Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/1/323830343a386161303a3a2f33322d3434203d3e20323733363831.roa
File:                     323830343a386161303a3a2f33322d3434203d3e20323733363831.roa (raw, json)
Hash identifier:          iirmHwQuysAYRz7wVq/Rud6bcbWxKb211kzMPAmTUNs=
Subject key identifier:   00:59:DF:F9:A4:1F:81:CC:F0:71:96:4F:D4:7B:01:1F:65:0E:E5:D2
Certificate issuer:       /CN=B4EF53E40DBC13BA01BA99F2C92151F274275CF8
Certificate serial:       40DBD78CF29B72E8F4DCE7D099605268B8472D4B
Authority key identifier: B4:EF:53:E4:0D:BC:13:BA:01:BA:99:F2:C9:21:51:F2:74:27:5C:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EF53E40DBC13BA01BA99F2C92151F274275CF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/1/323830343a386161303a3a2f33322d3434203d3e20323733363831.roa
Signing time:             Thu 04 Apr 2024 15:17:00 +0000
ROA not before:           Thu 04 Apr 2024 15:12:00 +0000
ROA not after:            Thu 03 Apr 2025 15:17:00 +0000
asID:                     273681
IP address blocks:        2804:8aa0::/32 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:db:d7:8c:f2:9b:72:e8:f4:dc:e7:d0:99:60:52:68:b8:47:2d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EF53E40DBC13BA01BA99F2C92151F274275CF8
        Validity
            Not Before: Apr  4 15:12:00 2024 GMT
            Not After : Apr  3 15:17:00 2025 GMT
        Subject: CN=0059DFF9A41F81CCF071964FD47B011F650EE5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:1d:40:02:76:81:7a:75:1e:e7:c8:44:c3:
                    6a:1f:67:4d:e7:0d:1e:d5:fc:f9:c5:fe:00:ad:e9:
                    36:6a:62:24:f6:8d:5e:07:73:3a:91:a0:75:ba:28:
                    ea:9e:f5:0a:52:ea:c7:39:49:f9:2e:c5:02:e8:43:
                    0a:42:42:b1:f7:c2:4e:49:88:ba:79:fa:71:0c:b9:
                    61:df:4d:dc:bc:f6:95:8c:a1:09:cb:98:0b:08:47:
                    e3:6e:9b:38:c5:cb:6a:e4:72:b0:7e:47:02:1a:e7:
                    00:86:83:08:6d:6b:b3:31:b1:c4:e3:8f:0f:9d:94:
                    8c:15:73:84:8f:5d:0b:2e:98:67:d6:bd:9f:02:e5:
                    e0:76:66:6e:16:85:a3:d3:22:e6:f8:ed:3c:c6:5d:
                    61:78:0e:cd:9a:89:5e:a0:1a:bb:9d:8a:38:bf:c3:
                    01:f0:de:14:6d:b7:e4:7e:98:b2:fe:08:af:a6:82:
                    fa:15:e9:81:83:8b:8e:a3:6f:cc:ed:8e:5b:95:9a:
                    24:a2:b8:fa:1d:34:d0:0e:5b:86:4c:14:fa:a1:33:
                    dc:13:47:66:a6:17:12:ed:b8:c1:2d:e3:79:de:d8:
                    e1:17:87:92:71:34:3b:21:75:19:71:28:25:11:3d:
                    71:c5:cc:e2:c0:9b:c4:d7:90:fb:3e:0c:dd:cf:4d:
                    d4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:59:DF:F9:A4:1F:81:CC:F0:71:96:4F:D4:7B:01:1F:65:0E:E5:D2
            X509v3 Authority Key Identifier:
                keyid:B4:EF:53:E4:0D:BC:13:BA:01:BA:99:F2:C9:21:51:F2:74:27:5C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/1/B4EF53E40DBC13BA01BA99F2C92151F274275CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EF53E40DBC13BA01BA99F2C92151F274275CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/1/323830343a386161303a3a2f33322d3434203d3e20323733363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:9c:3b:fa:f4:db:78:59:31:a9:b4:4a:51:51:89:b1:97:13:
         d1:3b:0e:ba:ba:02:1a:e7:3d:7f:7c:f3:63:9f:5c:a3:30:8d:
         3b:8d:3e:1a:b9:b5:06:e6:c8:5a:20:ad:41:9f:a5:ec:34:97:
         85:42:3f:8f:b8:92:aa:2c:09:b0:37:70:c3:a4:95:5f:57:f6:
         5a:9f:92:93:3e:b4:68:3f:6f:70:f5:88:6e:c0:04:c0:9b:26:
         5d:5a:dd:a8:75:a2:29:34:39:df:d3:3a:a7:b4:a1:46:cc:82:
         ab:43:26:c0:93:19:3f:cb:a3:a7:08:30:b1:48:15:aa:72:3e:
         44:8e:66:13:3a:9c:26:06:a4:e9:bc:d7:9d:18:ce:a4:0e:51:
         54:86:1a:f0:45:5e:ad:f7:54:bf:25:6f:22:5c:b3:e4:2d:85:
         41:c4:33:55:e1:b2:63:97:c3:15:c5:1d:b1:31:cc:0c:d1:13:
         08:a6:9d:3c:50:8f:dd:cc:06:b7:f3:e9:01:7e:6e:47:d5:ce:
         98:2c:38:d7:3b:56:9e:bb:9a:7b:60:3b:bd:cd:5e:6a:2b:37:
         68:aa:e6:60:42:41:65:04:40:63:2f:00:42:b1:8f:e5:11:df:
         df:cd:78:50:bf:68:dd:b8:10:32:4f:6b:a2:5c:91:70:1c:03:
         89:32:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 17:54:14 2024 by rpki-client on console-fra.rpki-client.org