Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a33313a3a2f34382d3438203d3e20323638383039.roa
File:                     323830343a356166343a33313a3a2f34382d3438203d3e20323638383039.roa (raw, json)
Hash identifier:          DXDAMAldfW9vbZWKIU7p3Ov9KBo3d+Tv4SlLmTEJbOo=
Subject key identifier:   00:C3:BD:17:0B:28:54:A7:DC:56:86:3E:70:89:FE:20:A2:A6:E4:E6
Certificate issuer:       /CN=B37291E6021BB75C026BEA016CB480944391AEB5
Certificate serial:       0F7306A776C56B9B6C4A45C6458C7801543FE59A
Authority key identifier: B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a33313a3a2f34382d3438203d3e20323638383039.roa
Signing time:             Tue 20 Aug 2024 14:00:53 +0000
ROA not before:           Tue 20 Aug 2024 13:55:53 +0000
ROA not after:            Tue 19 Aug 2025 14:00:53 +0000
asID:                     268809
IP address blocks:        2804:5af4:31::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:73:06:a7:76:c5:6b:9b:6c:4a:45:c6:45:8c:78:01:54:3f:e5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B37291E6021BB75C026BEA016CB480944391AEB5
        Validity
            Not Before: Aug 20 13:55:53 2024 GMT
            Not After : Aug 19 14:00:53 2025 GMT
        Subject: CN=00C3BD170B2854A7DC56863E7089FE20A2A6E4E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:0f:25:41:0f:81:6b:27:89:ac:0b:e3:7f:
                    a9:bd:01:64:24:9d:10:fb:fa:bb:d1:2d:42:20:95:
                    43:b9:88:70:99:d1:a7:0e:aa:6c:0e:4d:7f:db:01:
                    5f:c7:b4:7e:bc:62:bc:90:18:a3:c0:f8:50:56:6e:
                    4f:5a:53:0a:ec:37:5a:28:07:4e:14:83:95:a2:3f:
                    3d:8e:7c:a0:e8:15:ef:1f:21:e7:b2:be:f8:c6:be:
                    33:0d:dc:89:86:f4:57:0e:c9:3c:6f:88:3a:f5:2b:
                    46:6a:30:6a:05:25:4a:ca:82:07:39:99:91:6f:e5:
                    d3:6f:7a:2d:c2:de:9a:fb:e0:92:46:fc:c0:81:3b:
                    2d:1a:62:51:55:f1:35:f8:54:6a:6d:8a:75:f3:48:
                    cf:71:bb:c7:1c:2b:9d:5b:6c:bb:e1:db:04:51:86:
                    4d:37:ef:99:87:28:23:01:6b:43:4e:99:fb:1b:ca:
                    db:4b:d1:6d:a2:77:01:16:23:5e:93:86:41:ad:96:
                    63:83:03:17:b0:e8:98:91:27:d0:b1:e2:07:05:00:
                    b3:45:4a:4b:26:9c:73:63:74:83:0e:e4:15:da:03:
                    04:f6:ce:6f:a5:9f:e2:69:6a:e8:e7:fb:be:96:0a:
                    f9:60:51:47:9e:aa:12:bc:f9:8a:de:b8:51:92:03:
                    f7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C3:BD:17:0B:28:54:A7:DC:56:86:3E:70:89:FE:20:A2:A6:E4:E6
            X509v3 Authority Key Identifier:
                keyid:B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B37291E6021BB75C026BEA016CB480944391AEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a33313a3a2f34382d3438203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5af4:31::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:01:24:55:92:e4:6c:2e:34:5d:6f:21:95:b9:5f:69:46:4f:
         30:d3:c3:0b:7b:ea:ba:46:76:63:50:58:56:81:c4:e1:6d:31:
         fe:0a:00:7a:11:7c:ec:82:19:f9:05:06:7f:5a:bd:65:f7:76:
         48:a8:31:f1:6a:75:77:90:72:c5:f9:43:b6:68:e0:00:2c:3a:
         ea:6c:24:cb:48:6a:d2:b1:72:4b:e3:46:1d:81:5f:74:d9:f7:
         13:68:29:68:17:ac:08:b3:38:e7:f8:b4:25:24:16:4a:5d:68:
         82:f1:4b:07:bf:94:94:c0:c7:37:87:e3:9c:f1:6b:55:62:02:
         d9:ca:81:fb:5e:91:37:fa:d3:29:46:da:93:34:7a:d3:06:27:
         ff:49:7e:49:e9:b5:d8:c2:93:7b:d6:e6:e1:08:07:79:d0:01:
         34:41:33:13:9a:10:8f:bb:7a:58:66:45:60:79:41:d3:9d:a5:
         d9:eb:17:de:14:20:1b:38:55:85:27:30:d6:5e:9e:0a:5a:16:
         47:a3:36:eb:4f:12:66:b9:36:55:6e:be:64:40:26:fb:89:d0:
         3b:4c:92:83:b4:6d:f4:a4:c9:3d:2e:34:ef:fa:17:be:00:ab:
         66:7d:c9:fa:09:dd:41:4f:fb:0b:95:d4:05:0d:34:74:70:80:
         70:91:12:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:55:41 2024 by rpki-client on console-fra.rpki-client.org