Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a383030303a3a2f33342d3334203d3e20323633393037.roa
File:                     323830343a323738383a383030303a3a2f33342d3334203d3e20323633393037.roa (raw, json)
Hash identifier:          1yR/wOwHRmD3RpmtYA8mbdUn6kLId66Y5ksgJJo5cEk=
Subject key identifier:   A8:21:7E:CF:D9:4C:71:2B:A6:31:D2:DE:EE:F0:00:63:8B:60:F8:1F
Certificate issuer:       /CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
Certificate serial:       03BAE258AAEE7B5F84D8838BA25BD2E142ABA651
Authority key identifier: 70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a383030303a3a2f33342d3334203d3e20323633393037.roa
Signing time:             Fri 05 Apr 2024 01:46:33 +0000
ROA not before:           Fri 05 Apr 2024 01:41:33 +0000
ROA not after:            Fri 04 Apr 2025 01:46:33 +0000
asID:                     263907
IP address blocks:        2804:2788:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ba:e2:58:aa:ee:7b:5f:84:d8:83:8b:a2:5b:d2:e1:42:ab:a6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
        Validity
            Not Before: Apr  5 01:41:33 2024 GMT
            Not After : Apr  4 01:46:33 2025 GMT
        Subject: CN=A8217ECFD94C712BA631D2DEEEF000638B60F81F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:b8:41:58:e9:12:83:fc:c6:de:1a:15:5c:
                    df:d1:91:d5:3e:d0:b3:2b:6b:6c:d6:b4:2d:60:59:
                    31:f8:71:fa:7e:97:98:70:c9:fb:b9:ad:5d:b5:40:
                    81:46:c5:95:ce:e1:ee:49:1e:6e:f1:9d:1b:1e:16:
                    4d:66:48:23:ae:42:d0:9f:61:f4:b9:51:40:c6:25:
                    c6:09:24:c7:92:03:e0:2a:5c:22:92:86:0f:0d:c9:
                    ed:5c:cc:4c:f6:f0:38:7f:31:f6:04:2c:9b:49:29:
                    2c:d2:08:0e:69:70:ab:73:85:08:96:9e:fa:55:0f:
                    2a:50:19:60:db:f7:ea:c9:0d:ce:86:c7:43:dc:63:
                    99:c5:19:60:f3:05:5d:70:a7:f5:7d:bf:53:be:50:
                    0d:1c:89:14:12:a3:02:d8:87:bc:28:bc:ab:38:63:
                    1c:c4:ea:3b:1f:77:cf:49:bf:d1:38:4f:d2:17:4a:
                    e1:55:b9:92:48:5a:77:5b:3b:66:f8:6f:0d:74:ce:
                    58:bf:ba:04:2b:fe:af:38:4c:16:8d:b9:8b:a5:81:
                    4e:19:98:13:f5:bb:8c:ce:b3:48:7c:60:2a:ee:82:
                    24:0f:84:5a:96:64:97:40:db:09:1f:7c:cb:46:c6:
                    70:0f:2b:7d:b0:73:d7:ea:33:8d:4b:a8:cd:1b:b0:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:21:7E:CF:D9:4C:71:2B:A6:31:D2:DE:EE:F0:00:63:8B:60:F8:1F
            X509v3 Authority Key Identifier:
                keyid:70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a383030303a3a2f33342d3334203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         72:25:b2:f7:4b:dc:c7:97:62:54:c4:1b:f0:f6:9e:d0:3b:5c:
         61:a6:9c:42:31:4b:b7:c8:4c:4e:f1:04:9a:e3:da:2f:12:31:
         ec:65:0a:8f:a2:1f:84:d1:d2:a9:c2:e7:0a:2c:bc:73:d2:b7:
         4d:89:40:e5:46:a5:b6:e8:2b:6a:44:5c:ab:dc:25:fe:fb:ef:
         ac:67:a5:11:26:93:a2:59:ee:8d:eb:89:0c:21:45:93:c9:e0:
         5b:a0:68:9d:14:1e:8d:db:b7:01:d1:67:87:f2:5e:4a:01:cb:
         a8:8a:6e:25:6c:01:78:30:c1:ad:4b:78:af:0e:93:b7:d6:d4:
         c9:35:e9:f4:de:5d:1b:92:1d:6c:24:84:38:a8:9e:dc:3a:31:
         4e:ba:4c:24:b0:bc:ac:2d:4a:61:81:05:a9:73:13:db:aa:5a:
         27:11:5b:34:31:1a:34:67:8f:6a:d7:ef:4a:20:bc:5c:db:b6:
         6a:e8:b0:73:db:0f:6a:33:55:ef:bf:d0:1c:72:05:95:20:4f:
         d3:d7:c7:67:0b:9b:e3:57:67:c7:a4:a1:9d:53:ec:fc:d3:85:
         8e:32:e5:24:5d:10:d2:9d:ba:08:39:3f:f7:ba:3d:34:50:1b:
         ca:d7:7b:ee:6c:e3:09:c1:60:0f:80:be:8b:14:a9:32:87:10:
         df:f8:04:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:46:08 2024 by rpki-client on console-ams.rpki-client.org