Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a383030303a3a2f33332d3336203d3e20323637343230.roa
File:                     323830343a346433633a383030303a3a2f33332d3336203d3e20323637343230.roa (raw, json)
Hash identifier:          BYOF/ZFh8Os/vWUX5y1QPCu/Am8HqXVU4JUkBkL1buc=
Subject key identifier:   6A:71:82:55:F2:D1:98:C7:BB:37:E6:03:EC:1F:71:FE:30:49:9E:22
Certificate issuer:       /CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
Certificate serial:       6E11EB3EC35B2D09CAA78CE19A0C74C0368364A0
Authority key identifier: EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a383030303a3a2f33332d3336203d3e20323637343230.roa
Signing time:             Tue 17 Sep 2024 14:48:54 +0000
ROA not before:           Tue 17 Sep 2024 14:43:54 +0000
ROA not after:            Tue 16 Sep 2025 14:48:54 +0000
asID:                     267420
IP address blocks:        2804:4d3c:8000::/33 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:11:eb:3e:c3:5b:2d:09:ca:a7:8c:e1:9a:0c:74:c0:36:83:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
        Validity
            Not Before: Sep 17 14:43:54 2024 GMT
            Not After : Sep 16 14:48:54 2025 GMT
        Subject: CN=6A718255F2D198C7BB37E603EC1F71FE30499E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:41:0e:09:ee:0c:5f:80:06:eb:92:f6:2b:
                    67:6d:9f:28:2b:39:f4:7a:5c:0b:f2:de:51:04:55:
                    41:51:26:06:26:05:1c:21:37:f2:b0:0d:88:cb:18:
                    84:6c:67:70:a6:86:60:05:cb:41:df:ab:02:37:11:
                    a1:49:0d:82:13:0d:9c:0c:45:70:63:16:2b:18:65:
                    f7:50:fb:67:22:0c:34:d7:f1:1a:ae:76:64:ba:d1:
                    05:ce:78:55:91:cd:30:6f:f4:d4:16:6e:99:d7:e5:
                    a5:48:f5:9c:d3:00:06:e9:a0:40:dd:ae:da:fb:60:
                    f7:9e:9c:a8:ed:63:85:44:10:bb:a2:a7:7c:a6:dc:
                    1b:fe:d3:7b:22:de:20:f5:3f:a1:aa:e9:ba:f1:fa:
                    07:78:b1:a6:1e:df:f0:3a:05:ba:0a:44:40:3a:b6:
                    de:13:4e:f2:c4:da:c5:0e:be:f3:2c:b0:96:fc:f5:
                    7b:fd:89:6d:16:f5:ca:01:b3:b4:9c:97:97:17:6b:
                    4c:6b:8b:64:d3:93:64:ed:c0:6a:ba:85:24:ee:0d:
                    0a:f8:76:75:cc:80:60:2f:b5:4c:a5:01:6a:e1:53:
                    ca:eb:0c:e3:88:6e:28:f9:bb:a2:49:f9:fd:4b:e6:
                    39:89:af:7a:ec:b6:06:78:56:17:66:8c:da:e5:74:
                    5b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:71:82:55:F2:D1:98:C7:BB:37:E6:03:EC:1F:71:FE:30:49:9E:22
            X509v3 Authority Key Identifier:
                keyid:EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a383030303a3a2f33332d3336203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         90:3e:89:65:52:48:81:25:ac:08:b8:7a:48:1b:b9:5c:f8:1b:
         c3:67:94:97:18:c5:31:59:51:eb:c7:72:bd:9c:b7:85:f3:1f:
         a7:ac:b5:83:73:94:51:15:dc:5f:0c:5d:97:b0:4c:0c:a8:19:
         98:8b:a5:14:01:69:3a:8b:21:af:12:b5:c2:9e:80:f4:b3:b5:
         e4:50:83:3d:36:86:52:fd:bf:16:54:b6:98:b4:bf:a8:50:f9:
         e3:cb:74:b8:f6:1a:86:85:32:31:0d:e4:02:f6:60:49:e8:c8:
         44:8e:5d:3c:1f:8b:c9:05:14:48:c3:bf:87:e6:9b:82:86:87:
         87:0e:fa:12:a5:a0:5a:21:79:c7:1b:5c:5d:0f:bd:b3:a7:b8:
         d2:bd:22:ad:1f:14:2f:e4:5a:68:f0:25:32:aa:70:4d:16:28:
         5b:02:30:da:63:d3:77:e0:45:d9:bf:3a:fa:6a:be:a3:d7:0a:
         b6:a6:96:18:67:1e:7c:69:ea:c3:34:c0:e1:ec:cb:7b:14:b5:
         e2:43:87:aa:43:ef:be:fa:1b:cf:5a:b6:73:99:24:0b:00:3b:
         2d:e2:46:c7:75:58:ed:43:ae:54:ba:8c:6b:80:33:f9:10:55:
         6e:a5:0c:5c:84:b4:c6:7e:32:e2:47:38:26:e8:20:47:31:81:
         7e:a1:e8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 13:33:04 2024 by rpki-client on console-fra.rpki-client.org