Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/1/323830343a386539383a3a2f33322d3438203d3e20323733343336.roa
File:                     323830343a386539383a3a2f33322d3438203d3e20323733343336.roa (raw, json)
Hash identifier:          NETx9JuDUr/tqZPx6xoBv6MGNBJRw3ERzIuuEqH9G/A=
Subject key identifier:   12:D8:39:2D:EE:1D:C3:62:CA:35:B8:F3:7A:89:32:8F:E7:C0:B8:CE
Certificate issuer:       /CN=9FEC8DC17BA288638EE74D99EFF437198B93516B
Certificate serial:       344C163DC28B8F4B0ECB2025BC50697F9B00A29D
Authority key identifier: 9F:EC:8D:C1:7B:A2:88:63:8E:E7:4D:99:EF:F4:37:19:8B:93:51:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FEC8DC17BA288638EE74D99EFF437198B93516B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/1/323830343a386539383a3a2f33322d3438203d3e20323733343336.roa
Signing time:             Thu 04 Apr 2024 21:51:26 +0000
ROA not before:           Thu 04 Apr 2024 21:46:26 +0000
ROA not after:            Thu 03 Apr 2025 21:51:26 +0000
asID:                     273436
IP address blocks:        2804:8e98::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4c:16:3d:c2:8b:8f:4b:0e:cb:20:25:bc:50:69:7f:9b:00:a2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEC8DC17BA288638EE74D99EFF437198B93516B
        Validity
            Not Before: Apr  4 21:46:26 2024 GMT
            Not After : Apr  3 21:51:26 2025 GMT
        Subject: CN=12D8392DEE1DC362CA35B8F37A89328FE7C0B8CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c1:cc:04:e7:3d:35:e4:b9:6e:26:8a:f4:23:
                    be:f2:b3:70:68:53:3b:e4:93:e4:a5:96:2d:97:c8:
                    6d:1f:85:b9:63:aa:40:e8:c1:1e:85:07:34:8f:70:
                    27:a5:9c:c5:fe:ec:ed:bd:31:fb:f9:41:43:73:48:
                    09:88:47:4b:8b:ce:05:52:2e:6b:3f:d4:32:a6:f8:
                    be:fd:c2:e1:05:79:cf:83:dd:a3:50:10:1c:99:67:
                    75:77:33:ad:e2:bd:3b:7a:d9:ff:30:c2:a2:5b:bb:
                    6e:05:27:d6:c5:61:40:05:2d:08:61:68:18:27:9d:
                    20:21:a6:61:16:6c:a7:64:16:48:3c:ba:b1:35:9e:
                    2b:8f:fd:89:25:09:12:50:30:b0:dc:fd:6a:f6:5f:
                    9a:69:6c:b6:43:8c:af:0b:ba:dc:f6:44:e3:75:9f:
                    99:c5:0d:78:d3:f1:e8:86:2f:19:2f:c9:d1:c5:55:
                    22:b5:c8:43:ff:18:3f:96:7f:f7:6a:ac:1d:bb:68:
                    4a:d6:a3:9b:ee:16:fb:7d:e8:d1:c9:97:c8:af:7b:
                    7d:f8:75:8a:a6:44:49:7d:96:ad:1f:02:f0:a8:20:
                    c3:82:57:11:a8:22:6e:87:12:7b:eb:9e:02:6e:b3:
                    54:97:c4:07:6d:85:e6:4f:a8:4c:20:1d:3c:a9:34:
                    97:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D8:39:2D:EE:1D:C3:62:CA:35:B8:F3:7A:89:32:8F:E7:C0:B8:CE
            X509v3 Authority Key Identifier:
                keyid:9F:EC:8D:C1:7B:A2:88:63:8E:E7:4D:99:EF:F4:37:19:8B:93:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/1/9FEC8DC17BA288638EE74D99EFF437198B93516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FEC8DC17BA288638EE74D99EFF437198B93516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/1/323830343a386539383a3a2f33322d3438203d3e20323733343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e98::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:b6:50:b3:1b:e2:02:a8:57:01:d9:e5:d7:c8:9b:35:5b:
         04:42:13:76:d1:ae:4d:96:b7:49:93:87:68:9e:ed:e0:e4:7e:
         70:26:9a:94:d4:49:20:53:6e:74:14:2c:83:95:e9:54:cd:ab:
         50:1e:77:c5:ea:a1:46:c8:62:cf:40:10:d5:22:51:da:37:6d:
         fa:94:06:ef:77:b4:d1:04:95:ac:2a:fe:7e:aa:93:02:46:7b:
         85:14:a6:61:c4:23:df:ee:53:37:7f:a3:7a:c1:94:f9:a1:35:
         56:9e:17:3d:b7:96:71:c0:21:92:49:fb:d9:82:cc:a1:33:b7:
         77:9d:f3:b0:e3:0f:25:a3:91:0d:24:f3:92:7b:4b:6e:22:3f:
         5c:80:de:67:33:2c:62:5f:e7:59:2d:b6:ab:18:bd:4e:b3:fa:
         3b:ac:94:5a:fa:1e:2f:c8:ef:e9:52:8e:0d:14:a6:2e:f0:29:
         a2:71:8c:33:0a:d6:2e:b7:db:a1:0e:b8:be:90:da:b8:61:60:
         fa:cd:09:06:4a:fa:a5:c8:f2:38:89:90:e3:f3:89:47:65:aa:
         2a:f3:84:bd:31:ca:87:dd:90:20:23:36:9c:1f:03:0a:cb:5c:
         4e:c8:1e:74:50:d2:a3:c5:ed:49:49:e6:82:6e:fc:c5:cc:23:
         96:7d:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 16:30:41 2024 by rpki-client on console-ams.rpki-client.org