Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/1/323830343a346332303a3a2f33322d3334203d3e20323637333531.roa
File:                     323830343a346332303a3a2f33322d3334203d3e20323637333531.roa (raw, json)
Hash identifier:          Hd3J/M9A9cfqnFt5Bc/5yWIPP2qStrk8SQAakQHxHXU=
Subject key identifier:   09:FD:E6:B7:D7:85:46:3F:25:DC:7D:ED:C9:30:ED:0E:BA:B9:4D:87
Certificate issuer:       /CN=73C01ADD8CBA0394C678875BB3571CD4275399B1
Certificate serial:       29A7D097E51535D94116E6D5922D6C21166FD3B7
Authority key identifier: 73:C0:1A:DD:8C:BA:03:94:C6:78:87:5B:B3:57:1C:D4:27:53:99:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C01ADD8CBA0394C678875BB3571CD4275399B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/1/323830343a346332303a3a2f33322d3334203d3e20323637333531.roa
Signing time:             Thu 04 Apr 2024 14:07:26 +0000
ROA not before:           Thu 04 Apr 2024 14:02:26 +0000
ROA not after:            Thu 03 Apr 2025 14:07:26 +0000
asID:                     267351
IP address blocks:        2804:4c20::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a7:d0:97:e5:15:35:d9:41:16:e6:d5:92:2d:6c:21:16:6f:d3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C01ADD8CBA0394C678875BB3571CD4275399B1
        Validity
            Not Before: Apr  4 14:02:26 2024 GMT
            Not After : Apr  3 14:07:26 2025 GMT
        Subject: CN=09FDE6B7D785463F25DC7DEDC930ED0EBAB94D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9c:3f:ab:ca:6e:87:15:02:a3:15:7d:cf:9a:
                    9b:15:5f:b7:5d:96:7c:14:5c:53:fe:ad:4d:f1:eb:
                    9b:e4:60:b0:2f:3c:0e:9e:d1:f2:84:7b:56:8f:b6:
                    6a:04:f4:4c:cf:6c:6f:d9:16:9f:7d:8f:a9:58:5c:
                    13:54:c1:a0:39:ec:f8:f4:1a:71:36:21:4a:40:29:
                    ff:e4:cf:be:12:47:a4:b1:c3:96:30:a0:44:49:c0:
                    27:c0:c3:35:00:46:e2:c8:20:6a:c9:28:97:b0:c3:
                    29:13:ae:14:6d:ac:8d:6f:f8:69:d2:80:50:55:91:
                    ed:18:c9:27:32:48:b7:cd:6d:d4:f4:fc:f4:b6:bd:
                    2d:9d:b4:d6:cf:c8:1c:ad:99:7d:dc:4d:7f:1b:97:
                    b9:ea:3f:11:55:86:da:a3:47:60:b1:54:59:4a:e0:
                    16:e5:ba:fd:10:98:31:e0:e6:e5:96:30:59:2c:02:
                    42:73:12:db:8e:ac:87:78:a6:57:50:30:32:d1:ab:
                    94:5a:f3:35:b7:4d:9b:cf:38:61:b0:09:8e:90:29:
                    28:c9:fc:1b:f1:17:03:e3:9c:dd:f4:66:8c:c4:6a:
                    96:9b:87:35:2e:74:4c:cb:b4:28:1f:59:05:29:d0:
                    1e:af:3b:7f:60:0e:5d:63:bf:43:9c:7d:e8:d3:b7:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FD:E6:B7:D7:85:46:3F:25:DC:7D:ED:C9:30:ED:0E:BA:B9:4D:87
            X509v3 Authority Key Identifier:
                keyid:73:C0:1A:DD:8C:BA:03:94:C6:78:87:5B:B3:57:1C:D4:27:53:99:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/1/73C01ADD8CBA0394C678875BB3571CD4275399B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C01ADD8CBA0394C678875BB3571CD4275399B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/1/323830343a346332303a3a2f33322d3334203d3e20323637333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:13:17:04:69:7b:d8:30:8e:52:d7:dc:38:79:84:a6:51:c3:
         7e:56:a9:b8:a3:99:1e:34:f0:d8:c3:6f:24:00:48:7a:c1:98:
         2b:ae:5e:7d:ad:ca:58:a3:e2:7f:a2:75:c0:c3:9e:1b:73:72:
         0d:e1:00:c5:67:d2:49:6e:84:c3:c6:4e:48:36:03:ff:30:56:
         18:93:9e:30:3a:83:98:0f:25:08:15:18:fd:ab:5e:08:5a:ae:
         81:76:ed:a8:45:9b:43:0c:cf:7e:22:1f:ac:65:67:ec:60:b7:
         d4:1f:32:d0:2a:8e:f2:f0:8c:2b:05:84:fb:e7:3d:31:06:a1:
         96:f9:b2:33:f9:ed:c9:b8:b7:3e:2d:26:56:9e:c7:36:05:00:
         2c:4f:5c:d7:7d:fb:f3:fe:b0:10:89:db:1a:9f:f1:49:5a:46:
         0b:d4:6b:39:34:09:7a:6b:15:78:f7:3f:3a:aa:30:d1:a4:9c:
         c3:02:3a:ae:ef:9e:40:d2:b9:ac:97:84:c2:bc:10:c8:30:8e:
         fe:13:29:91:59:27:5d:0e:4f:90:76:29:41:6e:7b:88:5c:04:
         fc:df:7b:ba:10:d3:c2:74:76:29:f1:5b:e5:f6:aa:ef:40:6e:
         41:80:ed:ca:48:66:a6:f9:b6:96:2b:14:ff:03:5e:ac:3c:c8:
         fd:ff:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org