Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a343030303a3a2f33352d3335203d3e20323636343136.roa
File:                     323830343a333737343a343030303a3a2f33352d3335203d3e20323636343136.roa (raw, json)
Hash identifier:          vUUKuvfmNPscMbGFNvkTsO0cEtTRIDGcL1P3VHSy0aU=
Subject key identifier:   9C:7A:BC:95:2C:6A:55:3A:67:ED:53:91:AD:96:A3:B7:07:8C:8A:F1
Certificate issuer:       /CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
Certificate serial:       2A9F12464585057B3DA9A968664B4340E045D8C5
Authority key identifier: 3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a343030303a3a2f33352d3335203d3e20323636343136.roa
Signing time:             Sun 26 May 2024 20:57:29 +0000
ROA not before:           Sun 26 May 2024 20:52:29 +0000
ROA not after:            Sun 25 May 2025 20:57:29 +0000
asID:                     266416
IP address blocks:        2804:3774:4000::/35 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9f:12:46:45:85:05:7b:3d:a9:a9:68:66:4b:43:40:e0:45:d8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
        Validity
            Not Before: May 26 20:52:29 2024 GMT
            Not After : May 25 20:57:29 2025 GMT
        Subject: CN=9C7ABC952C6A553A67ED5391AD96A3B7078C8AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:68:85:19:ff:1a:ec:5b:93:ae:ad:09:4f:
                    33:d9:86:31:93:ee:7a:14:18:ca:9a:aa:ed:ba:e1:
                    05:34:fe:bc:f5:a8:cb:5c:be:ae:60:35:1f:4b:ae:
                    79:26:c9:86:a7:d4:3e:4e:4b:4c:58:eb:ff:cf:88:
                    17:a5:ce:bd:f8:60:73:53:a9:63:8a:b8:0e:cf:44:
                    be:f9:e3:5e:b0:47:bd:dd:8c:4b:b2:f4:ee:84:88:
                    52:33:53:92:15:e5:ac:ec:a7:ab:9f:ca:cd:48:e9:
                    c0:4a:48:e4:96:e6:c0:25:68:28:63:c1:94:d3:f0:
                    1e:64:3e:3e:54:fb:d4:ef:65:49:56:43:72:4f:f7:
                    b0:ef:04:d6:79:89:d9:03:11:61:65:82:e0:96:3c:
                    c9:34:01:8f:56:a0:b5:8a:05:13:a1:52:90:6c:62:
                    9d:81:46:1a:33:6e:62:7b:6a:db:42:14:94:8e:9c:
                    a0:aa:f9:96:51:34:ae:1c:3f:3c:77:1b:1b:3e:aa:
                    fd:f0:e7:a3:67:b6:e4:01:5d:00:2b:9c:be:e4:c0:
                    8d:58:2d:d1:e2:9d:49:71:35:23:27:9e:da:15:6f:
                    d5:4f:34:8c:e1:4e:61:a9:fa:04:5f:73:a6:bb:19:
                    a3:06:e7:c2:01:63:88:90:4e:74:f3:88:a3:98:6f:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7A:BC:95:2C:6A:55:3A:67:ED:53:91:AD:96:A3:B7:07:8C:8A:F1
            X509v3 Authority Key Identifier:
                keyid:3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a343030303a3a2f33352d3335203d3e20323636343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3774:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         69:19:28:08:2b:ce:20:ab:a8:69:7f:2d:68:15:ae:75:43:e6:
         56:b6:2b:e0:12:89:60:c2:23:ec:1f:53:21:29:24:8a:65:8a:
         dd:1e:6c:e0:31:85:43:33:a2:56:8d:ad:de:9e:b8:9c:e3:15:
         e8:f2:cf:3c:c9:eb:8d:0a:0d:f2:c9:65:87:69:2a:a2:ba:d2:
         6b:01:1b:3c:aa:b0:1d:67:ce:f3:cf:75:17:4a:32:0f:c6:b0:
         81:b3:bb:65:0b:51:51:a5:f1:17:96:68:9e:21:86:cf:13:09:
         a5:d9:76:01:61:5c:6d:04:73:07:e8:8a:14:c8:da:d5:8d:55:
         b3:8b:ea:a9:7b:eb:c5:3b:32:5d:c9:39:a2:46:c5:bc:1e:fc:
         0a:01:55:5c:c2:8d:43:9d:e0:b4:98:b4:41:ad:40:6b:d1:40:
         56:ae:eb:a8:4e:46:6b:4a:74:db:fb:e5:8d:e4:6e:46:3d:21:
         d3:ab:8b:ab:54:5c:3e:04:4f:8e:fc:8c:f4:ed:4d:d6:cb:25:
         a1:c9:4d:45:36:1b:49:c4:be:57:02:b7:86:7f:52:1c:11:ee:
         cd:87:03:f6:5d:55:45:16:3b:32:ff:96:ed:32:29:5f:88:9e:
         95:a6:98:81:de:76:f2:96:69:79:aa:17:09:d6:cf:f8:8a:28:
         3f:9c:7a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 03:51:10 2024 by rpki-client on console-fra.rpki-client.org