Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a3a2f33322d3332203d3e20323637303739.roa
File:                     323830343a343764343a3a2f33322d3332203d3e20323637303739.roa (raw, json)
Hash identifier:          31NmVCPdpGFH4cVnAeSewkldIkE7LVCQhV0/rwU5Fcs=
Subject key identifier:   15:5B:20:2E:A8:C5:86:96:34:92:EF:72:4B:2A:24:F2:34:1F:8F:E2
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       1E3D7BCA154785C41B64F7C3388B3BBD489A6324
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a3a2f33322d3332203d3e20323637303739.roa
Signing time:             Thu 04 Apr 2024 11:09:54 +0000
ROA not before:           Thu 04 Apr 2024 11:04:54 +0000
ROA not after:            Thu 03 Apr 2025 11:09:54 +0000
asID:                     267079
IP address blocks:        2804:47d4::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3d:7b:ca:15:47:85:c4:1b:64:f7:c3:38:8b:3b:bd:48:9a:63:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr  4 11:04:54 2024 GMT
            Not After : Apr  3 11:09:54 2025 GMT
        Subject: CN=155B202EA8C586963492EF724B2A24F2341F8FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:02:38:16:63:53:c4:8a:2c:bb:f1:a7:3f:
                    84:47:d5:41:6a:c1:c8:03:2f:b0:51:1e:c8:21:b0:
                    fe:32:9f:47:d9:6c:3b:0f:d4:d0:5b:05:7b:58:3f:
                    76:b7:7f:1f:f8:59:e9:bb:60:68:3d:34:1a:dc:12:
                    f1:9e:f1:a3:66:62:a5:53:3b:b5:a6:4b:87:72:ab:
                    b0:80:7c:6c:df:cf:b3:2a:ac:09:70:1c:e7:ec:91:
                    83:2b:a7:76:55:74:d1:5c:f0:cd:fa:8a:b8:e4:7d:
                    c2:a5:6e:2b:b3:1d:46:45:c2:d6:d2:a3:65:b7:85:
                    42:c7:cd:75:43:59:96:a9:24:03:a6:a6:8c:b1:50:
                    d5:25:b4:d7:c8:d0:9b:c7:fd:2a:64:20:8f:0d:3f:
                    d4:e9:ba:1d:e5:5b:86:fa:3f:b9:a1:27:4d:cb:d3:
                    5d:7a:6c:66:8b:74:f5:61:3a:3d:15:a2:a4:97:bb:
                    69:b7:f6:f1:9c:71:77:11:3b:0b:00:75:06:5b:47:
                    fb:98:05:1d:b8:61:64:63:61:cf:ff:86:b4:1a:46:
                    27:f8:b0:4d:2a:ce:31:3a:e5:db:77:f3:79:45:27:
                    b6:20:8b:77:36:93:00:89:a7:be:ac:a1:e5:51:8b:
                    61:81:c5:f9:7e:d8:7c:4e:af:21:7a:99:d6:7c:a6:
                    ff:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5B:20:2E:A8:C5:86:96:34:92:EF:72:4B:2A:24:F2:34:1F:8F:E2
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a3a2f33322d3332203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:7b:1d:e4:3a:3f:c9:a2:33:13:31:9b:d5:9b:d1:0c:aa:f0:
         64:01:2a:83:8f:bb:f9:4c:5c:0f:9f:e7:d9:72:eb:0e:8b:e5:
         53:e5:f4:4f:78:af:b3:e7:02:cc:92:b9:02:a3:96:d6:6f:40:
         4a:e7:dd:a9:c0:c8:e7:85:9e:8a:25:94:0d:4b:01:3e:6c:2c:
         9b:d4:38:0f:f9:0b:6d:43:6f:fa:ce:29:ae:0d:ea:ba:a4:83:
         9d:b9:d7:76:e4:b5:99:54:d7:d5:f0:a3:1c:1e:6a:9b:f9:dc:
         71:9e:ff:2b:be:2c:e8:ba:c0:5a:da:7a:15:58:ee:c0:2c:47:
         b5:99:b1:70:78:14:40:6f:1d:c3:8d:96:d8:e0:b6:5c:11:03:
         e1:c9:b3:ea:cf:dd:a0:b9:54:f6:b5:81:4e:74:e9:17:d6:24:
         03:ae:da:9c:7f:bc:a7:50:2d:57:46:3e:08:eb:49:6d:4d:bd:
         5c:54:33:63:5f:e9:c6:fb:9e:a2:ca:8e:dd:5a:64:78:f9:f7:
         6c:7c:5f:5c:57:ae:ff:00:33:11:5a:12:d4:8b:db:7f:02:01:
         d6:48:b7:78:58:a6:8a:50:7b:3a:96:79:8e:ee:b5:f9:8a:2b:
         5d:aa:08:e6:3b:ed:82:d4:20:85:c7:1e:43:ab:b9:95:db:b3:
         72:48:99:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 16:43:14 2024 by rpki-client on console-fra.rpki-client.org