Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a3a2f33332d3333203d3e20323638383039.roa
File:                     323830343a356166343a3a2f33332d3333203d3e20323638383039.roa (raw, json)
Hash identifier:          y2UELC6eb9OSsdRiNkGwoNrP8BHHDvAdZtHmregYfYA=
Subject key identifier:   04:AA:9C:F6:59:98:18:48:FF:49:2A:65:D0:61:C4:11:C1:A6:D8:1D
Certificate issuer:       /CN=B37291E6021BB75C026BEA016CB480944391AEB5
Certificate serial:       52BB4568399EC0517EE4E6221AC80149155F61AC
Authority key identifier: B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a3a2f33332d3333203d3e20323638383039.roa
Signing time:             Thu 27 Jun 2024 02:42:19 +0000
ROA not before:           Thu 27 Jun 2024 02:37:19 +0000
ROA not after:            Thu 26 Jun 2025 02:42:19 +0000
asID:                     268809
IP address blocks:        2804:5af4::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:bb:45:68:39:9e:c0:51:7e:e4:e6:22:1a:c8:01:49:15:5f:61:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B37291E6021BB75C026BEA016CB480944391AEB5
        Validity
            Not Before: Jun 27 02:37:19 2024 GMT
            Not After : Jun 26 02:42:19 2025 GMT
        Subject: CN=04AA9CF659981848FF492A65D061C411C1A6D81D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:f3:d2:7f:21:a9:66:93:2f:10:14:c0:fd:
                    51:29:d7:6e:93:11:cb:e1:c8:8f:be:12:34:d1:4e:
                    a6:c0:98:9d:3f:de:f8:ea:c6:89:6f:e4:8c:78:79:
                    3f:1d:f4:13:7f:98:05:6d:84:b9:28:ec:3b:e0:3c:
                    b1:8a:84:35:97:54:01:49:a5:cd:a5:ab:ee:e1:c9:
                    5d:48:84:46:91:84:b0:f6:a9:a6:c8:c0:c6:b7:63:
                    ec:84:d7:a3:2d:98:23:d8:8f:3d:fc:9c:eb:e1:d7:
                    7d:06:e7:97:9a:af:8a:2e:ee:75:64:48:e7:4d:8a:
                    57:5d:1f:1e:6d:83:2c:ad:81:e0:91:e4:f4:c7:53:
                    f5:d4:7d:44:61:77:a2:85:c5:f9:72:54:ac:7c:20:
                    b5:53:e9:ef:b2:8e:c4:55:47:8e:b5:8c:1b:e9:50:
                    ab:26:f1:d1:07:aa:f9:0c:ba:41:41:ef:45:2a:c8:
                    59:c5:86:ae:22:21:79:6e:8e:de:e7:2f:f3:43:64:
                    ef:40:f1:71:4b:df:dc:6a:23:32:16:73:31:5f:c8:
                    02:4f:7d:dd:b3:55:ba:d3:5b:2a:c5:99:99:84:0c:
                    d2:36:e3:73:95:a9:f4:82:3f:ca:8f:eb:96:8f:37:
                    e4:d5:6d:f7:0d:0b:01:2d:88:fc:b4:a8:b4:de:50:
                    76:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AA:9C:F6:59:98:18:48:FF:49:2A:65:D0:61:C4:11:C1:A6:D8:1D
            X509v3 Authority Key Identifier:
                keyid:B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B37291E6021BB75C026BEA016CB480944391AEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a3a2f33332d3333203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5af4::/33

    Signature Algorithm: sha256WithRSAEncryption
         7b:ab:e6:a2:05:d0:c7:a2:53:4e:f8:2d:b0:d9:1f:ef:d4:92:
         8a:21:0b:22:95:10:df:5d:5e:36:27:de:31:7b:5f:34:64:fa:
         21:a5:90:a3:c3:34:ed:d2:8a:73:dc:13:35:67:ac:38:c3:02:
         32:ed:e3:aa:ca:58:52:cb:4e:07:11:07:1e:0f:a4:e4:11:18:
         20:f3:40:66:75:8f:0e:0d:22:04:b7:c4:f0:c1:39:ca:31:28:
         ca:11:0a:b2:d2:7d:04:8d:6a:d4:8d:d2:83:25:19:6c:44:43:
         d2:a0:f1:68:2a:ef:d6:9e:0b:ad:e1:f0:3c:ba:9d:c8:22:03:
         78:de:76:94:ac:41:33:62:92:ba:0c:c7:7f:b4:9c:18:b3:9f:
         b8:67:37:6e:5a:af:ca:05:3c:ac:50:24:9e:ac:f0:bf:32:62:
         c8:d5:5c:db:7f:e5:0e:68:69:c4:b7:97:47:7b:57:69:55:c9:
         bc:1c:21:d0:10:de:b6:34:b1:14:fb:9c:6a:ce:4e:e8:29:97:
         0f:8c:d1:54:f1:1c:ad:9a:63:45:02:8a:1d:89:52:8e:03:68:
         59:61:4c:5f:51:b0:21:c6:fe:07:13:ae:dc:e5:89:3b:a2:f0:
         59:b2:98:55:65:5d:5d:07:0f:4f:fc:43:b9:b4:9e:0e:47:f9:
         41:4a:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:55:41 2024 by rpki-client on console-fra.rpki-client.org