Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a383030303a3a2f33332d3333203d3e20323637303739.roa
File:                     323830343a343764343a383030303a3a2f33332d3333203d3e20323637303739.roa (raw, json)
Hash identifier:          szQAnni1wq9KHV/EnDjvpGUh3d+wCEjK5TeQ9+ZbhqE=
Subject key identifier:   2B:DB:09:00:D8:78:ED:CE:66:0F:4B:37:71:82:87:E5:CB:F3:8A:92
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       1168E0356B8DEC0E902D89B74B7A658CC310974B
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a383030303a3a2f33332d3333203d3e20323637303739.roa
Signing time:             Thu 04 Apr 2024 11:09:54 +0000
ROA not before:           Thu 04 Apr 2024 11:04:54 +0000
ROA not after:            Thu 03 Apr 2025 11:09:54 +0000
asID:                     267079
IP address blocks:        2804:47d4:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:68:e0:35:6b:8d:ec:0e:90:2d:89:b7:4b:7a:65:8c:c3:10:97:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr  4 11:04:54 2024 GMT
            Not After : Apr  3 11:09:54 2025 GMT
        Subject: CN=2BDB0900D878EDCE660F4B37718287E5CBF38A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:d8:65:82:0a:01:6e:3f:68:c9:2e:ef:0b:
                    32:b7:da:70:ba:06:66:dd:15:d8:a3:3c:de:f7:d4:
                    af:d8:1b:5b:6d:4e:f2:45:d7:91:ff:08:3c:38:0b:
                    ab:27:c8:63:b2:e9:2b:c6:3e:1b:fb:52:e5:00:09:
                    ee:62:56:9d:91:49:ab:cd:13:f3:0c:d1:c0:fd:d7:
                    0c:8f:72:0c:7c:78:e3:e9:d0:70:fb:ff:86:ff:52:
                    ca:bd:02:83:83:3a:de:53:ad:40:36:97:73:6b:fe:
                    3a:96:69:bc:6c:83:e1:23:7a:e1:6c:59:59:08:07:
                    92:37:f7:cf:28:0d:87:cf:24:18:2f:bf:b2:77:a3:
                    6d:17:f1:86:46:10:20:f0:a3:9c:97:a5:60:f0:68:
                    4d:69:be:33:bf:fe:81:2a:62:0c:a4:1b:6c:1f:07:
                    2c:93:f9:4a:97:a4:1f:ee:a3:43:f5:81:8b:80:fd:
                    b6:f7:c0:64:bc:a6:f9:59:76:9b:27:2b:5a:b5:ee:
                    aa:7c:16:d7:04:0a:0c:9d:c4:14:3e:1d:ef:de:7f:
                    ba:0d:5a:ea:19:ad:31:cb:58:68:8a:55:69:a0:c9:
                    ca:63:f9:63:89:1e:7a:27:06:91:87:c2:f4:b9:f1:
                    2e:be:87:27:ab:1d:fb:03:0d:b9:8e:25:42:29:66:
                    72:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DB:09:00:D8:78:ED:CE:66:0F:4B:37:71:82:87:E5:CB:F3:8A:92
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a383030303a3a2f33332d3333203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         bf:5d:a5:ce:18:b0:49:e0:b9:47:08:0c:66:09:11:de:68:da:
         6b:45:f7:ec:f0:bb:bc:dd:c5:11:dd:15:ff:15:4f:3d:d0:75:
         59:d6:02:7d:4e:a0:26:1c:3e:ca:e1:e5:f1:38:f9:ed:a1:2f:
         84:5a:12:07:e5:ac:f8:f0:b2:94:c5:53:d8:cd:d9:2d:14:d0:
         76:ef:dd:49:2b:b6:3a:00:fb:a1:f3:0a:1e:ed:88:19:93:d6:
         6f:b0:e6:3d:08:e9:70:c6:a3:8e:86:a9:04:99:94:b0:85:16:
         06:f3:5e:eb:1d:7c:a0:f9:32:18:ec:04:c8:f8:21:ce:64:3c:
         4b:b6:30:aa:74:85:41:96:45:5a:19:3d:a6:36:5c:b8:f0:c7:
         11:c6:00:2b:3d:63:fb:59:99:c8:c0:63:9a:6d:10:10:48:e5:
         5e:21:8f:55:cf:b5:34:1a:4f:0e:b2:ae:f6:00:5d:a2:31:de:
         99:4d:11:ad:b9:5b:a5:27:d0:d4:d9:da:5d:cc:aa:db:e4:84:
         9e:a1:47:7a:45:5e:90:bb:f1:f1:84:9e:ba:d2:18:65:09:28:
         a3:a5:6f:95:19:24:72:44:fc:e0:38:7f:b9:4d:92:b4:0b:2a:
         f6:98:4e:c2:35:58:cb:04:2a:02:74:de:f2:6d:9e:c9:92:7e:
         60:86:77:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 17:43:49 2024 by rpki-client on console-ams.rpki-client.org