Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a3a2f33332d3333203d3e20323633393037.roa
File:                     323830343a323738383a3a2f33332d3333203d3e20323633393037.roa (raw, json)
Hash identifier:          tY4S/OuEavVQnxSamdqM+vCzLra8T1l0Gk3AUUwOj3s=
Subject key identifier:   A4:34:2E:55:A9:2F:57:3D:65:7F:8E:F4:10:F8:45:CC:52:7B:1C:E9
Certificate issuer:       /CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
Certificate serial:       64F32142A68472C3B03EAB18E9B1610133509737
Authority key identifier: 70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a3a2f33332d3333203d3e20323633393037.roa
Signing time:             Fri 05 Apr 2024 01:46:33 +0000
ROA not before:           Fri 05 Apr 2024 01:41:33 +0000
ROA not after:            Fri 04 Apr 2025 01:46:33 +0000
asID:                     263907
IP address blocks:        2804:2788::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f3:21:42:a6:84:72:c3:b0:3e:ab:18:e9:b1:61:01:33:50:97:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
        Validity
            Not Before: Apr  5 01:41:33 2024 GMT
            Not After : Apr  4 01:46:33 2025 GMT
        Subject: CN=A4342E55A92F573D657F8EF410F845CC527B1CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:26:c9:37:e6:ef:a0:6f:c0:a2:89:58:e7:
                    3e:9f:ad:7a:dc:98:62:06:18:3c:2d:07:76:1c:40:
                    d1:a6:1c:c6:7b:3f:fc:4f:65:da:35:a6:5a:2b:88:
                    f7:2c:4e:07:fd:38:93:09:2b:02:08:c9:d6:bb:61:
                    11:0f:6c:f9:3c:70:f2:c6:f9:d6:aa:a1:0e:88:11:
                    a7:5d:94:a0:91:6c:1b:71:b7:d5:fa:a5:89:36:28:
                    08:b2:e8:55:2f:f1:b9:34:23:4b:c7:20:c3:14:24:
                    5d:24:ff:24:ac:2f:c4:66:f7:12:2b:41:cd:15:43:
                    39:d9:85:70:04:b1:1f:2a:6e:10:c6:d0:79:c7:de:
                    bd:7d:eb:99:58:39:22:e3:ad:62:ba:7d:72:ef:01:
                    a8:aa:73:64:b7:86:6b:24:4e:bc:a4:71:7a:53:88:
                    2a:56:ee:ea:90:07:e9:40:d6:e4:3c:d5:9f:ac:e3:
                    23:aa:f3:cf:9d:9e:93:c9:03:07:7d:4f:11:c7:c4:
                    da:00:68:52:e2:11:fb:d9:46:6c:56:94:b2:ca:6d:
                    f8:b5:da:75:ec:de:fc:aa:bd:34:ec:df:02:eb:da:
                    6a:fe:79:7d:12:d2:61:3b:5d:83:1d:dd:a1:42:b5:
                    98:b6:56:af:3e:c7:f8:9b:34:10:f6:23:6d:d2:ee:
                    54:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:2E:55:A9:2F:57:3D:65:7F:8E:F4:10:F8:45:CC:52:7B:1C:E9
            X509v3 Authority Key Identifier:
                keyid:70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a3a2f33332d3333203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788::/33

    Signature Algorithm: sha256WithRSAEncryption
         32:a7:b9:a0:d2:f7:14:54:50:91:74:ec:e6:5e:78:b0:8d:69:
         bb:a2:d5:51:b9:1d:06:a8:04:f4:76:92:74:01:e3:6f:fe:fe:
         a3:52:00:d6:ac:03:80:c3:4f:56:f4:34:24:8a:2e:ce:dc:d6:
         53:8c:62:bd:ff:78:15:10:b0:8d:65:5c:a0:ad:e9:c8:06:27:
         2a:b7:00:17:43:0b:bf:85:ba:e9:20:fe:9a:97:01:c1:e0:7b:
         8d:0d:e0:99:b7:4c:83:2f:1d:6b:3c:28:00:2a:a3:85:3e:b6:
         b9:04:0c:51:4d:d3:31:5b:f4:0b:db:86:77:b6:83:76:13:d0:
         59:a3:6c:75:dc:8e:73:67:7b:4d:db:21:ad:dc:23:ca:4b:52:
         cb:af:c8:eb:5a:5c:e9:b6:3a:78:c4:d0:2c:56:22:73:8c:d9:
         76:fd:29:4f:bd:19:18:5f:6e:c7:ac:0d:12:35:4b:ab:f8:34:
         3b:d8:d2:51:e2:db:a8:92:11:e2:5e:39:ac:10:8d:c5:12:97:
         de:9f:66:6b:f7:9d:20:00:b2:5b:32:fd:a8:c0:3c:c9:8b:6f:
         59:01:e5:c3:6a:a9:5e:c1:fc:9d:16:f6:b6:54:75:b6:1f:e7:
         af:bb:65:5b:51:bf:a0:2f:2f:30:32:b9:ea:4a:c5:1e:e2:77:
         e0:71:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:46:08 2024 by rpki-client on console-ams.rpki-client.org