Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a663830303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a663830303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          lQtJyJVX08c3gZxA2lFOIwtACTGDSgs4ul3yelOGbPo=
Subject key identifier:   9A:D2:86:95:30:67:5E:B8:CE:55:2C:AA:AA:72:BA:63:9D:DB:0D:AD
Certificate issuer:       /CN=88F8C25C5F36E30578C91973467F9861B5E60B72
Certificate serial:       1497E3798D9B2852FB541C656BA9FCCDDC543D83
Authority key identifier: 88:F8:C2:5C:5F:36:E3:05:78:C9:19:73:46:7F:98:61:B5:E6:0B:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F8C25C5F36E30578C91973467F9861B5E60B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a663830303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Sat 14 Sep 2024 17:37:41 +0000
ROA not before:           Sat 14 Sep 2024 17:32:41 +0000
ROA not after:            Sat 13 Sep 2025 17:37:41 +0000
asID:                     270440
IP address blocks:        2804:6c04:f800::/37 maxlen: 37

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:97:e3:79:8d:9b:28:52:fb:54:1c:65:6b:a9:fc:cd:dc:54:3d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F8C25C5F36E30578C91973467F9861B5E60B72
        Validity
            Not Before: Sep 14 17:32:41 2024 GMT
            Not After : Sep 13 17:37:41 2025 GMT
        Subject: CN=9AD2869530675EB8CE552CAAAA72BA639DDB0DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:c1:2f:cd:38:3c:b1:bc:54:05:34:a9:c5:
                    d6:a2:b5:17:75:3f:4c:64:23:77:c4:42:f3:af:fd:
                    ef:b6:64:f0:6e:77:69:b6:42:42:13:c2:24:f3:76:
                    31:54:a7:44:87:80:16:5b:4d:88:c1:43:ae:8a:48:
                    0c:16:9b:7e:03:7c:db:ba:e7:c0:40:d2:f2:fe:7e:
                    bb:d2:1d:ae:ab:f1:8d:ed:96:f6:af:35:0e:59:9e:
                    80:86:18:4d:2c:d4:27:8e:65:e2:fe:e3:d6:f2:9e:
                    86:22:f4:d3:34:71:0e:0b:b8:18:50:43:0a:cb:5e:
                    72:c9:a7:e3:04:5c:62:b1:94:6e:45:da:97:36:25:
                    47:88:9d:fc:9d:f2:2b:40:f5:e3:ff:97:38:fc:00:
                    26:5f:36:13:8f:bc:36:4a:3a:2b:cf:1a:c4:ea:73:
                    26:6f:1e:8e:c5:ba:33:79:f9:79:ca:f7:04:4f:2a:
                    be:28:fe:ec:ad:44:33:86:8b:99:4d:c7:b4:95:1b:
                    20:7b:50:79:b5:11:80:0f:b0:f6:19:8e:0a:e5:3d:
                    89:5e:6c:be:53:f4:a2:63:29:e0:c2:3c:57:b7:a1:
                    52:93:24:a1:36:6e:aa:a8:73:53:11:61:5d:77:eb:
                    29:df:1a:f7:7a:af:b2:3e:93:3a:3a:26:23:f8:ab:
                    95:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D2:86:95:30:67:5E:B8:CE:55:2C:AA:AA:72:BA:63:9D:DB:0D:AD
            X509v3 Authority Key Identifier:
                keyid:88:F8:C2:5C:5F:36:E3:05:78:C9:19:73:46:7F:98:61:B5:E6:0B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/88F8C25C5F36E30578C91973467F9861B5E60B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F8C25C5F36E30578C91973467F9861B5E60B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a663830303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:f800::/37

    Signature Algorithm: sha256WithRSAEncryption
         a7:b8:02:32:8d:12:f7:2f:5b:3f:d3:6c:cf:1c:43:bf:62:a1:
         20:40:96:f2:c0:7b:ee:b8:36:62:94:3d:58:12:8d:28:e7:27:
         1b:b8:51:54:5a:08:66:5e:b9:05:93:ca:52:7a:3b:cf:c9:31:
         ce:31:ca:68:2b:ec:7a:7c:18:85:29:cc:fb:7d:b0:9d:0b:0c:
         b8:32:ab:42:a8:5a:53:a2:db:b3:81:ec:85:c6:ab:07:ac:55:
         46:1c:e1:39:d4:67:23:ef:7e:b5:8c:8f:f6:7d:11:77:41:54:
         c6:b0:e2:96:2d:c7:83:c6:3c:d4:44:c3:8a:29:32:98:1b:40:
         09:a1:ed:8d:e8:4a:1f:71:f0:64:da:f6:6f:e4:60:5c:3f:9a:
         35:1c:ec:96:d5:93:74:78:dc:d6:e3:69:90:08:5c:3e:43:aa:
         70:9e:0b:23:ea:28:36:db:a0:42:a1:6c:b8:96:91:94:16:7b:
         9a:7a:19:69:63:34:79:7b:b1:15:4d:64:1b:70:f2:90:d2:b5:
         08:5d:bb:9d:75:85:21:0f:68:da:43:27:af:4b:55:6a:a6:bb:
         6c:43:42:0f:84:c3:99:af:a4:ae:1f:2d:fc:8d:56:f4:43:17:
         d2:8f:b8:5b:c1:a2:c5:d1:35:a1:c1:81:64:13:e5:3d:85:af:
         2d:da:9a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 18:08:55 2024 by rpki-client on console-fra.rpki-client.org