Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a666663303a3a2f34322d3432203d3e20323637343930.roa
File:                     323830343a343234383a666663303a3a2f34322d3432203d3e20323637343930.roa (raw, json)
Hash identifier:          xr0jqSAVYoEUxnQB5kUjiZcIKBEtAbRbbJrTuVzfC9w=
Subject key identifier:   76:6A:BA:5F:3E:27:4F:AD:85:53:BB:99:0C:CD:CB:70:2E:4C:C7:62
Certificate issuer:       /CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
Certificate serial:       668807FA8158D66E71EBC98E9F70161F4EE18D5D
Authority key identifier: 43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a666663303a3a2f34322d3432203d3e20323637343930.roa
Signing time:             Sat 04 May 2024 04:52:29 +0000
ROA not before:           Sat 04 May 2024 04:47:29 +0000
ROA not after:            Sat 03 May 2025 04:52:29 +0000
asID:                     267490
IP address blocks:        2804:4248:ffc0::/42 maxlen: 42

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:88:07:fa:81:58:d6:6e:71:eb:c9:8e:9f:70:16:1f:4e:e1:8d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
        Validity
            Not Before: May  4 04:47:29 2024 GMT
            Not After : May  3 04:52:29 2025 GMT
        Subject: CN=766ABA5F3E274FAD8553BB990CCDCB702E4CC762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:cd:c3:83:ec:4f:a0:f5:be:af:49:05:a8:
                    d6:87:ab:8f:26:d0:c3:da:f3:12:c3:b1:37:d6:44:
                    a3:5f:27:91:a6:ef:18:22:fc:b4:5f:ea:4b:2e:19:
                    7a:f0:8b:29:b5:2f:10:ee:9e:f5:86:9e:fb:62:b5:
                    d9:22:ce:9b:44:ec:1c:fb:7f:fd:21:56:f6:d6:9e:
                    ef:c7:04:1a:6f:c1:8e:45:21:a4:1f:61:37:3a:53:
                    3a:e8:c9:bf:5f:3a:b0:18:00:3b:be:11:87:70:5f:
                    d3:22:f5:2b:01:5b:05:ca:2f:b2:74:48:c4:20:10:
                    d9:9a:2c:03:bc:0c:87:12:86:e1:d3:1c:1b:df:58:
                    91:d5:df:77:c6:b0:58:c5:2e:0f:59:fb:ce:bd:d8:
                    b1:25:30:98:10:42:62:cb:b0:dd:13:3d:0b:d8:a4:
                    4d:41:64:77:2b:01:8d:aa:c3:eb:cf:a4:65:17:0d:
                    f4:9b:cf:90:54:7c:63:5c:df:f1:3c:77:a2:66:7e:
                    9e:9e:1d:c1:7d:4a:f3:20:6b:9c:e7:c6:e6:b2:6d:
                    5f:9e:e1:9b:d1:f3:fe:b7:8d:6a:7d:04:02:86:63:
                    38:5d:bb:4d:e2:f5:2b:76:49:c3:5a:a7:91:77:f4:
                    ab:f4:45:09:c8:a5:06:d1:27:25:a7:5c:81:fc:4d:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6A:BA:5F:3E:27:4F:AD:85:53:BB:99:0C:CD:CB:70:2E:4C:C7:62
            X509v3 Authority Key Identifier:
                keyid:43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a666663303a3a2f34322d3432203d3e20323637343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4248:ffc0::/42

    Signature Algorithm: sha256WithRSAEncryption
         bc:e8:ca:78:59:05:eb:b7:09:8e:2c:4f:08:6e:d8:ea:d6:e3:
         49:2a:66:22:65:01:3d:d5:9e:85:08:c0:2f:b8:d9:ad:27:2b:
         00:51:2d:dd:cc:2b:7e:c0:9f:e7:d8:f2:dc:7e:89:fc:80:68:
         b9:d2:8b:ef:44:48:8d:97:cb:6f:59:5c:01:dc:84:11:5f:c4:
         b6:f2:4b:db:51:f8:f0:20:0d:45:27:8b:93:aa:05:b0:62:a8:
         ec:e0:4f:9c:62:2e:f3:99:a5:51:68:5c:6f:f4:22:2c:b4:0d:
         fc:dc:4c:53:86:84:1c:b0:8f:46:3f:df:1c:2f:5c:5b:e0:52:
         43:4c:6e:7c:0c:aa:e8:0c:e2:8c:cb:36:60:2f:5d:46:b9:ad:
         4c:f8:79:e2:b7:bd:22:7d:7c:2d:c8:a1:ae:9b:9c:e3:24:28:
         25:03:6d:97:12:e6:ba:d5:d8:fb:f2:43:7b:ed:89:4d:53:77:
         03:fc:7e:39:7c:d9:41:42:e1:65:18:b1:0a:96:a4:88:16:aa:
         24:7b:a8:3a:24:a2:ed:8e:c7:b0:0a:08:3e:d0:45:b0:2b:d0:
         15:19:e2:34:ae:0b:e2:f4:fe:93:7a:60:2e:25:4f:ae:52:c5:
         8c:0a:29:71:8d:18:b1:11:ae:c6:b0:56:6f:f4:0e:9b:26:67:
         a7:52:30:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 14:17:29 2024 by rpki-client on console-ams.rpki-client.org