Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a383030303a3a2f34382d3438203d3e20323637343930.roa
File:                     323830343a343234383a383030303a3a2f34382d3438203d3e20323637343930.roa (raw, json)
Hash identifier:          JTindb2RKlsIaBdOr2MRUBvowSUmRGvC6YuRDZT/YFE=
Subject key identifier:   22:6B:60:39:2B:EE:16:08:D5:A5:8F:96:44:C6:51:33:E1:95:5E:2A
Certificate issuer:       /CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
Certificate serial:       39697C7B8121BEBE89CEAFF623885EC45EB8C67D
Authority key identifier: 43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a383030303a3a2f34382d3438203d3e20323637343930.roa
Signing time:             Sat 04 May 2024 04:52:29 +0000
ROA not before:           Sat 04 May 2024 04:47:29 +0000
ROA not after:            Sat 03 May 2025 04:52:29 +0000
asID:                     267490
IP address blocks:        2804:4248:8000::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:69:7c:7b:81:21:be:be:89:ce:af:f6:23:88:5e:c4:5e:b8:c6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
        Validity
            Not Before: May  4 04:47:29 2024 GMT
            Not After : May  3 04:52:29 2025 GMT
        Subject: CN=226B60392BEE1608D5A58F9644C65133E1955E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:6c:84:01:ba:23:49:24:98:2e:cb:e1:9c:
                    54:08:15:83:31:dc:17:b4:a6:d0:5c:5f:ca:ae:90:
                    90:c5:0f:69:6c:a1:cd:2a:8b:7f:5b:d2:32:de:df:
                    09:6c:c2:90:43:3f:ba:4a:e3:b0:09:a3:6a:21:82:
                    37:34:7e:a4:13:c1:2f:cd:07:36:db:65:0b:d3:36:
                    13:80:9e:5b:54:c9:db:e5:03:69:39:89:80:aa:66:
                    2d:e4:27:3a:3d:af:68:77:30:0f:7f:28:af:23:51:
                    26:d1:3c:c5:8d:74:41:7b:41:de:33:c8:b1:b7:4f:
                    d6:a3:10:ce:9c:e2:40:f5:b4:df:c9:76:04:08:f5:
                    7f:67:76:57:d6:c4:83:35:6b:03:a4:99:eb:c9:99:
                    15:bc:da:2c:a1:34:67:1b:b1:59:f8:6b:83:8b:11:
                    f9:32:12:04:a6:8a:9e:69:6d:e1:fc:1e:3f:dd:f2:
                    65:92:76:9b:6e:d6:8a:b1:73:fb:a9:58:bf:92:4f:
                    20:f7:69:83:38:60:c5:a2:55:13:65:68:fd:2c:65:
                    bc:3c:55:e6:41:84:e3:1d:e8:13:25:77:88:49:a1:
                    e5:73:0f:4c:89:ab:e1:5e:e6:98:a8:c3:2a:e3:3c:
                    f3:1d:06:ea:01:25:d9:51:9f:10:f3:5c:61:f4:c3:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6B:60:39:2B:EE:16:08:D5:A5:8F:96:44:C6:51:33:E1:95:5E:2A
            X509v3 Authority Key Identifier:
                keyid:43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a383030303a3a2f34382d3438203d3e20323637343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4248:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:cb:5f:22:36:bc:e8:4f:71:8f:ab:0d:ea:94:9b:70:05:be:
         9e:b0:c4:6c:ce:fd:56:e7:49:a0:04:d9:f2:08:3a:cc:b4:5e:
         06:e8:a5:ce:12:ff:9c:33:5d:12:92:ba:c5:a3:92:18:1e:37:
         02:9c:47:72:17:2c:a7:e1:eb:f0:c2:65:e4:f9:60:fd:a5:9f:
         df:65:d4:8b:6c:48:ec:28:d7:32:fc:21:0a:39:f8:89:1c:2c:
         72:ee:9e:3e:6d:a8:a1:fc:af:c3:f5:69:b3:25:d3:2a:0c:3f:
         dd:4e:c3:6e:a8:a2:fb:1c:1a:2a:60:8b:3a:5d:f2:51:c6:25:
         a5:d0:62:1d:99:c6:35:73:80:72:3c:5e:ab:d2:7b:11:41:2a:
         58:b9:44:97:76:e2:e3:f1:be:dc:7e:8e:98:70:e3:fc:a4:37:
         81:3a:05:00:c2:83:e4:82:39:78:f7:af:2f:45:92:ff:75:4e:
         c1:37:35:e2:06:49:3c:c4:9e:46:a8:d1:a7:0c:aa:91:65:51:
         91:1e:5c:af:d3:83:bf:0d:f3:db:4e:87:0e:e1:8d:67:f9:a1:
         79:df:77:b6:29:cd:11:f2:1f:74:dc:4c:b6:4d:98:66:2e:03:
         6b:a2:6e:4b:be:fb:f5:b3:72:ab:89:83:11:64:dd:7c:c1:a8:
         09:5d:fb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 13:39:36 2024 by rpki-client on console-fra.rpki-client.org