Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa
File:                     323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa (raw, json)
Hash identifier:          UjdUuxyvO1Y/kbBJuyiptKJMbONbbRkoTlltlKKQkzw=
Subject key identifier:   B2:25:C1:45:FD:20:C1:06:D0:D0:B1:2E:44:7C:D8:BA:7C:BF:50:4F
Certificate issuer:       /CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
Certificate serial:       2C6B6ABF6F568EBF5B7B8F46729769E98017B0FB
Authority key identifier: D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa
Signing time:             Wed 03 Apr 2024 21:10:53 +0000
ROA not before:           Wed 03 Apr 2024 21:05:53 +0000
ROA not after:            Wed 02 Apr 2025 21:10:53 +0000
asID:                     269175
IP address blocks:        2804:1f4c:800::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6b:6a:bf:6f:56:8e:bf:5b:7b:8f:46:72:97:69:e9:80:17:b0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
        Validity
            Not Before: Apr  3 21:05:53 2024 GMT
            Not After : Apr  2 21:10:53 2025 GMT
        Subject: CN=B225C145FD20C106D0D0B12E447CD8BA7CBF504F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:08:66:40:14:be:ce:47:e5:c4:49:12:5c:83:
                    80:fd:d2:1b:0a:72:48:08:a9:0f:dc:e8:52:20:2b:
                    ff:6f:f7:04:54:6f:22:85:6a:32:e8:ca:5d:4c:fe:
                    f3:e4:ff:d9:34:f5:12:ba:23:ec:3b:9d:11:fc:35:
                    3e:ac:be:3a:61:5d:32:4f:e1:8a:cc:2d:22:d4:09:
                    97:21:70:fe:35:64:12:4d:94:65:34:9e:31:4f:39:
                    a7:f5:53:9c:72:4b:44:79:87:0b:e6:20:f4:5c:50:
                    5c:29:b3:fe:28:6d:4c:ae:b6:bc:b3:c9:b8:d8:f3:
                    63:37:61:7f:dc:14:ac:0f:58:9f:cd:a0:51:37:ea:
                    22:de:69:2d:3a:12:98:b2:83:3d:47:dc:47:ef:aa:
                    b0:b6:ca:ce:41:d1:f4:c3:c5:ad:cb:ea:2e:ee:bd:
                    0f:13:ca:60:4c:12:28:69:96:7d:03:d0:a7:c6:81:
                    0a:d9:bb:bf:1d:63:ed:46:36:3c:97:53:d7:0b:6d:
                    28:fa:09:f9:07:fd:5c:6f:73:8c:20:e0:85:94:1c:
                    49:01:54:87:1b:71:5a:f3:f2:93:43:a9:90:f4:d7:
                    d9:bf:4f:1b:a1:b3:fa:50:98:ab:4d:6a:b0:df:f6:
                    5d:1a:b6:27:a3:ff:5c:98:7f:1b:2a:75:04:ff:99:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:25:C1:45:FD:20:C1:06:D0:D0:B1:2E:44:7C:D8:BA:7C:BF:50:4F
            X509v3 Authority Key Identifier:
                keyid:D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f4c:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:85:fb:52:e3:27:3a:1d:8e:f9:87:ad:26:9b:8d:c0:92:01:
         01:80:eb:ee:89:af:d5:9d:ec:80:b2:ad:6d:4d:03:c1:b1:19:
         f0:2b:4b:69:39:b2:c0:4c:6f:8a:3f:c7:c1:eb:91:cf:c9:c0:
         b3:59:31:cb:86:83:8b:9c:f7:30:2b:30:c5:35:ff:d2:d8:0d:
         b9:62:2e:fd:98:44:b9:2d:f3:71:9b:ac:19:dc:5c:45:7f:9c:
         c3:9c:96:07:77:1b:83:43:df:e6:f8:2a:d2:81:6b:80:81:bd:
         d8:06:76:44:79:be:a9:e1:e0:1f:3d:e2:34:75:3d:f4:ae:34:
         b4:b9:69:8b:6f:0c:9a:b8:00:d5:99:f5:c7:ec:dd:c8:d2:29:
         df:45:5d:f1:15:68:6a:d1:52:5d:73:42:fd:e1:33:7c:f9:b8:
         31:ab:74:da:2e:63:6d:62:ae:0d:3b:7b:21:9d:06:e3:55:9a:
         67:79:21:87:de:e2:67:c6:4a:4d:41:80:3c:c3:69:9d:0a:6c:
         c9:7b:09:c4:bb:f3:47:f8:07:3d:59:2d:6c:91:bd:34:b3:83:
         d0:d2:49:93:2b:74:c2:ce:66:18:9c:c2:24:f4:98:78:02:b0:
         36:78:ad:f6:a3:ef:b7:61:f8:b2:61:ad:bc:ab:95:8c:b9:5e:
         cc:07:84:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 09:25:07 2024 by rpki-client on console-ams.rpki-client.org