Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a383030303a3a2f33332d3333203d3e20323633393037.roa
File:                     323830343a323738383a383030303a3a2f33332d3333203d3e20323633393037.roa (raw, json)
Hash identifier:          DPozK4xaor+LOGGS8zlJnLff9eLzjHJ7B9E+ze0qAsA=
Subject key identifier:   1A:9E:71:09:20:B5:D4:30:05:57:4B:11:69:50:D6:BF:B4:59:7D:D9
Certificate issuer:       /CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
Certificate serial:       639BE5CDA9169421EBF47ECC6B612088772F5451
Authority key identifier: 70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a383030303a3a2f33332d3333203d3e20323633393037.roa
Signing time:             Fri 05 Apr 2024 01:46:33 +0000
ROA not before:           Fri 05 Apr 2024 01:41:33 +0000
ROA not after:            Fri 04 Apr 2025 01:46:33 +0000
asID:                     263907
IP address blocks:        2804:2788:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9b:e5:cd:a9:16:94:21:eb:f4:7e:cc:6b:61:20:88:77:2f:54:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
        Validity
            Not Before: Apr  5 01:41:33 2024 GMT
            Not After : Apr  4 01:46:33 2025 GMT
        Subject: CN=1A9E710920B5D43005574B116950D6BFB4597DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:a9:11:53:dc:e1:47:16:ca:65:10:d0:89:
                    e7:f0:e9:0f:4e:2f:bf:fa:52:8e:cd:55:4f:56:82:
                    10:af:8a:30:4e:a1:28:b2:c1:ce:d3:eb:97:99:2b:
                    bd:92:31:82:73:44:a3:9f:8a:2d:66:30:35:29:c1:
                    aa:7e:83:88:ba:83:1d:dc:4a:4f:a2:89:23:a0:34:
                    ab:5d:f2:3e:e0:4a:54:93:22:9e:b1:54:6d:76:ea:
                    b6:52:13:9e:81:ba:f8:1e:d8:38:2f:4f:51:96:bd:
                    ed:e3:ef:29:19:06:88:d8:8f:fb:f4:27:d7:2f:ee:
                    52:68:50:a3:fe:54:73:5c:d3:87:c2:4a:00:9f:66:
                    cc:4e:ab:58:a6:66:9c:67:55:fe:f6:74:2f:8b:df:
                    17:95:d1:d0:f9:93:ff:1f:49:db:de:1d:e3:fb:7f:
                    25:5e:81:9c:3f:27:3f:b9:4c:af:c3:03:d7:e1:08:
                    b0:d6:49:6f:36:37:46:43:f2:f3:cc:99:a2:7e:3f:
                    98:42:9b:42:25:04:04:45:42:3c:ea:fe:74:30:2a:
                    0e:d3:99:5b:73:d5:61:e8:c1:6b:76:ab:05:23:48:
                    61:25:6c:31:a3:44:cd:83:45:da:58:0b:21:24:d7:
                    8b:0e:a3:c6:74:7f:2d:6d:c9:79:23:00:de:f2:43:
                    02:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9E:71:09:20:B5:D4:30:05:57:4B:11:69:50:D6:BF:B4:59:7D:D9
            X509v3 Authority Key Identifier:
                keyid:70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a383030303a3a2f33332d3333203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         aa:13:7e:30:b6:28:be:53:39:80:e8:27:35:7c:ff:cc:49:02:
         94:98:2d:2e:31:cb:c6:46:a2:f3:66:2f:5e:58:56:23:1f:fa:
         af:53:95:f7:af:2a:6a:e6:ee:b1:88:a9:fd:fd:2e:6a:73:3b:
         75:fd:36:98:02:a1:78:d9:57:f0:bf:c6:92:c2:f3:38:8c:d1:
         7c:aa:72:7f:62:ec:ea:f6:91:0d:c9:2d:5a:33:66:37:d7:63:
         22:ac:32:32:81:85:ea:6c:be:d7:a4:08:f2:4b:38:67:90:3b:
         89:53:b2:51:57:36:c6:9c:4a:d0:76:46:f7:7f:ce:9e:97:1e:
         90:63:1e:47:20:e1:23:9a:c4:50:5d:c1:5b:07:be:ee:bc:1c:
         7f:a1:4c:28:5f:92:06:87:5d:f8:61:99:ad:08:b1:e0:94:3c:
         d8:dd:09:c2:48:88:3b:29:dd:34:69:6e:bd:2d:b8:ed:4a:db:
         c2:ed:8d:f1:52:f6:8a:be:c9:05:6d:95:4a:b6:de:9a:9f:47:
         13:a4:43:1b:f9:fc:41:6d:0d:1b:0a:92:a3:be:c0:b5:d1:67:
         b5:ca:f6:91:a9:65:25:08:b3:a0:b1:89:5c:6b:4f:18:e6:a5:
         77:f2:5f:2d:48:60:f4:f8:0b:c2:42:06:f7:15:b2:86:75:4f:
         d8:fc:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:46:08 2024 by rpki-client on console-ams.rpki-client.org