Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/323830343a346634343a383030303a3a2f34302d3430203d3e20323638333136.roa
File:                     323830343a346634343a383030303a3a2f34302d3430203d3e20323638333136.roa (raw, json)
Hash identifier:          0H5VlYuGgs08RR391RHnOh66uzAC5pPxh/xwBWzo57Y=
Subject key identifier:   47:55:80:30:74:44:B3:45:AA:77:87:13:32:1A:B0:7F:A9:C0:45:36
Certificate issuer:       /CN=6394333A258FBDBBD544DE363E2767998C64BB78
Certificate serial:       4561FDFD97F041B28B1D652A52205428DC9C0F31
Authority key identifier: 63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/323830343a346634343a383030303a3a2f34302d3430203d3e20323638333136.roa
Signing time:             Wed 29 May 2024 11:29:36 +0000
ROA not before:           Wed 29 May 2024 11:24:36 +0000
ROA not after:            Wed 28 May 2025 11:29:36 +0000
asID:                     268316
IP address blocks:        2804:4f44:8000::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:61:fd:fd:97:f0:41:b2:8b:1d:65:2a:52:20:54:28:dc:9c:0f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6394333A258FBDBBD544DE363E2767998C64BB78
        Validity
            Not Before: May 29 11:24:36 2024 GMT
            Not After : May 28 11:29:36 2025 GMT
        Subject: CN=475580307444B345AA778713321AB07FA9C04536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:c3:a0:f5:56:3d:db:cc:82:d0:a3:4e:06:
                    02:d0:7f:f0:e0:af:16:11:5a:60:a1:27:37:0b:f4:
                    13:c6:a8:0a:d9:6a:04:0a:64:b7:20:3b:3b:22:be:
                    db:a9:90:70:e7:8c:15:79:98:09:25:75:2c:50:c3:
                    b0:c2:5c:de:84:c6:f1:df:4a:a1:96:ad:40:6b:07:
                    a8:7e:8f:1a:67:e4:c3:3b:16:65:57:cd:bd:06:01:
                    ba:63:1b:f0:ea:7d:39:9d:10:2c:64:72:00:40:04:
                    7f:c0:0e:6f:2f:c5:98:5e:39:fb:1f:40:8d:d7:10:
                    f7:07:dd:2b:d1:1e:91:63:8e:8b:b7:df:0d:99:d4:
                    26:28:ad:ae:b7:12:1b:cc:32:ff:df:81:54:36:4c:
                    6f:e5:9b:4a:82:03:3d:f2:49:fc:a5:9a:51:70:e9:
                    0a:43:b6:7c:52:e1:af:bf:23:db:be:d6:ee:c3:7a:
                    04:5c:a5:74:57:e9:7c:cd:dc:17:e1:e4:0c:e0:db:
                    49:d9:80:40:14:38:29:23:5f:73:85:23:91:eb:0b:
                    40:83:30:56:69:99:d7:4b:1c:ac:f4:5f:8b:e2:ee:
                    d8:77:6d:65:e7:57:27:e2:f7:54:64:16:0f:62:47:
                    e0:a2:29:52:d4:8d:74:37:86:39:86:12:a4:fb:cd:
                    5d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:55:80:30:74:44:B3:45:AA:77:87:13:32:1A:B0:7F:A9:C0:45:36
            X509v3 Authority Key Identifier:
                keyid:63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/6394333A258FBDBBD544DE363E2767998C64BB78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/323830343a346634343a383030303a3a2f34302d3430203d3e20323638333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f44:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:0a:12:94:cb:12:e5:05:13:7e:3b:ae:3e:cc:db:b5:76:89:
         46:3d:dc:06:ca:47:7d:54:98:12:62:de:67:8c:bb:80:ef:f0:
         70:78:fc:88:bf:8f:b7:4d:85:7f:ba:44:9c:1a:e6:7a:25:54:
         9b:f7:9c:7e:84:6b:60:fa:ce:96:05:70:67:04:70:01:11:2d:
         82:9d:7c:ad:a3:f7:0d:5e:ed:12:4a:26:4e:f4:a3:be:dd:83:
         ff:f9:d2:01:20:5f:fc:66:7b:51:e1:58:22:b8:5a:25:4b:d7:
         5b:61:b3:b6:9b:50:97:e0:8f:71:a3:55:c8:9b:a3:a5:3e:06:
         b0:15:db:ee:1e:f4:a4:5f:17:be:38:a8:76:b4:04:17:88:d7:
         a1:11:0d:a1:00:d4:f1:da:34:9e:7b:54:db:2e:ac:e7:03:4a:
         c3:5e:65:2d:d2:5b:45:5b:8e:8e:c2:cb:a0:89:77:9e:84:92:
         df:32:d7:40:36:bb:56:27:75:bb:8c:a8:8a:e9:d4:28:a7:4b:
         22:24:3a:66:0f:74:70:8e:62:b8:ed:c9:34:c8:71:95:aa:e3:
         5a:c7:e2:36:52:39:95:88:5a:f6:e2:07:55:e0:50:2c:80:d1:
         58:ff:54:1f:a8:9f:15:d4:b5:44:b1:b9:8a:34:ea:70:24:34:
         8d:06:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 00:08:28 2024 by rpki-client on console-ams.rpki-client.org