Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/323830343a376363343a3a2f33322d313238203d3e20323731353137.roa
File:                     323830343a376363343a3a2f33322d313238203d3e20323731353137.roa (raw, json)
Hash identifier:          Nh+XKdn7QKcE+XuE+mA5oiOklEOCQVQPNYCZpqIlwQs=
Subject key identifier:   9C:A1:9F:06:76:13:D6:55:59:CF:7B:16:C9:F7:77:9C:3E:E2:DF:2A
Certificate issuer:       /CN=7FFA50B6AD400FEAB669E3CF8166898A77806639
Certificate serial:       15DC4BF6AEF2BE3759105E6A7D710E2D313D4C26
Authority key identifier: 7F:FA:50:B6:AD:40:0F:EA:B6:69:E3:CF:81:66:89:8A:77:80:66:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FFA50B6AD400FEAB669E3CF8166898A77806639.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/323830343a376363343a3a2f33322d313238203d3e20323731353137.roa
Signing time:             Tue 23 Jul 2024 03:49:56 +0000
ROA not before:           Tue 23 Jul 2024 03:44:56 +0000
ROA not after:            Tue 22 Jul 2025 03:49:56 +0000
asID:                     271517
IP address blocks:        2804:7cc4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:dc:4b:f6:ae:f2:be:37:59:10:5e:6a:7d:71:0e:2d:31:3d:4c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FFA50B6AD400FEAB669E3CF8166898A77806639
        Validity
            Not Before: Jul 23 03:44:56 2024 GMT
            Not After : Jul 22 03:49:56 2025 GMT
        Subject: CN=9CA19F067613D65559CF7B16C9F7779C3EE2DF2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:ce:38:73:76:be:08:b7:a8:65:5f:c7:2b:
                    ff:ff:e1:46:de:9b:f3:90:19:77:c6:7d:89:86:00:
                    7c:0e:c5:7e:fa:6e:b3:23:07:1e:ec:7d:e1:f3:10:
                    be:64:46:9d:3e:ed:90:58:c3:71:02:b8:cd:36:05:
                    a1:93:db:02:bb:89:4d:59:92:32:f8:c6:1c:4e:48:
                    c6:4f:24:64:19:26:b2:64:69:00:92:0c:e3:f2:c3:
                    5a:6e:b9:1c:c9:eb:42:8d:7e:11:03:c1:27:a5:56:
                    76:3c:2a:ed:e8:2b:89:18:57:08:18:7b:7b:bc:54:
                    30:5f:f1:7f:a3:b8:c2:33:1c:81:09:98:a4:90:1a:
                    5e:f0:47:27:da:da:1b:c0:2a:d1:a4:00:ab:bd:2d:
                    0f:91:09:5e:9d:5e:92:40:34:03:50:87:9f:35:09:
                    c3:6d:75:6a:f7:ea:48:6b:bc:c7:e2:2c:cd:47:ac:
                    7a:96:0f:0e:a5:28:fc:49:65:9c:94:5e:43:e7:b8:
                    d7:21:70:e8:cc:0e:35:d3:d0:7f:f2:14:54:fc:0b:
                    70:7d:eb:e2:83:ca:da:a2:a8:04:45:2e:91:b1:f9:
                    b9:09:18:0f:ea:4b:27:a5:e6:b6:2b:41:49:66:c9:
                    77:f0:5b:6f:15:7f:80:74:d6:14:27:54:d4:e4:5e:
                    41:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A1:9F:06:76:13:D6:55:59:CF:7B:16:C9:F7:77:9C:3E:E2:DF:2A
            X509v3 Authority Key Identifier:
                keyid:7F:FA:50:B6:AD:40:0F:EA:B6:69:E3:CF:81:66:89:8A:77:80:66:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/7FFA50B6AD400FEAB669E3CF8166898A77806639.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FFA50B6AD400FEAB669E3CF8166898A77806639.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/323830343a376363343a3a2f33322d313238203d3e20323731353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:62:4e:81:25:d7:ac:d4:47:34:74:ad:ea:49:7b:91:f0:e8:
         cd:2c:45:91:d2:ff:39:f0:6a:08:c3:1c:db:9b:79:80:c8:e2:
         d5:c5:ad:95:e1:c6:96:f6:6c:5f:a7:8e:e1:61:0d:8f:5f:32:
         c6:49:37:71:6d:bf:b9:4e:7b:e6:dc:b8:8c:51:34:32:88:ec:
         04:e6:d9:4c:5c:ea:ca:48:94:96:0c:56:3d:30:93:0b:89:8c:
         ae:51:e2:24:b1:b9:6f:78:c5:f5:9f:06:aa:3c:d9:a8:0d:5e:
         b4:93:2a:da:f1:dd:fc:90:37:37:6d:e5:68:40:78:ea:b0:9c:
         68:d9:af:0b:be:bc:06:42:69:cb:ef:7c:45:dc:a0:d5:0b:c0:
         4b:72:75:01:b8:0e:0a:9a:a9:d6:05:d6:b5:bf:69:f2:46:2a:
         1f:24:20:ad:b2:48:4f:78:12:cf:25:07:98:aa:11:96:87:4a:
         34:84:04:53:be:5e:1b:d4:8e:a3:01:bc:f1:57:0b:31:45:24:
         f5:c7:d7:fc:ef:ad:d8:61:17:ce:58:fe:4d:dc:b6:a3:9b:9b:
         c8:3f:43:50:88:92:0d:7a:18:6c:c9:3d:38:ff:47:1c:01:a9:
         a5:41:27:44:b9:c3:fa:b2:85:3b:ba:3b:16:ff:01:79:8c:f9:
         4a:27:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 20:02:10 2024 by rpki-client on console-fra.rpki-client.org