Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SnBf8BfDZpgan8NBWSdMS11UnsQUXrGpDmjTgRbGMfP/0/323830343a386632383a3a2f33322d313238203d3e20323733343732.roa
File:                     323830343a386632383a3a2f33322d313238203d3e20323733343732.roa (raw, json)
Hash identifier:          Vl4WbUiqgGB0WQTthgUHKv9KX+O6S/8sS1LbS+RguKc=
Subject key identifier:   6B:FC:C6:24:07:A2:FE:36:80:01:B2:2B:34:A9:3C:2A:E0:D2:7D:DC
Certificate issuer:       /CN=91D31804F77F5B3F40D5BD715C57C812F835E0FA
Certificate serial:       39E49F41C8DA896318C843AC1F462E22749F9CCE
Authority key identifier: 91:D3:18:04:F7:7F:5B:3F:40:D5:BD:71:5C:57:C8:12:F8:35:E0:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D31804F77F5B3F40D5BD715C57C812F835E0FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SnBf8BfDZpgan8NBWSdMS11UnsQUXrGpDmjTgRbGMfP/0/323830343a386632383a3a2f33322d313238203d3e20323733343732.roa
Signing time:             Fri 07 Jun 2024 21:46:35 +0000
ROA not before:           Fri 07 Jun 2024 21:41:35 +0000
ROA not after:            Fri 06 Jun 2025 21:46:35 +0000
asID:                     273472
IP address blocks:        2804:8f28::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e4:9f:41:c8:da:89:63:18:c8:43:ac:1f:46:2e:22:74:9f:9c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D31804F77F5B3F40D5BD715C57C812F835E0FA
        Validity
            Not Before: Jun  7 21:41:35 2024 GMT
            Not After : Jun  6 21:46:35 2025 GMT
        Subject: CN=6BFCC62407A2FE368001B22B34A93C2AE0D27DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:65:39:5b:d6:ae:a3:c4:a6:6b:ff:0c:61:
                    1e:f9:88:00:e7:a7:e0:8a:70:7d:69:d9:dd:99:93:
                    44:2b:38:11:98:cf:1a:0d:f8:ed:ef:3b:22:cb:f4:
                    64:6f:48:74:4a:06:6d:ec:60:72:43:91:eb:54:ff:
                    3b:9d:a5:29:9f:16:d4:ca:62:0a:f7:c9:b9:30:50:
                    18:f7:24:d8:d3:6d:48:64:f6:34:fd:20:e3:24:9c:
                    9d:f6:51:4e:46:43:82:34:2a:b9:88:e1:f5:fa:73:
                    ad:ce:e1:75:7e:83:86:25:b0:e7:b2:96:1d:bb:30:
                    50:47:aa:a7:e2:d7:37:b0:07:d7:9d:26:aa:42:ea:
                    87:7e:86:05:78:7f:05:bf:1a:3b:6a:c0:f6:a2:61:
                    28:cd:1f:a9:92:99:04:6e:49:f0:cf:8b:61:2c:eb:
                    86:ca:03:28:5b:e2:a4:e2:a2:3f:45:56:85:8f:d3:
                    3a:85:50:f0:6e:68:53:71:4d:b9:bc:0e:d4:0b:61:
                    e1:63:74:be:b7:75:c5:2b:b4:b6:43:8e:8b:27:da:
                    7a:cb:c3:eb:84:65:a0:4b:7e:ec:06:89:45:33:c5:
                    c7:96:ca:6d:7c:a9:63:58:24:ca:fc:cf:2b:bb:21:
                    75:f9:3b:b5:2c:ba:62:1b:ca:41:2c:e7:bc:ce:ef:
                    b6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FC:C6:24:07:A2:FE:36:80:01:B2:2B:34:A9:3C:2A:E0:D2:7D:DC
            X509v3 Authority Key Identifier:
                keyid:91:D3:18:04:F7:7F:5B:3F:40:D5:BD:71:5C:57:C8:12:F8:35:E0:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SnBf8BfDZpgan8NBWSdMS11UnsQUXrGpDmjTgRbGMfP/0/91D31804F77F5B3F40D5BD715C57C812F835E0FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D31804F77F5B3F40D5BD715C57C812F835E0FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SnBf8BfDZpgan8NBWSdMS11UnsQUXrGpDmjTgRbGMfP/0/323830343a386632383a3a2f33322d313238203d3e20323733343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f28::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:64:ea:b2:6f:0a:47:18:aa:50:9b:9d:a2:e5:07:8e:40:da:
         f0:45:7a:97:11:9a:6a:67:04:74:c9:18:67:f5:3c:5d:eb:1d:
         e4:1f:09:e3:fb:bd:a6:d9:fc:91:fb:f5:db:8e:73:9a:03:41:
         b3:65:89:98:ec:76:9e:f1:a7:5a:f4:15:37:7b:68:07:f1:cf:
         6a:24:32:17:20:b2:0c:44:a3:b3:0c:bf:93:cd:8b:ba:44:eb:
         bd:70:f0:6e:53:a1:b2:8d:9d:10:cf:77:66:d2:98:bd:3c:b6:
         e8:dc:83:40:d8:61:01:41:f3:b0:f8:8f:46:c8:e3:7a:42:62:
         c2:57:f9:75:ff:03:02:2a:56:49:6a:ac:47:4c:7f:f7:fc:50:
         a8:cc:06:a2:0a:63:0b:6c:7b:08:e5:b2:fe:9f:5c:bb:af:97:
         df:8a:fb:d6:de:bf:6f:cb:bb:e1:fa:bb:84:76:68:fa:1e:0e:
         67:82:75:86:92:62:8d:5d:5c:83:c8:a0:8b:eb:ea:fe:be:b4:
         5e:58:ac:b1:ae:fa:9f:cf:b8:8c:a5:54:f5:f5:22:ca:fe:5a:
         aa:73:4a:91:3d:b4:90:5a:f9:bf:3c:43:0f:ff:51:d4:4b:53:
         b6:74:cc:b3:59:90:3a:a7:fb:ae:b1:66:7e:43:c1:82:3b:d4:
         50:38:99:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 06:07:22 2024 by rpki-client on console-fra.rpki-client.org