Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33322d313238203d3e20323632343934.roa
File:                     323830343a343637383a3a2f33322d313238203d3e20323632343934.roa (raw, json)
Hash identifier:          Px7etZC6XMgXYYbT/B06ImGDknnAMXlyRVlKispuCgM=
Subject key identifier:   14:03:36:E4:06:43:50:01:EA:33:30:1A:FA:26:5C:2F:7B:8D:FB:57
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       208E9B1DC5CF1DC52EFFCB4FCA73C6034D703CE8
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33322d313238203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:44 +0000
ROA not before:           Thu 19 Sep 2024 14:06:44 +0000
ROA not after:            Thu 18 Sep 2025 14:11:44 +0000
asID:                     262494
IP address blocks:        2804:4678::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8e:9b:1d:c5:cf:1d:c5:2e:ff:cb:4f:ca:73:c6:03:4d:70:3c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:44 2024 GMT
            Not After : Sep 18 14:11:44 2025 GMT
        Subject: CN=140336E406435001EA33301AFA265C2F7B8DFB57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:42:74:23:17:49:23:ad:d7:c4:c2:9e:8a:
                    07:9b:81:ef:70:9c:c1:31:b0:95:d8:b1:93:32:c4:
                    f7:43:25:a3:fb:ed:1e:99:ad:db:9b:40:14:00:0d:
                    8a:2f:94:d4:41:9d:47:6c:d2:c9:25:6c:4f:49:c3:
                    a3:0c:5a:31:8d:fe:49:29:f5:ba:cc:c1:9a:8c:99:
                    9b:6e:8e:19:a6:6d:8e:f1:91:31:5d:cd:5c:ca:0f:
                    cc:ef:96:5f:11:33:ff:99:82:49:58:ec:d6:e5:2b:
                    a5:f8:41:48:45:a5:62:1f:82:94:fe:3b:21:f4:7e:
                    f8:92:0f:8b:b4:70:50:85:d7:e9:d6:79:46:5d:de:
                    45:20:38:b3:5b:a9:3f:3b:a9:25:54:f0:75:1f:84:
                    40:44:34:d2:31:ce:4c:da:e0:ee:3e:d3:ca:6c:2b:
                    d9:9b:2b:9d:34:6b:5e:fc:c9:91:4c:5e:fa:70:2e:
                    38:0a:e2:4d:4f:fc:7a:de:9d:dc:29:3d:bd:be:6d:
                    6b:a8:72:86:ef:8c:9c:4c:82:e5:2e:18:12:86:05:
                    c1:0b:a3:f9:07:0e:92:70:34:34:8e:97:fa:36:8b:
                    c3:bb:90:60:bc:92:c4:cc:dc:96:57:bf:c5:f6:f4:
                    0d:d2:f2:d8:9e:ce:3f:88:5b:15:c1:93:01:75:b8:
                    3e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:03:36:E4:06:43:50:01:EA:33:30:1A:FA:26:5C:2F:7B:8D:FB:57
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33322d313238203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:28:2f:ed:a9:15:73:a4:5d:ba:b1:b5:89:07:82:1b:42:dc:
         9e:46:cc:22:b6:8f:38:0a:32:df:e9:5f:34:f7:c5:1d:22:e5:
         1c:d1:53:2d:d7:2d:4f:bc:1f:2e:11:d1:6b:a9:13:de:1a:a1:
         5e:82:15:c7:da:55:c8:fb:13:8c:cd:48:9b:17:0a:5a:c6:6d:
         af:b7:80:53:66:6e:ac:d5:76:86:93:67:88:05:9d:b4:df:bf:
         34:8b:8f:e7:1a:74:e6:dc:48:b1:8f:bf:76:fe:a3:91:b1:fa:
         e8:fb:03:2c:30:e3:6c:c1:f4:5a:83:96:c8:e1:cc:23:b4:fb:
         10:53:72:48:fd:10:ce:ee:b4:80:6f:27:1f:86:60:b0:b1:ed:
         64:99:1d:41:ff:7a:c2:2d:4f:26:20:97:23:92:bc:0a:50:fe:
         2d:47:9c:80:dd:aa:de:e5:69:04:ab:7d:a7:16:bd:6c:eb:21:
         fb:8e:1e:8e:3d:fa:91:37:2b:83:76:3a:13:01:0b:0a:c9:e7:
         f7:cb:b4:a8:db:b2:c1:4d:a5:78:f5:6b:f6:58:9e:72:91:03:
         da:0e:95:0b:37:2b:55:31:a0:6b:5d:4e:d7:e1:d7:e5:52:65:
         40:ff:2c:54:92:59:02:aa:25:ed:55:3b:54:a8:9f:a1:03:06:
         7b:50:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:34 2024 by rpki-client on console-fra.rpki-client.org