Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a653830303a3a2f33372d3337203d3e20323730333035.roa
File:                     323830343a366130303a653830303a3a2f33372d3337203d3e20323730333035.roa (raw, json)
Hash identifier:          tiK3qUBQ1AJU7mshiMHNSEYIAwRpsTPftQjSlyduizM=
Subject key identifier:   05:57:AD:6C:A3:38:19:1A:CF:52:06:BF:CB:EE:8E:AC:B1:16:BA:57
Certificate issuer:       /CN=16E70819DD21A2FE7437CF06E669511B1282A5D6
Certificate serial:       439195E9561BAD4145C8F95BF1F2C05BAC18F610
Authority key identifier: 16:E7:08:19:DD:21:A2:FE:74:37:CF:06:E6:69:51:1B:12:82:A5:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16E70819DD21A2FE7437CF06E669511B1282A5D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a653830303a3a2f33372d3337203d3e20323730333035.roa
Signing time:             Thu 29 Aug 2024 13:57:57 +0000
ROA not before:           Thu 29 Aug 2024 13:52:57 +0000
ROA not after:            Thu 28 Aug 2025 13:57:57 +0000
asID:                     270305
IP address blocks:        2804:6a00:e800::/37 maxlen: 37

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:91:95:e9:56:1b:ad:41:45:c8:f9:5b:f1:f2:c0:5b:ac:18:f6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E70819DD21A2FE7437CF06E669511B1282A5D6
        Validity
            Not Before: Aug 29 13:52:57 2024 GMT
            Not After : Aug 28 13:57:57 2025 GMT
        Subject: CN=0557AD6CA338191ACF5206BFCBEE8EACB116BA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:75:79:9b:fe:10:df:8c:c3:7c:1b:37:2f:7b:
                    fb:82:10:bb:d0:b8:03:27:13:78:23:9b:32:c9:37:
                    06:eb:85:e7:e6:87:66:1c:36:78:e9:8a:0d:4d:ab:
                    7e:69:f3:6a:39:04:72:2d:9b:6f:f5:38:31:cd:0c:
                    42:0f:ac:77:f4:2d:4f:25:0d:f5:f9:37:d1:b7:e6:
                    fd:a9:16:aa:2f:57:a1:de:e1:b4:e5:57:df:9c:fb:
                    8a:f8:31:fb:76:a2:e5:84:60:85:c8:b1:36:0d:5b:
                    3d:50:d8:93:6e:19:9f:af:c5:73:99:79:5e:96:53:
                    ac:4d:fb:48:b2:ea:9c:40:f6:4c:66:23:22:3a:7f:
                    28:06:3f:6b:a9:84:a1:22:95:94:ad:9e:28:f2:52:
                    a7:e9:92:06:0f:84:ad:38:df:da:ae:69:53:ff:8f:
                    a4:3d:e2:54:58:27:96:3e:01:5f:8c:ac:f3:81:34:
                    61:b1:64:af:10:f1:15:67:a3:05:c8:c7:ee:82:5d:
                    0f:98:bf:70:39:c2:3f:75:b5:88:22:a6:4c:89:4c:
                    8d:e6:47:a1:90:69:40:2c:e9:51:a0:28:5f:ff:79:
                    24:00:a1:05:99:ea:a8:71:b3:9e:dd:57:e3:9a:e4:
                    81:e0:70:41:04:f8:42:49:36:c9:38:1c:f2:82:63:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:57:AD:6C:A3:38:19:1A:CF:52:06:BF:CB:EE:8E:AC:B1:16:BA:57
            X509v3 Authority Key Identifier:
                keyid:16:E7:08:19:DD:21:A2:FE:74:37:CF:06:E6:69:51:1B:12:82:A5:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/16E70819DD21A2FE7437CF06E669511B1282A5D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16E70819DD21A2FE7437CF06E669511B1282A5D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a653830303a3a2f33372d3337203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00:e800::/37

    Signature Algorithm: sha256WithRSAEncryption
         32:bc:56:cc:7b:7b:91:3b:47:66:7d:71:66:b1:ff:f5:a8:69:
         66:02:09:87:ee:78:b2:62:65:f4:dc:1a:5a:04:ba:84:72:57:
         23:57:a1:df:b0:be:0b:25:12:d2:6f:5e:57:86:ec:16:34:48:
         7b:c1:61:b6:37:1d:fa:af:8a:2e:71:77:bf:c2:91:83:60:b6:
         d7:a9:0d:95:89:98:0e:2a:a1:c2:e3:78:ec:22:a9:9c:7d:6e:
         0a:9f:5e:7f:3a:53:14:ca:ed:b9:8f:89:c0:07:dd:92:29:25:
         64:01:d8:25:d1:2e:2f:12:8e:62:76:77:e4:0f:d0:0d:1d:8b:
         d3:6c:1d:ea:39:89:4b:2f:27:34:df:ec:9b:21:4e:78:ca:d7:
         b2:25:65:63:71:bd:d9:36:ff:06:6e:97:59:b4:03:ef:63:56:
         e6:8e:4e:9a:e7:26:e8:39:40:42:ac:ab:6b:83:20:9d:80:a8:
         a1:1e:6b:38:24:ed:7e:29:49:ed:3e:65:ad:29:43:96:18:38:
         7a:d8:a5:87:bc:8c:c0:88:fd:98:5a:fd:6b:7a:96:46:fb:61:
         e0:a5:1b:33:13:65:02:55:30:19:8d:b6:3f:26:5d:f5:38:85:
         1a:64:03:1b:ef:23:24:9c:24:54:e6:b8:fa:b8:34:4e:03:9e:
         ee:e8:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 13:04:12 2024 by rpki-client on console-fra.rpki-client.org