Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/323830343a373730343a3a2f33322d313238203d3e20323731313439.roa
File:                     323830343a373730343a3a2f33322d313238203d3e20323731313439.roa (raw, json)
Hash identifier:          gGDWPuiTEv/P3telAkwuc8FfK/r/WmbVSB2l0efIG4o=
Subject key identifier:   4D:54:5E:46:7E:54:0C:68:31:0E:12:6A:C3:E5:9A:26:CD:10:7E:62
Certificate issuer:       /CN=B0A4009274DD53A80D3049538FAEE1B9428B7C80
Certificate serial:       12C2EB320E6E34247526210321FD3C66F6AD9EAB
Authority key identifier: B0:A4:00:92:74:DD:53:A8:0D:30:49:53:8F:AE:E1:B9:42:8B:7C:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0A4009274DD53A80D3049538FAEE1B9428B7C80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/323830343a373730343a3a2f33322d313238203d3e20323731313439.roa
Signing time:             Wed 30 Oct 2024 19:18:55 +0000
ROA not before:           Wed 30 Oct 2024 19:13:55 +0000
ROA not after:            Wed 29 Oct 2025 19:18:55 +0000
asID:                     271149
IP address blocks:        2804:7704::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c2:eb:32:0e:6e:34:24:75:26:21:03:21:fd:3c:66:f6:ad:9e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A4009274DD53A80D3049538FAEE1B9428B7C80
        Validity
            Not Before: Oct 30 19:13:55 2024 GMT
            Not After : Oct 29 19:18:55 2025 GMT
        Subject: CN=4D545E467E540C68310E126AC3E59A26CD107E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:9a:55:8b:95:34:4b:98:79:ce:f4:b3:43:
                    6f:84:14:b5:8c:c1:81:8f:ea:1b:d8:9b:2f:0a:1c:
                    8d:8f:cb:e3:55:70:8c:ee:f1:7e:9e:64:3e:e7:1b:
                    4c:61:9c:d7:6b:8f:4b:2c:79:71:87:ef:a4:a9:d8:
                    bd:c6:71:39:c7:d8:ef:bf:da:28:4f:07:dd:f3:55:
                    83:45:40:e3:32:49:d7:04:62:63:a1:1e:8d:65:40:
                    15:6e:10:9e:8f:65:d7:2a:d9:31:e7:5e:d0:5b:02:
                    9d:22:81:58:07:34:71:5d:70:15:ec:f3:67:72:b5:
                    cb:7f:1c:39:1e:c2:60:91:8e:6a:4f:ab:ab:43:5b:
                    9b:65:95:89:47:8f:73:7f:5b:0b:b0:cb:1b:6f:96:
                    13:05:34:b8:b1:41:e8:e5:42:ab:72:d7:67:44:8c:
                    44:a4:e2:40:42:87:5b:67:32:ea:c1:4c:bd:d7:8b:
                    a0:9e:11:4a:73:06:b6:3e:9e:61:a3:2e:1b:a3:36:
                    38:b6:c9:9d:93:24:84:2e:92:2b:82:c2:5c:e8:26:
                    10:1e:36:fe:25:2b:ba:91:a8:38:05:6e:97:bf:86:
                    aa:97:11:74:bc:c4:79:98:0c:93:c9:32:99:90:a7:
                    10:ad:e5:23:16:44:01:1e:79:e8:a3:12:59:96:29:
                    45:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:54:5E:46:7E:54:0C:68:31:0E:12:6A:C3:E5:9A:26:CD:10:7E:62
            X509v3 Authority Key Identifier:
                keyid:B0:A4:00:92:74:DD:53:A8:0D:30:49:53:8F:AE:E1:B9:42:8B:7C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/B0A4009274DD53A80D3049538FAEE1B9428B7C80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0A4009274DD53A80D3049538FAEE1B9428B7C80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/323830343a373730343a3a2f33322d313238203d3e20323731313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7704::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:37:04:fc:a4:31:80:6f:8d:3a:7f:f3:03:a1:12:73:7c:23:
         49:67:09:3a:7f:68:0b:5f:3a:6b:b7:4b:b6:a6:26:21:93:ac:
         c3:2f:dc:d5:36:22:ac:1a:9e:f6:d9:4d:20:43:d9:e9:75:75:
         51:c2:7c:ff:b3:cc:4a:4e:37:75:34:5a:f3:70:5a:25:d8:b1:
         90:42:af:13:25:bd:80:4d:d3:79:c2:a2:cc:80:03:7a:44:c5:
         b1:80:bc:f7:97:b7:88:93:45:6f:5a:03:46:dc:84:67:e0:33:
         ee:4e:26:24:d3:1c:55:0a:af:a7:c1:b4:55:36:03:3d:c2:13:
         7f:c3:c3:9f:3f:5f:7b:df:e7:2b:9c:b5:4c:d4:c8:27:bc:0e:
         ca:a0:c1:e9:41:c3:6d:15:72:74:58:ab:d1:98:11:c6:6d:4c:
         24:06:92:fe:da:89:c5:ec:67:9b:7c:6d:fc:6f:15:e5:26:11:
         d4:88:dd:e4:f4:f7:df:15:c6:b0:a0:4d:39:60:e9:29:bb:04:
         f0:04:64:e1:6a:f0:6f:56:14:99:53:9f:74:b6:3b:00:a7:6a:
         cb:24:37:4b:e4:6f:9b:8c:3d:81:60:60:9f:a1:94:86:20:5f:
         24:f0:93:25:94:d6:ae:32:b3:f5:d4:e0:05:94:4d:7d:01:32:
         6e:1a:fd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 13:26:32 2024 by rpki-client on console-fra.rpki-client.org