Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a3a2f33332d3333203d3e20323637303739.roa
File:                     323830343a343764343a3a2f33332d3333203d3e20323637303739.roa (raw, json)
Hash identifier:          kdl6jXMUZDwNOsK98mJNvEif/SBXxRby9Kt/tLxHD+s=
Subject key identifier:   32:12:0B:FC:BB:71:0D:59:EA:80:7D:0B:4C:9F:4A:F1:AE:66:96:F1
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       2D4FB40A406AEA6959D0028D2EE40CE32D0D5138
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a3a2f33332d3333203d3e20323637303739.roa
Signing time:             Thu 04 Apr 2024 11:09:54 +0000
ROA not before:           Thu 04 Apr 2024 11:04:54 +0000
ROA not after:            Thu 03 Apr 2025 11:09:54 +0000
asID:                     267079
IP address blocks:        2804:47d4::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4f:b4:0a:40:6a:ea:69:59:d0:02:8d:2e:e4:0c:e3:2d:0d:51:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr  4 11:04:54 2024 GMT
            Not After : Apr  3 11:09:54 2025 GMT
        Subject: CN=32120BFCBB710D59EA807D0B4C9F4AF1AE6696F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:02:11:96:d7:79:aa:ae:5d:99:15:a7:d6:
                    7b:84:55:14:f5:68:48:0d:81:a7:a4:8b:52:26:ba:
                    49:2b:24:04:95:d9:c6:58:ca:f6:68:c5:3e:84:a0:
                    89:3b:28:10:70:0f:d0:44:ee:6c:fb:3f:6c:55:dd:
                    46:75:e9:66:7f:9e:58:ac:02:23:79:dc:f3:1c:0b:
                    8c:6d:f5:a4:03:24:50:d8:3d:44:23:8b:7c:31:9b:
                    cd:e3:48:c3:3b:27:ec:7a:91:32:3a:a3:17:de:a5:
                    4a:6c:52:c3:fe:83:d2:34:8c:4d:74:ca:7f:e9:75:
                    28:5f:23:27:c2:27:bc:e8:f8:24:ba:dc:7f:dc:33:
                    4d:38:25:c2:8d:b2:52:ef:e9:e7:39:7d:82:a7:2e:
                    47:96:58:bd:85:70:8b:a8:44:89:66:8b:98:2f:61:
                    aa:3b:93:2e:87:c8:65:ea:28:e1:18:05:a3:00:06:
                    61:f1:20:54:97:75:8d:11:55:96:2e:bf:86:dd:c3:
                    27:ec:e9:e6:65:92:85:8e:3b:ae:c0:98:4f:7a:cd:
                    c2:4d:e3:19:fe:4c:8a:7f:68:de:22:3d:8f:88:d6:
                    8c:fa:1d:e6:f7:25:ef:e3:8d:63:27:e7:49:78:99:
                    d8:ff:38:9e:23:b5:6a:49:75:c7:0d:7a:44:88:9a:
                    eb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:12:0B:FC:BB:71:0D:59:EA:80:7D:0B:4C:9F:4A:F1:AE:66:96:F1
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a3a2f33332d3333203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         a5:45:1a:c2:3c:81:10:d1:43:9c:de:95:f4:83:97:2b:6a:9c:
         9e:74:ee:49:ac:21:94:5a:39:1b:c1:fb:81:ad:45:4a:bd:8b:
         50:86:90:a0:9a:73:b5:b5:70:3c:9f:40:01:59:76:dc:7e:af:
         09:b1:fe:fb:11:2e:b2:39:7c:11:7b:36:e4:1f:1b:90:f9:1b:
         55:80:e8:ad:89:91:b8:d1:61:d3:66:8a:8a:c8:7d:68:6b:6e:
         8f:60:70:4b:f0:5a:45:08:c4:34:01:86:fa:49:9a:92:2d:af:
         cf:13:d1:38:59:a2:3f:ce:a6:5d:61:9a:ac:c4:5f:58:fc:a7:
         ab:b4:74:c9:25:12:37:ff:10:24:48:57:d8:04:c1:c3:58:a4:
         d1:f6:40:b0:b8:7f:51:ee:8d:15:78:39:88:ef:9d:7f:83:3d:
         af:4b:fc:65:d3:f5:99:44:a7:73:dc:0e:38:c9:f9:bb:d7:f7:
         9d:20:4a:05:76:bf:32:45:7f:f9:5a:0d:e8:d6:1b:04:5f:59:
         49:aa:84:b1:6e:f7:f6:31:c9:e2:21:ee:f9:1b:c0:46:64:9e:
         3a:25:7e:f8:37:84:b8:7c:92:66:6d:af:21:f0:fb:01:8e:e7:
         47:2f:52:7e:b8:a8:75:9e:90:b7:55:dd:8c:83:99:b3:7e:99:
         e1:f1:a3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 17:43:49 2024 by rpki-client on console-ams.rpki-client.org