Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a333833633a3a2f33322d3332203d3e203532363031.roa
File:                     323830343a333833633a3a2f33322d3332203d3e203532363031.roa (raw, json)
Hash identifier:          T8/Zh6P7cPhJxLqL9g1nKEhz7i0KCVjL/8nsr9laQ/c=
Subject key identifier:   BB:99:52:F0:15:91:E7:C2:6C:A2:28:E0:28:EE:41:52:3D:50:B1:68
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       147BFA6C37649E1A90C5E71B3BC995BECF01CC23
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a333833633a3a2f33322d3332203d3e203532363031.roa
Signing time:             Mon 29 Jul 2024 15:58:46 +0000
ROA not before:           Mon 29 Jul 2024 15:53:46 +0000
ROA not after:            Mon 28 Jul 2025 15:58:46 +0000
asID:                     52601
IP address blocks:        2804:383c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7b:fa:6c:37:64:9e:1a:90:c5:e7:1b:3b:c9:95:be:cf:01:cc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:46 2024 GMT
            Not After : Jul 28 15:58:46 2025 GMT
        Subject: CN=BB9952F01591E7C26CA228E028EE41523D50B168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:2f:c2:bf:b1:dc:18:40:a6:a1:55:a4:83:
                    46:22:4a:28:bc:ad:49:28:5c:30:5d:dd:2b:a4:eb:
                    fc:7c:4f:75:e7:0a:7f:b1:97:18:4f:4a:3f:ce:58:
                    b0:c1:93:19:8c:27:82:3b:f9:95:e3:3b:47:33:f0:
                    d3:c3:5d:62:21:06:e7:87:98:59:01:d8:22:86:54:
                    65:78:c5:2e:2b:41:d5:db:89:f7:6e:1d:1d:c3:26:
                    d7:37:fc:58:39:b9:c6:90:24:8d:5f:8c:ed:89:06:
                    ae:d9:3e:33:bd:f3:2b:44:67:01:cc:24:68:fe:51:
                    aa:6b:41:84:f2:d8:f6:ad:3e:16:ef:8a:e3:38:51:
                    e6:df:50:f1:66:34:bb:5d:e0:2e:04:2e:1b:03:c6:
                    46:db:16:fc:21:ea:8a:7c:3d:71:52:51:40:c7:d6:
                    58:2f:3b:ec:55:76:00:46:8f:c4:c8:02:71:90:80:
                    53:b0:ca:d2:f2:26:eb:2b:8c:33:fa:7d:ab:1f:59:
                    2e:ac:a6:53:76:e8:39:0f:84:35:ab:87:3f:f9:24:
                    4d:fb:04:b6:86:9b:e2:0e:06:f5:a2:f0:7b:38:d4:
                    8a:7b:38:23:f3:6b:cd:8a:ae:0c:2e:a5:6f:e9:f4:
                    e0:2f:9c:44:58:e6:ab:96:e6:64:67:20:24:78:e5:
                    d5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:99:52:F0:15:91:E7:C2:6C:A2:28:E0:28:EE:41:52:3D:50:B1:68
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a333833633a3a2f33322d3332203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:383c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:2c:ac:40:a6:0b:7f:54:d8:10:a6:c7:96:8a:c8:69:49:
         0f:95:79:0a:8c:23:a0:cf:87:6b:20:41:61:6c:f9:05:c2:61:
         96:89:65:07:5c:72:28:fc:c2:21:b0:f0:e5:11:21:6c:82:71:
         3f:b4:48:64:df:1f:55:2c:3a:e2:74:74:77:97:08:5c:60:05:
         da:64:cb:35:36:6b:53:06:bc:58:0f:70:8d:92:30:a2:8c:35:
         e5:f4:a1:5b:4c:9b:ed:7d:db:ae:7f:24:0a:ac:b1:a3:c2:f0:
         7d:b8:4c:bc:09:41:74:ca:a7:ef:5d:61:76:51:81:0b:79:7d:
         e0:e0:af:98:dc:9c:14:d9:71:dc:f3:fe:76:85:64:ff:e2:31:
         ba:e8:75:94:a9:20:29:b7:c2:8f:56:42:a3:9a:d1:74:4f:4c:
         e1:ce:da:f0:8e:4a:d1:87:bb:ab:47:9e:27:60:45:6e:dd:8d:
         df:e0:30:d5:79:00:9d:83:5f:7b:4c:3f:1c:44:9a:89:fc:f9:
         82:6e:51:d4:1b:01:f1:ca:37:88:86:35:60:23:8c:97:9f:ad:
         8f:c9:f6:fa:86:1f:96:5f:77:b9:87:9b:ae:bc:3d:f1:ac:b8:
         ca:cb:61:01:de:30:07:e0:c5:34:e5:7c:0f:1e:7b:5b:26:55:
         fb:1b:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 21:29:17 2024 by rpki-client on console-fra.rpki-client.org