Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/323830343a376632303a333a3a2f34382d3438203d3e20323731363638.roa
File:                     323830343a376632303a333a3a2f34382d3438203d3e20323731363638.roa (raw, json)
Hash identifier:          aq2VSnhRbRQz+FRBsJgauTcc1h5O1rtfyQYskQ7L+qo=
Subject key identifier:   A4:25:4D:3B:5D:E0:1D:79:DB:35:BE:7B:20:90:0D:93:D8:6C:07:7A
Certificate issuer:       /CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
Certificate serial:       6157E6F693168223150D8C9661B43B58672AB291
Authority key identifier: C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/323830343a376632303a333a3a2f34382d3438203d3e20323731363638.roa
Signing time:             Thu 11 Jul 2024 19:00:40 +0000
ROA not before:           Thu 11 Jul 2024 18:55:40 +0000
ROA not after:            Thu 10 Jul 2025 19:00:40 +0000
asID:                     271668
IP address blocks:        2804:7f20:3::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:57:e6:f6:93:16:82:23:15:0d:8c:96:61:b4:3b:58:67:2a:b2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
        Validity
            Not Before: Jul 11 18:55:40 2024 GMT
            Not After : Jul 10 19:00:40 2025 GMT
        Subject: CN=A4254D3B5DE01D79DB35BE7B20900D93D86C077A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:25:b7:8f:30:8b:c7:3a:dc:63:90:c7:91:
                    cb:bf:ed:20:32:9f:cd:10:79:ad:84:51:c5:ba:3f:
                    4d:e2:94:ad:eb:81:dc:28:aa:f2:55:d5:f5:41:99:
                    83:8b:0b:a4:84:b9:2f:6d:b2:e5:25:a4:58:e7:5e:
                    86:6d:ca:03:b1:2d:61:38:d4:11:b4:08:b0:39:2d:
                    01:b7:6b:0d:74:c4:75:0d:1e:0d:e8:df:83:e0:22:
                    19:4d:30:82:33:79:ae:57:9c:67:aa:35:5f:6d:09:
                    a8:1f:f4:a1:d2:1e:d6:62:47:4e:0d:0e:c8:7b:8a:
                    fa:7b:80:88:dd:1a:23:cd:1a:3d:76:d5:10:c5:c1:
                    3d:53:8d:96:d6:b6:1a:28:e6:dc:8d:f0:24:6b:d1:
                    05:72:30:31:30:ec:47:ad:d1:16:6a:f7:ba:cc:97:
                    ab:ab:b2:16:b1:0f:7b:6d:e2:11:0e:37:1d:6f:9a:
                    48:c6:bf:be:5f:52:b1:90:69:a4:41:0f:31:e3:c5:
                    a2:b0:6e:2b:ce:eb:dc:3a:bf:ae:dd:54:32:64:ed:
                    fb:f9:44:2a:c2:aa:d9:93:ec:40:e3:3f:d3:4f:67:
                    7e:bc:6c:7e:fe:07:79:c5:3f:aa:94:bd:d1:b4:f1:
                    15:e0:f8:22:f5:24:ae:c4:83:9f:c3:74:b9:4e:5f:
                    20:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:25:4D:3B:5D:E0:1D:79:DB:35:BE:7B:20:90:0D:93:D8:6C:07:7A
            X509v3 Authority Key Identifier:
                keyid:C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/323830343a376632303a333a3a2f34382d3438203d3e20323731363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f20:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:f7:b2:95:9b:55:15:f5:f8:69:37:49:bd:52:3c:ac:88:5c:
         e7:be:82:9f:42:f7:72:65:2c:3c:c2:61:16:4a:e4:2e:6d:7e:
         7f:5d:b1:4e:6e:7d:17:71:85:a9:63:52:60:95:77:a0:47:31:
         79:3f:d1:70:d1:e6:e2:66:15:20:f8:c5:24:11:73:6b:40:24:
         cc:d6:f5:ea:2f:58:cb:61:6e:15:b6:c4:87:88:1d:ed:8d:ac:
         6f:30:a4:4a:4c:b4:04:e0:54:fa:22:c6:03:33:7e:79:cd:6f:
         8a:c9:eb:9a:81:c1:ac:56:66:10:cb:93:73:27:ae:48:cf:2e:
         bb:cc:ed:68:bd:2a:16:02:9e:14:4b:ba:df:8e:81:a6:9c:06:
         fa:c7:73:95:21:a0:00:b4:c9:cd:c1:73:20:b6:81:fe:43:5b:
         b8:5c:a4:d4:91:e5:00:ce:c7:1f:b3:a0:55:46:53:a3:72:dc:
         fe:f1:04:96:2d:fa:03:5f:70:be:f8:da:a9:9a:f6:6d:fd:a7:
         bf:0f:bc:92:ad:1a:8c:37:41:15:4b:b2:ca:5e:3c:90:32:2e:
         bc:88:a1:25:01:cf:59:b3:a1:ce:c5:3c:fd:7f:98:8f:2d:34:
         80:37:6b:09:33:22:33:f2:0d:d3:d5:9d:76:2e:30:d7:15:7f:
         48:77:7e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 06:09:40 2024 by rpki-client on console-ams.rpki-client.org