Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a3a2f33322d313238203d3e20323632343934.roa
File:                     323830343a313531303a3a2f33322d313238203d3e20323632343934.roa (raw, json)
Hash identifier:          JpXREps54GqCK5smwd6dSzQtw/Uf+8ZldoAF2EIhU4Q=
Subject key identifier:   2F:D0:C9:86:58:EF:18:78:2E:BA:78:68:57:44:F9:EF:B7:10:6B:8B
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       0C33AAA4ED990F48B8675CF537B5521F08D35ED6
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a3a2f33322d313238203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:46 +0000
ROA not before:           Thu 19 Sep 2024 14:06:46 +0000
ROA not after:            Thu 18 Sep 2025 14:11:46 +0000
asID:                     262494
IP address blocks:        2804:1510::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:33:aa:a4:ed:99:0f:48:b8:67:5c:f5:37:b5:52:1f:08:d3:5e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:46 2024 GMT
            Not After : Sep 18 14:11:46 2025 GMT
        Subject: CN=2FD0C98658EF18782EBA78685744F9EFB7106B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:b5:13:9d:cd:97:74:5b:1d:df:d5:b6:a4:
                    bf:a7:2a:d5:ee:56:b7:de:b4:0d:f9:0d:e8:4d:d0:
                    86:a5:bd:b2:61:03:a2:ba:26:09:85:f4:39:f7:cc:
                    b1:c9:d9:cc:6d:08:7f:92:d8:31:f3:82:4e:64:1a:
                    83:47:a8:87:17:bf:5c:0a:1e:7c:b1:6a:4a:06:1b:
                    d7:fd:b3:72:12:ef:15:3a:ae:ae:b8:49:1d:e0:85:
                    c0:00:ef:94:c2:a7:14:ad:6f:e7:64:58:11:9f:fa:
                    b0:02:3b:df:42:44:40:b4:72:b6:49:ec:d7:f1:05:
                    c8:c3:4e:1b:9e:59:8f:d4:71:d8:47:14:c1:70:96:
                    b1:4f:4d:3b:85:91:0a:47:16:7e:65:e8:d6:38:52:
                    95:62:e9:88:2d:47:b7:64:96:01:74:78:e4:d9:5e:
                    82:ba:89:5c:8e:06:8c:90:6c:53:bd:f7:62:50:99:
                    af:79:24:e5:29:1f:c0:da:3c:9b:ca:03:bf:70:07:
                    52:56:52:de:07:fb:95:fc:ec:71:d9:a0:da:fc:99:
                    67:4a:d6:ce:9b:58:09:11:9d:7f:be:af:4e:a5:04:
                    44:d7:41:a0:83:0d:ce:68:3b:38:4e:0d:02:1c:5b:
                    f3:78:07:79:a7:db:82:44:46:96:4a:8a:22:6d:4c:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D0:C9:86:58:EF:18:78:2E:BA:78:68:57:44:F9:EF:B7:10:6B:8B
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a3a2f33322d313238203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1510::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:70:3d:34:fe:8c:17:34:dc:bc:4b:6a:52:c0:6a:a5:d9:03:
         33:f2:0a:7e:6c:1c:1b:5c:c0:e7:b2:22:6a:6d:ab:32:d3:64:
         0a:20:12:38:58:75:6f:ae:4c:de:c7:31:8a:2e:50:85:37:f8:
         18:41:71:78:1c:f7:4b:6f:2c:db:19:55:a4:17:0d:ed:2e:06:
         83:d9:52:4e:d9:00:6f:b5:02:16:53:e5:70:f4:dc:3f:c1:f6:
         71:8b:83:bc:63:74:ab:40:74:ad:26:00:65:85:e3:a1:ce:7d:
         ff:05:f5:cc:6e:85:8a:65:49:7a:8d:0e:c7:93:ed:0b:d2:99:
         73:53:53:23:59:60:bc:e1:4c:5a:12:e2:67:42:27:63:18:58:
         90:53:66:51:68:fb:39:2d:d1:87:66:5a:f0:79:33:8f:95:84:
         6f:3c:e5:c5:ac:5c:fb:59:b8:7a:69:1b:38:9f:e3:e4:19:cd:
         2f:67:f0:4d:b9:ab:30:76:67:33:0d:e8:26:83:a2:f8:d8:fb:
         72:b9:85:43:f6:78:b3:f2:c8:24:ed:97:d2:6a:c6:41:6f:30:
         3f:47:5b:a6:64:ed:7b:51:89:95:00:f9:fb:c0:5b:5b:47:2a:
         bf:90:2f:2f:d7:12:be:c3:eb:88:88:f7:1c:d8:1e:ba:50:d3:
         e0:c9:88:ab
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUDDOqpO2ZD0i4Z1z1N7VSHwjTXtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCQjcwOERDMzJFOTAxNjA4MTIxMzE4OEQ0MDA1M0U0
MENBNTFBQjAeFw0yNDA5MTkxNDA2NDZaFw0yNTA5MTgxNDExNDZaMDMxMTAvBgNV
BAMTKDJGRDBDOTg2NThFRjE4NzgyRUJBNzg2ODU3NDRGOUVGQjcxMDZCOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3IrUTnc2XdFsd39W2pL+nKtXu
VrfetA35DehN0IalvbJhA6K6JgmF9Dn3zLHJ2cxtCH+S2DHzgk5kGoNHqIcXv1wK
HnyxakoGG9f9s3IS7xU6rq64SR3ghcAA75TCpxStb+dkWBGf+rACO99CREC0crZJ
7NfxBcjDThueWY/UcdhHFMFwlrFPTTuFkQpHFn5l6NY4UpVi6YgtR7dklgF0eOTZ
XoK6iVyOBoyQbFO992JQma95JOUpH8DaPJvKA79wB1JWUt4H+5X87HHZoNr8mWdK
1s6bWAkRnX++r06lBETXQaCDDc5oOzhODQIcW/N4B3mn24JERpZKiiJtTH9PAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUL9DJhljvGHguunhoV0T577cQa4swHwYDVR0j
BBgwFoAUh7twjcMukBYIEhMYjUAFPkDKUaswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdXZDQ4VXVNdWVVQ3ViVHFRWkx3ajdFTTZVaHl1cE5zNTZrUmNXWHNF
SkMvMC84N0JCNzA4REMzMkU5MDE2MDgxMjEzMTg4RDQwMDUzRTQwQ0E1MUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QkI3MDhEQzMyRTkwMTYw
ODEyMTMxODhENDAwNTNFNDBDQTUxQUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3V2Q0OFV1TXVlVUN1YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAv
MzIzODMwMzQzYTMxMzUzMTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzIzNDM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBUQMA0GCSqGSIb3DQEBCwUAA4IBAQB1cD00
/owXNNy8S2pSwGql2QMz8gp+bBwbXMDnsiJqbasy02QKIBI4WHVvrkzexzGKLlCF
N/gYQXF4HPdLbyzbGVWkFw3tLgaD2VJO2QBvtQIWU+Vw9Nw/wfZxi4O8Y3SrQHSt
JgBlheOhzn3/BfXMboWKZUl6jQ7Hk+0L0plzU1MjWWC84UxaEuJnQidjGFiQU2ZR
aPs5LdGHZlrweTOPlYRvPOXFrFz7Wbh6aRs4n+PkGc0vZ/BNuaswdmczDegmg6L4
2PtyuYVD9niz8sgk7ZfSasZBbzA/R1umZO17UYmVAPn7wFtbRyq/kC8v1xK+w+uI
iPcc2B66UNPgyYir
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:34 2024 by rpki-client on console-fra.rpki-client.org