Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/323830343a6532343a3a2f33322d3438203d3e20323632343137.roa
File:                     323830343a6532343a3a2f33322d3438203d3e20323632343137.roa (raw, json)
Hash identifier:          ncCYGMFk649VVWQU38tdB4eWXB+GWGNFGiQWyPLg1oA=
Subject key identifier:   07:EE:D2:C7:79:9D:59:CA:38:52:7B:2C:1B:76:18:4F:16:EF:54:2C
Certificate issuer:       /CN=950A0A5A0F2C11779076736FBBCA766C37783653
Certificate serial:       1AC933EA9BCD49E09CC2727D0230C68BC4E60D1C
Authority key identifier: 95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/323830343a6532343a3a2f33322d3438203d3e20323632343137.roa
Signing time:             Thu 04 Apr 2024 23:55:04 +0000
ROA not before:           Thu 04 Apr 2024 23:50:04 +0000
ROA not after:            Thu 03 Apr 2025 23:55:04 +0000
asID:                     262417
IP address blocks:        2804:e24::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c9:33:ea:9b:cd:49:e0:9c:c2:72:7d:02:30:c6:8b:c4:e6:0d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950A0A5A0F2C11779076736FBBCA766C37783653
        Validity
            Not Before: Apr  4 23:50:04 2024 GMT
            Not After : Apr  3 23:55:04 2025 GMT
        Subject: CN=07EED2C7799D59CA38527B2C1B76184F16EF542C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5c:a2:97:26:2c:dc:76:78:27:46:6a:d6:1d:
                    05:59:2b:52:03:d8:64:6b:10:1f:ac:1d:70:45:51:
                    ca:76:e4:76:e1:db:7d:e5:b8:0a:ae:44:93:3e:ce:
                    18:ce:5c:d6:a9:cf:a9:3d:38:9d:30:d8:61:98:51:
                    69:50:2a:95:66:61:57:ec:7a:c2:ec:d3:84:9a:26:
                    ee:de:24:60:e1:9e:90:ee:09:db:54:d3:6a:e5:e7:
                    00:70:73:6b:84:95:08:b7:61:d3:5b:7b:7d:21:3a:
                    97:5d:9e:d6:c3:fb:5c:9c:e7:74:cc:45:fd:eb:c0:
                    ee:32:fd:56:30:50:39:e9:9d:b2:83:4d:69:85:83:
                    64:98:8e:0a:a8:a3:89:3a:bc:c6:19:7d:de:b5:71:
                    0c:27:a2:87:d3:3a:74:f3:3b:a2:c9:66:31:9f:81:
                    6b:53:fd:c8:67:42:ad:61:33:d3:df:c8:82:8b:01:
                    25:7e:ae:e3:a3:24:2b:4f:fc:1e:89:28:bb:f7:e1:
                    1d:2b:a9:82:43:b4:ce:3f:dc:a9:2b:8d:52:08:a0:
                    ee:2b:8e:8a:04:f3:8b:ba:7a:c0:84:36:a7:62:d9:
                    42:e3:c4:70:e5:31:4c:1f:6d:5e:bd:04:a9:4c:9d:
                    ef:64:9a:c9:73:38:1f:7d:8f:63:4f:8c:5c:32:fc:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EE:D2:C7:79:9D:59:CA:38:52:7B:2C:1B:76:18:4F:16:EF:54:2C
            X509v3 Authority Key Identifier:
                keyid:95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/323830343a6532343a3a2f33322d3438203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e24::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:2d:bf:e9:e8:51:cb:f6:c4:08:8e:cb:8a:8b:4e:93:ef:b3:
         e5:be:62:83:d0:35:b2:4a:86:90:c6:6d:3f:e6:9c:e0:71:b5:
         a5:d2:18:16:b3:37:4a:8f:23:2f:3d:a1:f5:9c:f3:ad:b2:31:
         6a:7f:05:40:0a:f5:27:04:6e:db:ad:7e:da:e6:39:b0:32:3f:
         01:db:f6:04:5e:4b:dc:ff:fc:dc:a9:15:a7:f5:af:b7:83:90:
         00:3c:42:64:e6:77:b3:c2:a4:bc:9b:8f:10:f2:45:ac:ed:0b:
         74:5c:7f:9a:c5:4d:ce:dd:9f:1a:62:33:cc:63:22:91:5e:ab:
         43:1d:a9:10:0c:1d:d4:66:a4:44:a1:26:9e:b2:16:5b:fc:64:
         23:97:88:63:40:a4:7c:b7:ae:e8:bb:22:01:54:4c:14:06:15:
         60:f0:33:37:cf:10:26:03:63:54:41:9c:21:9a:e5:e9:b5:2f:
         1f:b2:b6:f8:aa:f9:e9:f2:38:21:c3:9c:63:05:a0:2a:56:c6:
         db:4b:ef:fd:4b:42:29:a7:2b:fe:ae:97:ea:48:3a:fd:5a:b1:
         1c:ff:60:d1:a0:1d:c3:54:79:1c:93:09:93:87:1a:11:e9:98:
         ac:37:67:cc:49:1a:7b:75:f1:e0:e5:5a:9a:86:de:7a:c9:ca:
         8b:ba:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 18:46:30 2024 by rpki-client on console-fra.rpki-client.org