Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a663030303a3a2f33372d3337203d3e20323730333035.roa
File:                     323830343a366130303a663030303a3a2f33372d3337203d3e20323730333035.roa (raw, json)
Hash identifier:          s9osC+k3eA2Zk/IJTmZS6gt1g8T+8HG/bX/hKoG6v1I=
Subject key identifier:   C6:67:7D:F9:75:D3:E7:21:B5:0A:1C:07:B0:5D:44:F7:4B:86:08:04
Certificate issuer:       /CN=16E70819DD21A2FE7437CF06E669511B1282A5D6
Certificate serial:       03E4F5911E1E0AB05F03E344591E6C40E044C09B
Authority key identifier: 16:E7:08:19:DD:21:A2:FE:74:37:CF:06:E6:69:51:1B:12:82:A5:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16E70819DD21A2FE7437CF06E669511B1282A5D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a663030303a3a2f33372d3337203d3e20323730333035.roa
Signing time:             Thu 29 Aug 2024 13:58:01 +0000
ROA not before:           Thu 29 Aug 2024 13:53:01 +0000
ROA not after:            Thu 28 Aug 2025 13:58:01 +0000
asID:                     270305
IP address blocks:        2804:6a00:f000::/37 maxlen: 37

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e4:f5:91:1e:1e:0a:b0:5f:03:e3:44:59:1e:6c:40:e0:44:c0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E70819DD21A2FE7437CF06E669511B1282A5D6
        Validity
            Not Before: Aug 29 13:53:01 2024 GMT
            Not After : Aug 28 13:58:01 2025 GMT
        Subject: CN=C6677DF975D3E721B50A1C07B05D44F74B860804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:25:f8:ef:70:df:2a:2a:d8:85:3c:09:ec:ee:
                    15:30:9c:52:5a:5b:db:37:c5:56:36:b1:6f:d3:9b:
                    52:b8:24:0b:cb:df:9a:82:34:4c:aa:57:8d:fd:57:
                    92:a8:28:ea:c3:70:7a:c6:fa:35:3b:f4:80:c9:e0:
                    62:1a:db:1b:ee:0d:79:9c:90:62:d5:1b:20:75:fa:
                    2b:a0:13:ec:6e:cc:bd:c7:a8:88:0d:96:ed:46:b4:
                    36:96:e3:9c:a5:60:a7:6c:6d:fc:3d:05:78:33:51:
                    c8:3b:00:ce:2e:79:e5:cd:c9:3a:58:22:5e:b6:d9:
                    36:95:d8:67:8a:2a:35:e7:fd:65:12:4c:19:65:93:
                    66:27:f4:9c:de:f3:12:86:91:a2:8f:92:89:ee:7b:
                    99:33:10:51:51:84:f3:29:e8:e7:2a:95:d1:a7:e6:
                    c4:41:1f:5c:87:17:a2:d0:2d:c2:b3:d1:e2:57:88:
                    61:aa:6e:94:1c:4c:94:57:93:e1:bb:88:23:6c:70:
                    af:55:44:2e:70:fd:42:d7:68:5d:2b:e5:53:eb:3d:
                    1c:b8:d4:4e:50:9f:e8:c2:75:8f:1e:ae:56:9f:2a:
                    11:59:74:49:86:f0:6f:6b:33:b1:4a:33:ad:5f:35:
                    84:bb:fa:56:df:9c:14:1a:f9:9d:b3:fc:d2:3d:ef:
                    0a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:67:7D:F9:75:D3:E7:21:B5:0A:1C:07:B0:5D:44:F7:4B:86:08:04
            X509v3 Authority Key Identifier:
                keyid:16:E7:08:19:DD:21:A2:FE:74:37:CF:06:E6:69:51:1B:12:82:A5:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/16E70819DD21A2FE7437CF06E669511B1282A5D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16E70819DD21A2FE7437CF06E669511B1282A5D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a663030303a3a2f33372d3337203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00:f000::/37

    Signature Algorithm: sha256WithRSAEncryption
         16:78:ed:28:cc:89:e8:f4:eb:38:1b:7f:2a:d7:23:22:e0:34:
         8b:a9:9e:5a:27:fa:cd:e3:40:bf:1e:7d:a0:c4:d9:b3:ae:41:
         e8:e3:fa:77:f4:73:02:18:fc:21:eb:63:e6:b5:8a:d2:84:48:
         52:c8:21:57:d0:2a:a4:c0:bb:de:09:65:f8:b8:3c:59:22:0b:
         7a:c7:20:14:bc:5f:5d:c0:4e:31:5d:39:fd:2d:95:25:70:d6:
         04:02:46:1c:46:2e:11:64:ef:f7:7f:10:5f:1b:9d:20:3f:e8:
         7d:cc:30:15:c3:07:7d:f0:eb:64:2b:2c:6f:34:68:71:94:8d:
         00:7f:c0:88:8b:97:56:b0:62:1e:11:8b:93:17:e6:24:ce:a6:
         a4:81:e8:2f:86:58:5a:b7:52:15:cf:1d:96:43:3c:d6:bb:94:
         fc:12:dc:8c:bd:18:1f:02:1a:22:e5:63:3f:4f:ad:f2:02:32:
         6f:2d:f1:1c:89:49:17:70:0a:99:bf:19:c3:a0:34:2f:1a:0f:
         cb:79:63:81:4d:c2:be:16:58:ea:38:0e:96:1b:d4:ab:fd:a7:
         57:c8:e5:f6:bf:12:b6:d7:cf:d0:65:64:32:ad:85:99:fa:30:
         ed:5b:9d:57:9c:67:61:26:50:01:8f:27:51:7a:56:7f:c7:10:
         7b:67:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 13:04:12 2024 by rpki-client on console-fra.rpki-client.org