Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a343030303a3a2f33342d3334203d3e20323633393037.roa
File:                     323830343a323738383a343030303a3a2f33342d3334203d3e20323633393037.roa (raw, json)
Hash identifier:          +OlsHE4VkYKBf+WRP79Pvlya8oanAz6iG9PVJbKCj3c=
Subject key identifier:   B9:FF:E8:31:5C:F2:DE:19:AF:64:82:8F:3D:67:ED:93:A2:06:B8:B5
Certificate issuer:       /CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
Certificate serial:       7FCCB64BAEFAFF1BDE4DD39A01A23DB15C8D6AB3
Authority key identifier: 70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a343030303a3a2f33342d3334203d3e20323633393037.roa
Signing time:             Fri 05 Apr 2024 01:46:33 +0000
ROA not before:           Fri 05 Apr 2024 01:41:33 +0000
ROA not after:            Fri 04 Apr 2025 01:46:33 +0000
asID:                     263907
IP address blocks:        2804:2788:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cc:b6:4b:ae:fa:ff:1b:de:4d:d3:9a:01:a2:3d:b1:5c:8d:6a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
        Validity
            Not Before: Apr  5 01:41:33 2024 GMT
            Not After : Apr  4 01:46:33 2025 GMT
        Subject: CN=B9FFE8315CF2DE19AF64828F3D67ED93A206B8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:d2:8e:94:d9:43:e2:7b:45:72:3c:08:7d:
                    0b:60:56:af:5d:e0:bf:11:bf:cf:1c:bb:d7:19:86:
                    07:83:b8:89:85:37:bc:7d:3d:82:6e:87:a6:29:a3:
                    24:53:b5:57:5b:3b:91:92:74:63:a9:76:a9:63:e3:
                    6e:3a:e3:25:33:d2:c0:55:70:c7:17:12:f1:22:6d:
                    12:96:e4:57:df:2a:8d:fc:90:63:ae:64:03:09:1f:
                    33:62:49:37:cd:cb:8a:52:29:f9:6f:8f:52:77:a0:
                    7f:24:68:87:ba:0c:b6:01:f9:f3:88:22:cc:c7:42:
                    69:c5:4f:c1:ad:08:55:c3:4a:de:75:00:01:ab:4d:
                    66:52:8c:23:41:5c:03:9c:6d:ff:4e:a2:e9:ae:3e:
                    02:52:de:7f:5a:45:c6:84:2a:8c:55:67:f2:fb:fe:
                    a3:a5:9c:09:92:43:d0:5c:5b:c7:e9:1c:0c:f5:a0:
                    96:e4:2e:0f:2d:0e:6e:c4:0b:5d:a6:3b:ea:cb:ed:
                    68:5a:11:b4:04:b3:2d:3a:a7:1b:b7:e2:dd:42:84:
                    42:85:76:fa:d2:57:fa:7a:1a:0b:dd:3b:4d:5e:1d:
                    9c:4b:3a:da:58:6f:94:3e:d8:e4:c1:1c:ba:2b:c8:
                    86:84:4a:4c:52:58:3d:e0:e8:ec:fe:55:66:6c:30:
                    22:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FF:E8:31:5C:F2:DE:19:AF:64:82:8F:3D:67:ED:93:A2:06:B8:B5
            X509v3 Authority Key Identifier:
                keyid:70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a343030303a3a2f33342d3334203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:48:f2:8e:7c:8b:67:8f:08:ea:39:96:71:7b:0f:6f:ee:9e:
         83:a5:4d:ca:e7:c2:77:69:11:90:ff:3d:0b:e9:c4:b0:26:fa:
         5f:46:77:df:4c:84:02:6b:c0:fe:9c:b1:e2:89:85:f9:76:ca:
         52:47:c3:21:7a:66:c9:e2:11:bd:ec:3f:fa:f8:f3:46:2f:65:
         d1:25:e3:c2:29:61:5d:27:f4:75:ee:ca:b2:ef:0b:82:77:24:
         6d:c2:0a:80:4d:03:e2:1a:49:e6:d7:bd:c1:ea:8e:30:c7:7d:
         75:c6:86:32:8d:fe:38:77:35:40:40:3c:8c:7e:4a:d5:80:a7:
         28:7b:c5:18:b8:77:e9:ca:55:fb:64:6c:27:b3:f6:6d:01:90:
         3a:ff:97:35:6c:2c:3a:ad:79:3d:a9:c8:44:60:dd:36:63:a9:
         69:95:ed:fe:e3:17:af:3a:01:e6:00:c4:f4:97:3a:fb:9a:50:
         08:07:86:1b:84:dd:8d:66:3b:48:d6:ab:46:3b:1e:a9:2d:2c:
         b4:c9:ec:e2:fd:50:ef:60:03:cf:cc:11:38:fb:92:0f:3b:e1:
         2b:c2:36:83:91:44:b0:e4:bf:3b:0e:72:a4:54:6c:ef:07:e0:
         81:d3:ac:e1:7f:8b:1f:e3:81:e6:35:23:9c:7b:9d:9e:9a:a9:
         ec:02:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:46:08 2024 by rpki-client on console-ams.rpki-client.org