Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/323830343a363732383a383030303a3a2f33332d3333203d3e20323639363038.roa
File:                     323830343a363732383a383030303a3a2f33332d3333203d3e20323639363038.roa (raw, json)
Hash identifier:          Lo9IUn7KSQEEEA+qSfH8h2yM1kWE1L58dgct2HsDp10=
Subject key identifier:   9E:83:03:F7:34:D2:B9:9A:C6:FB:C3:8C:9F:03:10:23:B7:50:DB:CD
Certificate issuer:       /CN=0E455BD601128E5D432F9B2640842BE59B81B6FB
Certificate serial:       7097812ECFD9E78B333106CD4A8CCA25288D62AA
Authority key identifier: 0E:45:5B:D6:01:12:8E:5D:43:2F:9B:26:40:84:2B:E5:9B:81:B6:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E455BD601128E5D432F9B2640842BE59B81B6FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/323830343a363732383a383030303a3a2f33332d3333203d3e20323639363038.roa
Signing time:             Wed 03 Apr 2024 22:20:06 +0000
ROA not before:           Wed 03 Apr 2024 22:15:06 +0000
ROA not after:            Wed 02 Apr 2025 22:20:06 +0000
asID:                     269608
IP address blocks:        2804:6728:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:97:81:2e:cf:d9:e7:8b:33:31:06:cd:4a:8c:ca:25:28:8d:62:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E455BD601128E5D432F9B2640842BE59B81B6FB
        Validity
            Not Before: Apr  3 22:15:06 2024 GMT
            Not After : Apr  2 22:20:06 2025 GMT
        Subject: CN=9E8303F734D2B99AC6FBC38C9F031023B750DBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:21:64:1d:0f:a2:73:5f:37:e2:5b:00:36:28:
                    49:34:4c:e4:01:6b:77:7c:00:03:d1:f9:82:9e:60:
                    2e:f5:94:9f:9b:05:a5:99:9e:4d:63:59:4b:80:0f:
                    ba:f0:ac:02:a9:29:9d:b7:b3:61:c4:73:1d:3f:99:
                    2f:29:76:67:c1:42:d0:86:76:3a:01:79:b1:47:9d:
                    dd:ea:33:e2:2d:9a:c2:ac:21:4c:2b:86:ae:88:78:
                    3f:38:f7:e4:09:ee:c8:86:75:8c:ae:4e:23:6d:44:
                    cc:c6:57:a6:31:4d:e3:c5:c5:ba:8f:a2:b6:fb:81:
                    77:e3:3f:7a:24:51:e1:ae:ff:5c:4d:c4:c5:d6:ae:
                    ff:87:f3:01:0b:43:c9:c0:4a:fc:dd:7e:6d:cc:8c:
                    ec:05:88:95:63:98:9f:ab:2a:ea:63:85:76:a8:20:
                    23:9f:7b:e4:4c:59:cf:30:c7:b5:46:b7:66:66:9f:
                    d7:bd:e9:a7:72:a7:45:60:7c:5f:15:b8:98:53:8d:
                    da:eb:8c:83:cd:b2:e0:f4:ac:85:8d:cb:eb:f1:d8:
                    13:98:11:90:e9:00:ce:30:f8:2e:cf:d0:54:79:7f:
                    3e:57:f1:31:8e:2d:e3:32:7b:7a:10:e1:49:eb:09:
                    99:03:b4:f4:d1:13:cb:80:e6:16:46:b5:49:a6:99:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:83:03:F7:34:D2:B9:9A:C6:FB:C3:8C:9F:03:10:23:B7:50:DB:CD
            X509v3 Authority Key Identifier:
                keyid:0E:45:5B:D6:01:12:8E:5D:43:2F:9B:26:40:84:2B:E5:9B:81:B6:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/0E455BD601128E5D432F9B2640842BE59B81B6FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E455BD601128E5D432F9B2640842BE59B81B6FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/323830343a363732383a383030303a3a2f33332d3333203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6728:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c6:86:01:49:e2:23:f0:b2:38:f8:8a:d1:0b:c9:ad:20:26:04:
         d0:93:01:9c:10:e5:19:e2:ce:69:fc:27:c9:89:32:cc:60:a6:
         2d:39:f3:2f:e0:f0:be:33:19:36:5f:9f:d9:d7:30:f3:95:11:
         be:b7:db:84:3c:9c:12:8a:d8:54:46:e8:82:d1:de:9e:ab:50:
         31:94:b8:82:ad:a6:05:33:4d:67:e9:d3:25:b3:ae:24:fb:1d:
         15:78:81:70:f6:89:25:10:b8:dd:74:db:62:03:bf:da:67:ff:
         1b:91:07:91:25:5f:67:0c:b7:b4:86:fa:5a:11:b0:8b:49:d0:
         c5:c4:c7:3e:c9:74:ee:24:cf:33:2c:2e:b7:06:ce:cd:21:11:
         5d:96:b3:a3:9d:bb:95:1a:b8:18:5d:85:03:a4:8c:47:41:31:
         fc:6c:19:6b:b9:be:74:5d:56:d7:fc:5b:ba:40:8e:c1:9e:8e:
         9a:c8:da:4a:33:ff:5e:0c:4c:24:73:4c:70:dc:91:b5:3b:3b:
         8b:04:29:8f:21:64:88:86:9e:df:72:e8:97:06:8f:26:21:f1:
         af:97:a7:f9:ed:a1:20:03:34:dd:79:fd:b3:21:22:a6:5b:60:
         13:62:c6:f6:fa:4a:93:af:f1:50:38:9e:30:f8:f9:66:e8:17:
         f8:4f:9b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 14:50:05 2024 by rpki-client on console-ams.rpki-client.org