Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/323830343a383632343a3a2f33322d3332203d3e20323732363234.roa
File:                     323830343a383632343a3a2f33322d3332203d3e20323732363234.roa (raw, json)
Hash identifier:          n+uoceYkqhl9AqeW2xTHZ6F9evyIbQUvtoRLfBwg2wo=
Subject key identifier:   F8:15:0D:1E:97:99:D3:B1:E1:26:E1:6A:1F:D7:F8:2D:D7:8A:D7:96
Certificate issuer:       /CN=3C8290CF1608874A54A795F2E5F37F0AE0861D69
Certificate serial:       19F73F42667D9D4B5D84BDF1DB528411A373EAB9
Authority key identifier: 3C:82:90:CF:16:08:87:4A:54:A7:95:F2:E5:F3:7F:0A:E0:86:1D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8290CF1608874A54A795F2E5F37F0AE0861D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/323830343a383632343a3a2f33322d3332203d3e20323732363234.roa
Signing time:             Tue 25 Jun 2024 18:13:05 +0000
ROA not before:           Tue 25 Jun 2024 18:08:05 +0000
ROA not after:            Tue 24 Jun 2025 18:13:05 +0000
asID:                     272624
IP address blocks:        2804:8624::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f7:3f:42:66:7d:9d:4b:5d:84:bd:f1:db:52:84:11:a3:73:ea:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8290CF1608874A54A795F2E5F37F0AE0861D69
        Validity
            Not Before: Jun 25 18:08:05 2024 GMT
            Not After : Jun 24 18:13:05 2025 GMT
        Subject: CN=F8150D1E9799D3B1E126E16A1FD7F82DD78AD796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:f3:c3:22:e6:1b:82:fa:3f:78:b9:dd:f7:
                    bc:ae:9b:41:f4:61:e7:5a:da:7a:ba:62:57:ce:9c:
                    8d:4a:dc:15:0c:4c:30:45:a6:99:50:74:7c:85:45:
                    ff:c5:5b:5a:e9:f9:eb:1e:fa:e0:1e:c2:ce:a2:ab:
                    70:b7:0d:38:7d:61:7d:ed:05:8f:79:bc:62:b0:36:
                    86:73:06:8c:a3:ef:3b:a3:46:03:74:b8:30:48:c0:
                    9f:66:40:e5:a7:7e:09:5c:c1:db:26:b0:17:cb:5f:
                    80:a3:46:2f:7b:bc:75:82:4b:f7:3c:df:6c:b9:9a:
                    15:fa:64:e8:2d:ff:73:0f:82:9f:a7:16:c2:0b:23:
                    7e:fd:5c:a1:31:01:cd:90:87:a5:bd:2e:cc:31:6f:
                    9c:6c:7d:f6:7c:4b:14:00:4e:f2:84:d3:49:e8:df:
                    33:9a:d4:36:ea:04:5a:e2:cb:cd:2e:d8:a5:4a:03:
                    d3:3c:7d:1c:99:26:9c:19:5e:ff:4b:56:08:1a:15:
                    8d:2e:14:11:d9:82:2c:a9:af:15:f1:dd:74:4d:1d:
                    0b:8c:bd:3b:86:da:80:66:b5:56:66:82:e5:54:ad:
                    b6:04:2b:c0:e0:f6:4e:64:62:0e:aa:68:92:5f:e4:
                    36:5c:48:7d:9d:3f:32:a1:cf:35:eb:07:fd:82:ff:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:15:0D:1E:97:99:D3:B1:E1:26:E1:6A:1F:D7:F8:2D:D7:8A:D7:96
            X509v3 Authority Key Identifier:
                keyid:3C:82:90:CF:16:08:87:4A:54:A7:95:F2:E5:F3:7F:0A:E0:86:1D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/3C8290CF1608874A54A795F2E5F37F0AE0861D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8290CF1608874A54A795F2E5F37F0AE0861D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/323830343a383632343a3a2f33322d3332203d3e20323732363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8624::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:07:db:07:d1:82:96:15:cc:fd:e1:a7:32:67:29:20:0e:58:
         a9:35:26:42:e6:d2:96:0b:ad:9e:65:a1:2f:38:38:aa:ac:ab:
         4b:ae:94:44:d3:73:27:f3:bc:42:93:e5:67:84:01:51:10:47:
         b2:fd:cc:c1:c2:f6:96:0a:fa:27:70:7f:6e:6a:24:49:4d:b4:
         c3:a2:9e:1c:55:03:e1:bf:a1:cf:96:48:82:ee:99:07:b8:3d:
         9c:b7:2a:01:d2:f8:c2:03:79:60:76:5d:29:ea:06:20:2b:58:
         f9:7e:59:83:2e:88:1d:30:43:e3:31:ac:4a:71:82:6d:81:be:
         69:a8:90:77:f6:8c:90:8f:d6:41:6f:64:4e:d1:b2:40:37:7f:
         1d:68:e6:e4:5c:06:e9:d4:cf:56:58:a5:60:8f:8f:f5:4d:f7:
         37:77:12:3e:7d:9c:8c:02:d9:00:43:3b:55:11:5c:af:d3:a4:
         99:47:63:17:7c:95:03:23:92:c9:86:04:95:e2:ed:14:eb:87:
         2b:4f:15:6b:24:70:98:e5:0a:72:6b:53:8c:82:13:00:06:03:
         ec:e7:c9:98:c5:1d:29:09:7b:04:ce:ac:d8:85:ac:69:6f:de:
         ce:cb:3a:cb:a2:87:d5:4b:2b:92:93:82:69:38:6b:81:14:cb:
         e2:05:48:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 13:26:31 2024 by rpki-client on console-fra.rpki-client.org