Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/323830343a343064303a3a2f33322d3332203d3e20323635393833.roa
File:                     323830343a343064303a3a2f33322d3332203d3e20323635393833.roa (raw, json)
Hash identifier:          pIb+LCad5hPwqK1rY3m7mPBpNNVJV0opQwjzvupQYEc=
Subject key identifier:   C7:32:F5:75:4A:5F:C9:EE:78:64:44:3F:59:F2:F7:ED:FB:BF:96:69
Certificate issuer:       /CN=C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017
Certificate serial:       3920BD2831D636CD4400BEE15361D0792F4A4894
Authority key identifier: C5:45:47:AC:B7:5B:BB:CF:83:A5:C4:E8:CE:FE:0C:8E:A3:CD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/323830343a343064303a3a2f33322d3332203d3e20323635393833.roa
Signing time:             Thu 18 Apr 2024 11:39:12 +0000
ROA not before:           Thu 18 Apr 2024 11:34:12 +0000
ROA not after:            Thu 17 Apr 2025 11:39:12 +0000
asID:                     265983
IP address blocks:        2804:40d0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:20:bd:28:31:d6:36:cd:44:00:be:e1:53:61:d0:79:2f:4a:48:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017
        Validity
            Not Before: Apr 18 11:34:12 2024 GMT
            Not After : Apr 17 11:39:12 2025 GMT
        Subject: CN=C732F5754A5FC9EE7864443F59F2F7EDFBBF9669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:49:d9:9d:92:00:48:a4:23:cb:39:bd:64:
                    c2:95:ab:b5:a1:24:86:c9:0e:27:71:91:5a:81:cc:
                    26:bd:36:24:7a:7c:7a:a8:25:f2:79:8d:d3:c0:67:
                    5a:5e:69:12:52:73:0d:4a:0c:25:a1:4f:61:2a:d6:
                    25:53:fa:9d:29:b6:4f:6a:43:b3:66:db:a9:41:fb:
                    d3:29:ff:62:7e:a9:55:df:96:0b:7e:4b:05:9c:b5:
                    8e:05:7a:08:14:47:ee:c3:7e:f7:7e:eb:c0:40:52:
                    d2:27:14:ea:8d:51:11:fd:38:ea:5b:cb:1c:c8:f7:
                    b9:af:6c:31:e6:63:0c:4f:62:68:bd:9d:6c:29:eb:
                    1b:7d:d2:8a:19:ff:a8:b7:11:94:49:81:8a:23:db:
                    f1:84:e5:73:7a:ed:51:89:51:32:95:55:f9:e3:67:
                    93:c1:5e:ea:9c:d8:1e:03:2d:d3:fc:32:df:34:7f:
                    78:24:4a:66:1c:80:49:26:26:0b:9f:b3:27:1d:54:
                    9b:e1:59:f2:04:7a:b6:b8:1d:88:4c:b4:9e:5f:37:
                    e0:24:5b:5a:47:a4:9f:51:1d:5e:08:ad:1c:b0:c9:
                    66:9d:7f:f6:12:8b:26:a8:3c:a3:25:fa:38:aa:08:
                    41:bf:53:6a:e0:1f:9a:84:18:1f:fe:9d:d1:f6:b0:
                    9f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:32:F5:75:4A:5F:C9:EE:78:64:44:3F:59:F2:F7:ED:FB:BF:96:69
            X509v3 Authority Key Identifier:
                keyid:C5:45:47:AC:B7:5B:BB:CF:83:A5:C4:E8:CE:FE:0C:8E:A3:CD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/323830343a343064303a3a2f33322d3332203d3e20323635393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:67:21:f4:0e:48:f0:d1:ea:de:30:27:a1:6e:b7:16:7e:54:
         b7:f2:1a:d7:51:57:52:7a:7c:1f:46:58:74:7a:51:34:b7:b3:
         d3:b7:16:87:f0:c6:34:f8:c8:21:ff:2a:09:40:58:29:4a:35:
         57:1f:f6:76:c6:91:b2:32:d3:a1:df:3d:93:d7:ec:94:d2:6a:
         09:74:6f:12:35:2a:c6:c9:09:d7:ac:a5:30:79:60:76:47:2d:
         8c:4a:d3:ed:a2:bd:bf:28:3b:0d:c7:bb:16:12:b3:6f:65:6d:
         7f:91:b6:05:88:f6:f8:29:ed:4c:ca:1b:15:23:c5:57:c3:1f:
         80:f9:52:b0:93:23:8f:54:4e:f0:a8:6b:34:88:29:1b:a0:76:
         e3:17:e0:cb:95:13:e7:d6:fc:a9:bb:de:4c:c3:32:66:16:79:
         ec:89:40:1a:f4:c3:e3:c0:b3:38:05:41:58:01:7f:d5:da:f8:
         b8:3b:d4:95:97:2a:00:e1:f9:4f:76:2b:7a:1a:b0:85:3b:a9:
         93:4a:c0:03:39:67:b0:3a:5a:fd:89:25:54:f6:cb:65:ab:61:
         6a:0a:57:ae:a0:7c:3f:67:a8:b9:d7:29:30:5c:ae:30:dc:fc:
         a3:fe:d1:ab:ab:1a:a1:6c:f3:90:f7:ae:79:7f:54:b2:82:d2:
         15:df:f1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 16:24:18 2024 by rpki-client on console-fra.rpki-client.org