Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/1/323830343a366463303a3a2f33322d313238203d3e20323730353533.roa
File:                     323830343a366463303a3a2f33322d313238203d3e20323730353533.roa (raw, json)
Hash identifier:          r5IJErzVJMurAO+d3ALTzgdKWPKOJPctLIkoowkhK+c=
Subject key identifier:   A4:64:E0:2C:B7:9C:D0:DB:9D:39:7D:95:BC:B8:89:2E:2D:CB:08:E2
Certificate issuer:       /CN=C7A089B75DD1C5F5B751D74D06767F7458433703
Certificate serial:       4C182578EEE5A5C7A28D8D4622BE8D3FE56E15CF
Authority key identifier: C7:A0:89:B7:5D:D1:C5:F5:B7:51:D7:4D:06:76:7F:74:58:43:37:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7A089B75DD1C5F5B751D74D06767F7458433703.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/1/323830343a366463303a3a2f33322d313238203d3e20323730353533.roa
Signing time:             Thu 04 Apr 2024 14:12:29 +0000
ROA not before:           Thu 04 Apr 2024 14:07:29 +0000
ROA not after:            Thu 03 Apr 2025 14:12:29 +0000
asID:                     270553
IP address blocks:        2804:6dc0::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:18:25:78:ee:e5:a5:c7:a2:8d:8d:46:22:be:8d:3f:e5:6e:15:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7A089B75DD1C5F5B751D74D06767F7458433703
        Validity
            Not Before: Apr  4 14:07:29 2024 GMT
            Not After : Apr  3 14:12:29 2025 GMT
        Subject: CN=A464E02CB79CD0DB9D397D95BCB8892E2DCB08E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f8:57:40:92:23:c5:fc:c0:ef:68:4b:09:9f:
                    2a:a2:dc:d2:9b:9b:25:6a:42:a3:5b:8d:14:14:61:
                    86:54:a7:d1:2d:2b:bf:9d:90:0c:67:f8:69:15:b5:
                    e6:72:aa:cb:cb:4a:3f:57:48:0c:39:b3:61:20:4a:
                    12:99:45:10:e2:26:41:e2:73:0a:34:90:0f:c9:c7:
                    a9:7e:78:05:56:d6:56:52:f0:33:1b:b9:5b:6b:8a:
                    23:07:d0:1f:c5:c8:d9:21:4c:c8:6f:bf:be:29:11:
                    27:69:85:2d:2f:73:ef:0f:32:4a:2c:a0:df:1e:11:
                    fb:01:c1:22:2d:dd:a0:b3:71:72:24:b9:2b:ea:96:
                    44:fb:1d:71:30:a4:d9:c6:b9:32:43:5d:fd:76:e0:
                    79:02:52:6c:9c:16:93:3b:ee:a8:fb:1e:46:2f:e0:
                    b1:5a:f5:8f:8e:f9:d9:72:20:85:11:1a:f6:3f:31:
                    c4:5a:5e:0f:2c:ef:1a:38:a9:f2:70:a4:6a:88:75:
                    e7:a7:47:36:1a:71:9e:c9:e3:3e:a3:de:04:e9:7f:
                    3c:ae:6a:6a:20:fa:d3:f5:4b:c3:67:1f:e2:f5:82:
                    b2:68:24:e0:93:f5:19:a0:ac:2e:66:b5:9b:bc:f4:
                    ac:2f:fb:6c:84:59:f6:4f:35:c8:a5:c0:33:f8:b6:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:64:E0:2C:B7:9C:D0:DB:9D:39:7D:95:BC:B8:89:2E:2D:CB:08:E2
            X509v3 Authority Key Identifier:
                keyid:C7:A0:89:B7:5D:D1:C5:F5:B7:51:D7:4D:06:76:7F:74:58:43:37:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/1/C7A089B75DD1C5F5B751D74D06767F7458433703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7A089B75DD1C5F5B751D74D06767F7458433703.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/1/323830343a366463303a3a2f33322d313238203d3e20323730353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:be:84:86:ef:53:31:69:8b:ec:ad:ff:e4:88:bb:6b:7a:15:
         30:e4:70:c0:f7:44:b6:7a:2b:7c:b9:99:63:69:24:a2:1c:3a:
         50:fc:72:4f:a9:78:7a:f2:11:4e:f9:9f:25:48:0d:9b:7b:f8:
         ca:b8:84:7d:6d:20:94:f0:b7:05:26:f4:13:ae:ae:0c:41:27:
         38:33:2f:f2:cb:c5:68:8c:90:b3:9f:9e:67:c3:9e:ce:bb:f5:
         d3:19:5c:51:b3:7a:ad:a6:ac:de:e3:14:e1:7c:fa:b0:4f:52:
         f3:d6:23:56:9d:e2:e3:c7:79:4b:ed:c0:9b:be:7c:80:9f:e5:
         7f:b8:bf:0e:e8:53:76:94:b7:fa:bf:56:7e:fb:ad:a9:be:68:
         60:08:c8:ad:bc:45:74:1f:4a:b6:08:8c:8a:da:12:9b:e8:8c:
         b6:c0:5d:4d:9e:82:cc:5b:f2:07:34:32:f7:66:85:df:3c:d4:
         bb:1f:83:fc:c5:52:bd:f6:6e:ae:4d:94:b6:d0:75:c9:b1:19:
         38:a2:69:c3:d5:10:c1:e0:62:09:ce:1c:d3:f2:c6:cb:8b:f7:
         14:7c:d9:3a:56:c5:67:83:56:18:f9:28:77:6d:ea:e3:3a:87:
         b9:f3:85:fc:92:7a:80:f5:05:50:1f:47:75:5b:72:a5:0d:a4:
         69:39:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 07:28:39 2024 by rpki-client on console-fra.rpki-client.org