Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/323830343a376537633a383030303a3a2f33332d3333203d3e20323731363237.roa
File:                     323830343a376537633a383030303a3a2f33332d3333203d3e20323731363237.roa (raw, json)
Hash identifier:          8fG0LqZ0CETBO77WmcFWiFMeomlis5MfWbt3fUQe7dk=
Subject key identifier:   0C:16:4D:42:88:4A:F3:E8:05:BA:30:FE:5A:62:DA:65:5F:43:E1:6F
Certificate issuer:       /CN=AD217163EB1953839A16E6F7DDA1F424A306D0AC
Certificate serial:       1A77668244ABB8173A08F709D4B6FD69AE6D6D31
Authority key identifier: AD:21:71:63:EB:19:53:83:9A:16:E6:F7:DD:A1:F4:24:A3:06:D0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD217163EB1953839A16E6F7DDA1F424A306D0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/323830343a376537633a383030303a3a2f33332d3333203d3e20323731363237.roa
Signing time:             Mon 18 Nov 2024 16:00:40 +0000
ROA not before:           Mon 18 Nov 2024 15:55:40 +0000
ROA not after:            Mon 17 Nov 2025 16:00:40 +0000
asID:                     271627
IP address blocks:        2804:7e7c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:77:66:82:44:ab:b8:17:3a:08:f7:09:d4:b6:fd:69:ae:6d:6d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD217163EB1953839A16E6F7DDA1F424A306D0AC
        Validity
            Not Before: Nov 18 15:55:40 2024 GMT
            Not After : Nov 17 16:00:40 2025 GMT
        Subject: CN=0C164D42884AF3E805BA30FE5A62DA655F43E16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a8:40:1e:63:df:63:44:b8:85:b5:a9:41:0a:
                    22:98:9f:ca:2a:01:87:72:98:4b:50:89:cd:89:d2:
                    7f:f7:8d:8a:43:d3:da:ed:04:6c:eb:bc:e4:42:87:
                    90:80:94:4d:df:66:a6:b7:89:d6:48:6a:2d:ec:98:
                    4b:fb:47:8f:a3:5c:28:24:63:e4:5f:b6:32:9e:25:
                    14:3d:26:ae:16:63:c5:2d:45:a6:5f:53:8e:8f:fe:
                    30:f8:17:44:6c:7d:88:79:c4:67:90:a8:00:5c:27:
                    c1:36:a0:34:e5:11:1b:b8:ee:d4:73:e4:2d:58:8d:
                    2e:ba:b8:0a:36:de:66:c9:d3:3c:69:e6:fe:b0:2b:
                    67:cd:34:fd:b3:b2:ea:87:5f:8e:ad:f6:70:1e:f8:
                    23:51:a0:f2:70:a9:35:e8:2d:31:f0:2f:72:df:6b:
                    01:f7:fe:39:cb:4f:ee:fc:ad:b4:4d:6f:cb:ca:f1:
                    9b:56:98:bc:cd:1e:bb:69:07:39:6f:99:8e:06:c7:
                    4f:74:e4:86:e2:13:33:d7:07:e4:8e:7f:34:c6:5f:
                    88:8a:03:97:86:2d:ef:b1:15:8f:1e:8c:76:12:e6:
                    51:14:f6:07:0c:f8:a4:5a:b8:37:34:ab:14:3f:38:
                    73:c1:8d:d5:9a:22:aa:2b:3b:47:a1:35:4e:4b:da:
                    f6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:16:4D:42:88:4A:F3:E8:05:BA:30:FE:5A:62:DA:65:5F:43:E1:6F
            X509v3 Authority Key Identifier:
                keyid:AD:21:71:63:EB:19:53:83:9A:16:E6:F7:DD:A1:F4:24:A3:06:D0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/AD217163EB1953839A16E6F7DDA1F424A306D0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD217163EB1953839A16E6F7DDA1F424A306D0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/323830343a376537633a383030303a3a2f33332d3333203d3e20323731363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e7c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         69:fa:d5:bc:93:49:a0:f4:5a:8e:ae:d5:78:a7:99:ad:fa:26:
         87:4e:d8:fd:48:83:5f:8b:9e:e1:f7:6f:43:8e:1e:c3:46:45:
         6b:6d:c8:5e:e8:00:6f:4e:96:c3:c6:a2:82:ba:37:b9:ab:a1:
         8d:67:5b:94:32:59:ce:89:01:cf:a0:a3:ac:c6:4a:b6:92:c8:
         92:6b:d9:77:f3:21:5a:aa:9e:37:ec:ae:22:31:fc:e6:ea:d2:
         c2:88:f4:5e:08:78:c2:62:38:49:6a:fc:eb:ca:0b:0a:85:d7:
         80:d8:ca:98:30:2c:c7:db:80:84:59:c5:ca:c7:02:78:df:89:
         e3:05:cf:67:b8:a6:0b:0d:5a:37:6c:9a:04:bb:f5:87:f3:e4:
         83:ec:ca:ba:87:a4:9f:37:06:83:35:cf:ff:6b:f2:96:42:34:
         10:de:23:13:6e:d2:0a:3e:be:21:08:15:77:66:99:cb:01:52:
         94:86:ba:22:0e:ff:20:15:0c:dc:90:4c:d5:60:ba:c9:4b:c6:
         da:26:cb:59:66:68:e2:8f:d1:c2:ee:3c:71:ff:f9:b0:fe:f8:
         a6:8f:51:4d:72:fe:77:24:fc:20:59:da:02:b2:c0:35:f7:8a:
         6d:44:4a:6c:1d:b7:e7:69:a2:ed:6a:7a:d7:5d:dd:25:f0:15:
         8b:f4:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:55:55 2024 by rpki-client on console-fra.rpki-client.org