Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/323830343a373864303a3a2f33322d3332203d3e20323731323637.roa
File:                     323830343a373864303a3a2f33322d3332203d3e20323731323637.roa (raw, json)
Hash identifier:          dVIf033leU1NhSoPXGh+v6wbd0FsNrubEHWqsysZ8+I=
Subject key identifier:   34:48:59:34:20:E1:51:D4:57:E9:E8:EE:14:4F:D0:C8:2E:B1:D7:82
Certificate issuer:       /CN=E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51
Certificate serial:       2AB46FC5954ED30B72DD41FD49F8E9B7906BAB21
Authority key identifier: E4:0F:97:17:C0:0A:93:DB:5A:D8:54:AA:EC:1E:08:6E:A0:CE:EB:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/323830343a373864303a3a2f33322d3332203d3e20323731323637.roa
Signing time:             Thu 04 Apr 2024 09:54:10 +0000
ROA not before:           Thu 04 Apr 2024 09:49:10 +0000
ROA not after:            Thu 03 Apr 2025 09:54:10 +0000
asID:                     271267
IP address blocks:        2804:78d0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b4:6f:c5:95:4e:d3:0b:72:dd:41:fd:49:f8:e9:b7:90:6b:ab:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51
        Validity
            Not Before: Apr  4 09:49:10 2024 GMT
            Not After : Apr  3 09:54:10 2025 GMT
        Subject: CN=3448593420E151D457E9E8EE144FD0C82EB1D782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:df:ac:40:07:84:24:26:3a:bd:73:28:e8:
                    36:8b:ee:9b:90:29:c1:d9:60:22:e7:ec:bd:15:5c:
                    15:97:1f:a0:d5:ff:9a:7b:31:cc:27:c7:72:fe:10:
                    f9:0f:ca:73:bc:b3:a5:ef:56:cc:05:5e:86:54:8c:
                    ca:02:fc:6f:a3:21:dc:2a:80:f4:20:ff:6d:7d:30:
                    d5:8b:f8:94:29:bc:e9:b5:31:01:3b:49:e0:08:0e:
                    cc:c8:6c:42:c7:54:08:f4:89:f5:d8:2c:aa:c4:ae:
                    cb:fa:00:25:cb:e6:c7:af:da:c2:70:c2:41:44:37:
                    ee:7f:c2:f9:dc:02:fb:02:0c:58:71:23:84:16:e5:
                    61:28:83:f3:d3:c2:bf:b7:08:e3:db:9a:9f:d5:e4:
                    3c:67:6e:b1:02:63:73:36:8c:fb:a5:fe:17:ea:86:
                    c8:45:f3:c1:36:37:08:37:fe:0f:d8:75:a3:04:1d:
                    ce:07:a4:e1:d2:73:3c:47:3e:dc:0a:1b:60:de:1d:
                    72:4c:6d:8e:4b:d2:a9:56:0f:95:53:56:b8:bf:7d:
                    ac:1c:d5:00:58:1b:3c:1f:bb:6a:60:54:42:9b:2e:
                    ca:d9:ce:46:38:8c:88:3c:ac:54:4a:74:e8:f1:4d:
                    ca:c1:f0:cb:91:e4:cf:47:cd:cb:66:a5:c1:af:35:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:48:59:34:20:E1:51:D4:57:E9:E8:EE:14:4F:D0:C8:2E:B1:D7:82
            X509v3 Authority Key Identifier:
                keyid:E4:0F:97:17:C0:0A:93:DB:5A:D8:54:AA:EC:1E:08:6E:A0:CE:EB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/323830343a373864303a3a2f33322d3332203d3e20323731323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:26:60:75:9b:d3:4e:bd:c8:7f:49:92:83:52:7b:4d:9e:99:
         9b:4d:72:01:ae:2f:86:9b:6b:18:dc:ce:63:83:41:57:12:c8:
         be:ad:9f:10:dd:91:92:91:70:c7:70:84:b4:88:d4:a9:a5:33:
         10:46:5d:19:e9:4f:62:16:61:0e:c1:9b:a0:a2:5e:0c:8e:47:
         cf:04:a6:ba:f6:37:5a:64:31:93:87:0e:c0:9b:28:c5:a9:d0:
         b0:4a:b4:5c:76:4a:53:fb:c1:d6:c7:51:3c:83:94:7f:96:90:
         37:db:da:86:b1:5f:de:c7:d7:31:ec:80:2a:34:f8:4e:49:49:
         7b:96:da:22:8b:5b:ae:ad:08:17:83:70:07:f0:53:0f:eb:9e:
         60:64:36:3b:40:28:4e:1b:67:4c:87:ba:f9:2c:5a:05:30:78:
         0b:d2:43:66:e4:84:f9:b5:24:74:c3:d4:5a:97:e2:85:a2:89:
         e1:c2:36:69:d6:59:47:a9:30:6b:72:6f:78:40:60:fd:59:87:
         ad:62:06:9f:67:8e:ad:86:cc:79:47:06:36:24:08:5b:02:16:
         ed:4b:b0:c2:36:d6:44:fa:5e:d4:25:1c:c7:df:4f:8c:b2:a5:
         c8:1a:d0:10:1c:99:51:66:9d:03:81:41:12:24:2b:6b:55:f2:
         89:ae:f8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org