Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a653030303a3a2f33362d3336203d3e20323730333035.roa
File:                     323830343a366130303a653030303a3a2f33362d3336203d3e20323730333035.roa (raw, json)
Hash identifier:          67aS6++QHhrW2aTdVvciEjJK/HkJdg8+khDptlRwZuU=
Subject key identifier:   8A:91:85:3C:53:B6:F9:74:1D:93:78:33:28:D5:4C:4A:80:70:61:D5
Certificate issuer:       /CN=16E70819DD21A2FE7437CF06E669511B1282A5D6
Certificate serial:       1E9FC70CBC5C270E29AFFD31DDAC469EE704229B
Authority key identifier: 16:E7:08:19:DD:21:A2:FE:74:37:CF:06:E6:69:51:1B:12:82:A5:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16E70819DD21A2FE7437CF06E669511B1282A5D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a653030303a3a2f33362d3336203d3e20323730333035.roa
Signing time:             Thu 29 Aug 2024 13:57:51 +0000
ROA not before:           Thu 29 Aug 2024 13:52:51 +0000
ROA not after:            Thu 28 Aug 2025 13:57:51 +0000
asID:                     270305
IP address blocks:        2804:6a00:e000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9f:c7:0c:bc:5c:27:0e:29:af:fd:31:dd:ac:46:9e:e7:04:22:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E70819DD21A2FE7437CF06E669511B1282A5D6
        Validity
            Not Before: Aug 29 13:52:51 2024 GMT
            Not After : Aug 28 13:57:51 2025 GMT
        Subject: CN=8A91853C53B6F9741D93783328D54C4A807061D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:0c:b4:1c:ba:27:61:97:77:2c:f4:d6:5d:
                    ab:b7:cb:59:8b:60:bb:2f:c6:ff:96:07:c5:2c:40:
                    56:61:66:eb:5a:0d:3c:49:1a:c4:d5:fa:12:a1:a3:
                    f3:07:a2:1b:e1:ca:09:ea:3e:d8:ff:07:7b:40:1d:
                    92:d3:0a:c4:34:d0:ec:4b:82:81:74:8a:bc:59:fb:
                    1f:32:05:04:5c:c0:1c:1b:37:96:14:c5:02:6a:72:
                    af:9d:9a:19:9c:b0:46:4c:9c:03:ff:e3:04:48:4a:
                    ae:1d:1f:b0:4a:35:2a:f6:e1:94:47:29:d1:6b:52:
                    af:66:3b:f7:36:9e:1d:07:ce:9f:38:4f:38:c3:bf:
                    38:71:75:b0:1b:d0:c0:5e:98:db:1a:14:67:5b:2c:
                    7a:0a:09:94:bd:8a:84:28:47:4c:44:7b:d8:c1:97:
                    0d:98:de:f4:d9:0c:13:63:04:fa:ee:6f:ea:b6:6d:
                    87:4b:1d:13:b8:92:6a:7b:dc:8d:f9:7a:f8:af:c4:
                    ec:cb:25:6d:ec:49:3f:7c:6e:77:30:96:c9:ca:00:
                    db:67:2e:26:4a:54:21:39:8c:0e:6c:c4:d3:5b:96:
                    3e:e9:e5:d6:2e:68:a3:6d:8a:5f:63:a1:93:79:e3:
                    6a:31:97:48:a8:53:29:3e:94:99:db:de:b5:1c:0e:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:91:85:3C:53:B6:F9:74:1D:93:78:33:28:D5:4C:4A:80:70:61:D5
            X509v3 Authority Key Identifier:
                keyid:16:E7:08:19:DD:21:A2:FE:74:37:CF:06:E6:69:51:1B:12:82:A5:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/16E70819DD21A2FE7437CF06E669511B1282A5D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16E70819DD21A2FE7437CF06E669511B1282A5D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a653030303a3a2f33362d3336203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4d:d3:ff:12:57:15:5a:19:53:d8:4a:ed:9c:36:41:76:11:49:
         71:b3:3c:ef:5f:e5:68:f4:90:74:24:95:43:47:2e:21:cd:9e:
         d3:dd:e6:90:24:24:81:d7:28:6e:c2:ab:c7:bf:12:f2:4f:9a:
         6c:4f:ba:f9:67:3a:35:c0:cb:12:e3:15:7d:49:b2:30:d5:58:
         b9:9e:db:e9:ad:ab:c2:ca:b0:a2:0e:f0:d3:d0:df:93:b1:0b:
         ed:57:0d:e1:d4:f8:c0:11:b8:55:23:26:4d:14:b8:b4:b4:67:
         60:6a:47:4e:30:49:6c:77:14:30:76:a3:c9:17:5b:24:a9:b5:
         7e:66:88:c7:a5:0d:60:c1:f7:f3:6e:a8:24:19:1b:ed:5e:af:
         e7:2c:aa:63:7d:2c:2a:37:fd:a4:50:d9:dc:c1:fd:30:46:37:
         02:22:a0:09:82:21:2f:e5:5b:15:b1:cb:ec:08:dd:81:c2:a6:
         62:83:82:b3:4d:6e:dd:41:30:79:1e:77:48:eb:08:64:d6:50:
         d7:05:2f:77:50:66:e7:39:d6:84:6d:ef:e5:05:75:fd:65:71:
         25:b2:da:d2:8c:34:2e:f1:25:3a:90:f9:b8:bf:1f:bc:7b:6f:
         3b:87:1e:24:71:9c:e3:6b:fc:66:43:a6:45:18:2b:78:9c:b1:
         40:b0:53:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 13:04:12 2024 by rpki-client on console-fra.rpki-client.org