Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3332203d3e203238333630.roa
File:                     323830343a31343a3a2f33322d3332203d3e203238333630.roa (raw, json)
Hash identifier:          UaVxlY6JRwMVPY38cdB9P7nzS/NjXYYWu46Z3KXsaSQ=
Subject key identifier:   BA:74:C7:0D:A5:11:01:73:EB:61:BB:31:DB:8F:3A:8F:E5:02:86:A9
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       5EFEB76D7DB67D7AB6CB29D68B176A12FDD38BCC
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3332203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:02:04 +0000
ROA not before:           Mon 12 Aug 2024 19:57:04 +0000
ROA not after:            Mon 11 Aug 2025 20:02:04 +0000
asID:                     28360
IP address blocks:        2804:14::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fe:b7:6d:7d:b6:7d:7a:b6:cb:29:d6:8b:17:6a:12:fd:d3:8b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 19:57:04 2024 GMT
            Not After : Aug 11 20:02:04 2025 GMT
        Subject: CN=BA74C70DA5110173EB61BB31DB8F3A8FE50286A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1d:c1:8d:51:29:55:63:44:04:71:60:16:e6:
                    a3:8a:67:1b:be:13:56:80:d4:fd:8b:d5:04:7e:f2:
                    9d:8e:5a:e0:5f:62:b9:f4:e4:16:20:a5:4c:41:af:
                    6e:47:96:ae:fd:ca:67:c2:35:85:df:2c:4d:5f:be:
                    21:d1:34:fb:4d:48:7d:e4:2e:5b:dd:a4:06:d7:d9:
                    cb:36:a9:44:86:c1:e7:79:3a:8a:2f:78:35:3b:b7:
                    eb:9f:50:d6:15:62:e3:81:87:b2:f1:73:60:c1:c5:
                    7f:63:64:f6:e4:7c:17:8d:68:e9:8a:14:db:05:d0:
                    6a:65:cd:82:7f:56:cc:8c:d3:a2:45:1a:c1:a0:5a:
                    20:21:20:be:42:b6:60:45:3a:41:ce:68:3e:77:f5:
                    82:c1:1c:3d:a7:25:da:61:3d:2e:52:a7:6d:f6:9f:
                    52:d9:f0:8c:42:06:aa:31:be:26:d3:94:27:11:94:
                    3c:de:e4:4a:d7:b4:67:5b:7d:4b:56:a4:ef:ad:a8:
                    cf:41:32:9e:e2:b2:91:f2:9f:f5:32:06:31:3c:74:
                    b5:9d:48:7c:d6:8a:90:89:bc:5d:6f:6f:1f:97:b8:
                    95:9d:41:8a:26:ff:74:56:b8:89:f8:1c:f8:41:aa:
                    82:e4:f8:8e:c5:2c:23:0c:28:4a:33:0d:37:aa:79:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:74:C7:0D:A5:11:01:73:EB:61:BB:31:DB:8F:3A:8F:E5:02:86:A9
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3332203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:c4:9f:cf:75:95:9c:c6:7d:66:f3:5f:8e:de:63:3c:6b:a6:
         47:74:4b:38:e8:d3:35:26:e8:b1:b7:ec:a5:fe:21:28:3c:0d:
         c0:1e:75:13:fd:86:51:8f:1c:17:f3:f4:de:3b:c6:d5:7e:a4:
         ca:fd:55:ec:f2:3c:bc:2f:52:0d:9f:47:b5:8e:ed:7f:8a:ae:
         60:2b:e4:8b:72:81:b7:12:cc:40:3d:98:12:92:f3:7e:60:2e:
         cb:95:d5:86:76:2f:35:d5:04:9c:e5:f8:c8:e0:aa:34:05:fa:
         14:a3:4b:e0:09:d1:a1:1a:a4:52:46:5c:bf:3d:60:39:31:14:
         fa:01:bb:07:ae:5e:eb:04:4f:4d:69:fc:07:ca:bb:08:4f:1b:
         1b:41:37:50:6e:17:77:b4:d9:94:62:1e:92:95:5d:18:eb:80:
         73:5c:35:b3:e0:48:b7:55:30:6c:99:cf:06:c7:df:e5:7c:31:
         e9:7d:1a:d5:bb:62:ab:99:54:0c:25:2d:65:2c:e2:cb:e2:a1:
         49:78:fe:50:79:42:9e:40:a4:6d:a0:21:dc:e5:db:2a:40:30:
         26:65:93:7b:a4:52:47:ed:07:db:ec:6a:0b:c6:96:6b:f7:af:
         4e:df:64:52:fd:2a:d3:7b:14:04:3b:4c:4e:df:1b:61:50:6b:
         bb:df:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 10:22:52 2024 by rpki-client on console-fra.rpki-client.org