Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3a2f33322d3336203d3e20323637343230.roa
File:                     323830343a346433633a3a2f33322d3336203d3e20323637343230.roa (raw, json)
Hash identifier:          M0g9ipBnmZBSeaiJ7epGnDTnf5XIYZJ1S/gl+AMo/q8=
Subject key identifier:   30:5D:8B:0A:CD:95:ED:21:83:0D:A1:6D:90:D4:B1:D7:9D:EA:64:89
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       620EEB3308C6390DEAD06D0CA595E20CFBC83EEF
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3a2f33322d3336203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        2804:4d3c::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0e:eb:33:08:c6:39:0d:ea:d0:6d:0c:a5:95:e2:0c:fb:c8:3e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=305D8B0ACD95ED21830DA16D90D4B1D79DEA6489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:29:9e:1b:33:5c:d0:b2:35:f4:43:fc:8d:3b:
                    2d:a1:39:8b:54:f3:ed:18:a4:b5:8e:24:54:51:d6:
                    a1:76:62:1e:57:8b:27:0f:29:65:0c:6b:45:3c:f7:
                    fe:0e:11:d6:8b:ba:d3:08:94:c3:9c:ca:30:46:0f:
                    1b:b9:7f:56:1e:07:03:81:2f:92:d2:37:50:38:83:
                    3e:8b:c1:90:75:12:6e:4f:35:72:03:be:29:83:7a:
                    5f:17:4b:c1:7a:bd:83:a7:db:89:2f:2e:ab:ad:38:
                    82:e9:a2:41:c5:f9:f9:1e:9f:eb:3f:98:3e:2a:2c:
                    38:5d:44:45:39:b4:51:b6:0f:bd:10:8b:b5:5f:40:
                    0f:38:15:01:74:22:a4:42:80:da:f1:21:09:dd:bb:
                    86:0b:18:37:b0:27:37:2d:49:66:c3:c9:46:b7:b4:
                    39:53:03:eb:16:a6:2c:12:67:c4:d6:b3:a0:d2:36:
                    00:ab:14:35:2c:93:b0:31:06:f7:8f:09:49:23:62:
                    aa:c0:1d:fb:68:df:92:bc:af:6a:8d:56:46:88:04:
                    bb:5e:e0:18:0b:ee:52:d5:2e:9f:54:67:90:17:c4:
                    dd:bb:52:37:49:f3:cd:7e:4f:8e:da:55:57:01:ab:
                    bb:bc:3e:68:fe:8f:43:35:58:49:4a:16:2f:46:e6:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5D:8B:0A:CD:95:ED:21:83:0D:A1:6D:90:D4:B1:D7:9D:EA:64:89
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3a2f33322d3336203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:8e:94:a4:c6:d4:4c:98:ab:a6:45:49:67:ca:54:94:02:00:
         9a:12:ea:5a:2e:58:8a:c7:f5:54:9e:aa:1c:40:e8:69:6b:65:
         d4:14:3f:55:1c:94:f3:d3:a4:67:7a:3c:95:d5:9a:14:4a:90:
         d0:58:4e:dc:0d:8c:3d:80:bd:55:aa:20:41:52:af:55:28:39:
         6c:0c:b1:16:6a:0d:04:cf:58:07:37:d7:58:3b:23:0e:f7:96:
         69:86:08:91:31:72:e4:9d:cf:bc:2a:98:4a:03:2f:7a:f9:4f:
         59:44:04:c7:09:3e:d4:bb:8d:da:b4:5b:7b:32:93:1a:16:a1:
         db:cd:d7:6f:98:f9:20:31:b9:44:cc:8b:ea:90:fc:9f:68:37:
         39:d5:d8:ed:61:76:71:81:4e:17:58:5e:b3:97:b2:1e:03:da:
         c5:0a:36:bb:6c:e0:f0:62:dd:96:35:88:7c:33:51:93:1d:c2:
         c7:06:48:21:45:51:92:7f:cd:de:6c:8b:dd:31:9a:f0:a0:49:
         aa:11:4f:73:0c:8d:c5:b5:24:b9:c8:c0:19:ff:60:5f:fc:c5:
         76:69:84:b4:a0:d1:f6:7c:c9:10:02:bf:f1:3b:f3:7a:dc:05:
         b9:9f:46:04:bd:ff:e0:2b:67:2d:a0:17:7c:3b:d2:c9:85:cc:
         e9:46:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 10:40:40 2024 by rpki-client on console-ams.rpki-client.org