Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a3a2f33342d3334203d3e20323637303739.roa
File:                     323830343a343764343a3a2f33342d3334203d3e20323637303739.roa (raw, json)
Hash identifier:          V3Erh8/Da8ZXe0QkgWHCcgwY2evYZQqzzop5a/LYu8o=
Subject key identifier:   14:64:37:91:48:63:FA:CC:99:7E:F9:A2:7D:4F:7A:F0:E4:D0:0C:CE
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       555F79D22887EAC7DE018A1C1090F5D96553B6D1
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a3a2f33342d3334203d3e20323637303739.roa
Signing time:             Thu 04 Apr 2024 11:09:51 +0000
ROA not before:           Thu 04 Apr 2024 11:04:51 +0000
ROA not after:            Thu 03 Apr 2025 11:09:51 +0000
asID:                     267079
IP address blocks:        2804:47d4::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5f:79:d2:28:87:ea:c7:de:01:8a:1c:10:90:f5:d9:65:53:b6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr  4 11:04:51 2024 GMT
            Not After : Apr  3 11:09:51 2025 GMT
        Subject: CN=146437914863FACC997EF9A27D4F7AF0E4D00CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:f1:a7:9d:74:75:ee:c1:bd:7b:44:41:f4:
                    e8:5a:54:74:bf:50:9f:10:91:94:b1:ad:e5:ff:b8:
                    82:d3:c3:ec:0a:ff:68:d2:eb:2d:33:74:54:99:2b:
                    95:fe:7e:6a:d9:58:6a:88:6a:d2:e4:75:85:cd:7c:
                    e2:1a:7f:5f:f9:0b:e5:a7:dd:67:fe:f4:d4:35:51:
                    f8:70:7e:b2:52:50:aa:14:7b:b3:2b:07:ef:5f:14:
                    6c:bc:59:d5:86:fa:11:62:05:48:77:49:3b:c3:a9:
                    9f:4f:b6:95:61:e9:cc:01:b0:4d:d8:c3:93:e6:0c:
                    b8:df:2c:44:bd:2a:2b:15:9b:13:da:e3:70:06:17:
                    1c:7e:3e:92:66:da:78:be:7b:85:06:5f:c7:87:d0:
                    08:cf:48:8c:ca:32:6a:63:1c:66:10:c8:8b:8f:95:
                    01:33:99:c6:8a:44:5a:d1:29:28:c7:98:16:16:e6:
                    bc:14:ca:04:39:e8:c9:20:9b:67:7c:38:74:85:51:
                    ce:f6:cf:cf:0f:02:10:db:46:38:45:9d:f4:9a:35:
                    48:3c:c0:cf:bf:2b:25:2b:04:00:33:b2:22:4e:09:
                    cd:2e:c6:d0:20:c3:0f:c9:cc:fc:a0:fe:e3:b7:3f:
                    ca:07:6b:ce:dc:2e:ae:27:79:71:69:f9:5b:e7:44:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:64:37:91:48:63:FA:CC:99:7E:F9:A2:7D:4F:7A:F0:E4:D0:0C:CE
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a3a2f33342d3334203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4::/34

    Signature Algorithm: sha256WithRSAEncryption
         32:87:b6:4c:7f:1b:1f:1c:07:78:84:0c:eb:21:72:8e:7e:08:
         ab:27:98:8d:8a:a4:55:85:08:c1:b9:cb:79:3f:3b:21:02:1b:
         ce:e0:56:aa:81:34:89:6c:24:5e:a2:4f:1a:9b:45:03:bd:95:
         96:50:e4:c4:82:08:cc:02:c4:e8:53:fa:1c:89:c6:a8:de:28:
         1c:d1:04:14:90:1a:6a:54:57:c0:aa:57:cc:d6:e7:53:9d:3b:
         b3:5f:cc:d8:b6:89:05:47:2b:df:2e:b1:0c:e2:72:ed:cd:3e:
         0c:43:b5:44:19:6c:50:61:d9:b7:42:12:da:36:76:b0:8e:98:
         5c:ae:8b:ac:68:e9:1d:35:b8:48:b7:8a:dd:4e:29:2e:d8:97:
         d5:41:dd:ed:5c:d9:67:3d:a6:07:5c:d3:ef:ed:2b:9b:e8:d5:
         cd:1e:1f:c5:1e:df:71:54:23:80:11:3c:8b:24:e2:cf:12:a5:
         98:40:90:78:75:c7:c7:d5:7a:84:b0:c2:85:72:ef:14:aa:a3:
         e6:1b:4d:7e:0f:34:d5:e2:5a:25:58:5c:b9:62:e5:ae:52:2a:
         a0:d3:6e:66:41:09:11:00:c9:75:8e:91:e9:cb:d4:bc:22:b2:
         19:9c:db:6b:01:67:0e:f8:f5:76:b7:2d:49:70:ae:28:f6:4c:
         e2:bf:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 16:43:14 2024 by rpki-client on console-fra.rpki-client.org