:90:
                    f5:a5:8c:89:46:1a:70:9f:f4:7e:d4:12:36:68:4e:
                    01:8c:93:e5:f1:00:6e:03:32:0b:a2:70:c9:e6:c0:
                    41:bb:c9:3e:a1:d8:91:a2:72:f1:8b:2e:e5:9f:46:
                    f5:ca:ab:fa:3c:96:39:d2:91:9c:30:f4:1d:38:90:
                    32:07:c1:c8:a1:eb:5c:6b:03:7b:ce:f9:2a:bd:b8:
                    42:4c:c9:b5:f1:e1:54:88:c0:b4:9b:2d:2c:21:bc:
                    9d:05:4c:f0:56:23:26:80:69:7b:38:61:da:f9:80:
                    74:a2:0c:81:a1:74:83:2f:a2:29:ed:c1:8d:6b:68:
                    35:f8:ef:61:03:2c:54:fe:59:73:ba:70:fe:a0:2a:
                    dd:c0:be:42:f6:eb:4d:23:ad:e3:05:30:15:33:73:
                    34:1f:aa:7f:67:ef:0b:b1:1b:fb:6a:4b:e9:cc:da:
                    87:53:e5:93:d7:9a:14:80:56:b2:c8:29:cd:c3:6f:
                    89:82:14:66:75:74:ab:c4:4c:7f:a1:51:96:5d:c6:
                    cf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2C:26:BE:AA:0B:8E:72:FC:1D:40:D1:33:38:EC:8E:3D:64:D9:ED
            X509v3 Authority Key Identifier:
                keyid:E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/E59164CC5F9B9103B7458C29C6839E943B50F64D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/323830343a373736343a633030303a3a2f33342d3334203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7764:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2b:81:d2:7f:7c:e5:21:23:ee:ee:ad:90:eb:d9:7e:19:02:8b:
         df:99:c2:88:be:8d:1c:27:ef:57:54:6e:2a:ea:5a:ba:b3:a3:
         32:c0:3a:32:33:12:2c:42:09:72:93:7b:8b:b4:cf:40:73:d3:
         40:9e:e9:3a:87:8d:85:9d:f9:5d:32:06:fe:74:0c:28:02:e8:
         49:ac:76:7e:3e:35:64:07:5e:f4:68:de:49:93:30:34:56:6d:
         c7:a3:ec:20:06:22:b0:e7:1f:81:88:26:60:6a:7d:86:51:6f:
         2b:b4:8c:46:35:c4:3f:61:e1:ba:ab:8b:91:dd:ad:db:77:e0:
         6d:7a:b2:de:76:70:20:9b:b8:31:60:1a:23:2d:9b:64:f7:5a:
         d6:1a:6a:9a:60:e0:4a:f2:a6:40:46:8c:b4:c1:5a:af:49:5a:
         d7:af:27:e5:6b:d9:fd:0e:70:53:74:b1:9f:b2:32:86:a3:1e:
         0e:5c:ec:35:c1:80:02:6c:f8:c1:84:35:2b:40:5d:3c:d0:b4:
         bc:a7:63:3f:e6:33:af:5f:ce:7d:63:88:fa:6a:0e:f5:da:18:
         a5:fd:01:f3:44:72:fc:6c:a9:27:8f:f4:c1:03:5d:fc:b5:85:
         8f:b1:0a:b1:d0:e2:9d:d2:ca:fc:eb:59:ee:95:1b:28:df:a3:
         34:b5:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 15:28:21 2024 by rpki-client on console-fra.rpki-client.org