Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          bo5LIjnDTyyLqhlXPiEIzsbVtXi9kjp/pchsihacUR0=
Subject key identifier:   5F:5C:58:D8:3D:65:6B:4E:BF:F1:45:76:DE:79:09:52:F1:9F:39:D6
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       34FA5ED5AE4F0D75FCDF5F2E27E46AED29E15813
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Thu 04 Apr 2024 02:39:51 +0000
ROA not before:           Thu 04 Apr 2024 02:34:51 +0000
ROA not after:            Thu 03 Apr 2025 02:39:51 +0000
asID:                     265393
IP address blocks:        2804:3364:300::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fa:5e:d5:ae:4f:0d:75:fc:df:5f:2e:27:e4:6a:ed:29:e1:58:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: Apr  4 02:34:51 2024 GMT
            Not After : Apr  3 02:39:51 2025 GMT
        Subject: CN=5F5C58D83D656B4EBFF14576DE790952F19F39D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:d8:99:ea:bd:dd:7a:38:af:5a:39:5e:52:
                    8d:5d:e1:c3:8a:f5:f4:fb:e6:65:c5:9c:62:c0:20:
                    fd:7b:77:99:b2:94:08:63:7d:9d:9f:bd:42:21:35:
                    59:d3:fd:32:74:01:49:e4:d1:45:da:ea:8b:69:d3:
                    a2:3c:da:e3:9c:44:a4:84:bb:38:47:3a:1b:9d:32:
                    b5:55:59:79:68:78:1b:70:9a:e5:2c:1f:c1:91:62:
                    cd:69:d1:9b:96:01:e3:2a:f0:aa:eb:e9:48:da:1e:
                    0d:eb:31:1b:e8:b8:3b:4f:74:0f:90:e0:e1:af:c3:
                    cf:16:84:8a:a7:23:e1:52:59:8f:25:78:a8:d4:bc:
                    77:99:94:be:eb:22:9c:0e:3a:b8:91:bc:56:c2:00:
                    0c:1b:c8:a4:9e:bf:d9:83:72:6c:84:e9:14:f5:c8:
                    71:9e:b1:fe:e7:99:71:c3:d9:f2:e3:0d:ae:94:9f:
                    06:e7:69:3e:da:d0:85:22:e8:a1:01:9d:6b:4e:c0:
                    d9:5e:6e:1f:fb:00:c8:3b:5f:ee:98:5d:c7:8e:32:
                    f9:26:f7:40:41:cc:61:b1:6a:39:81:0b:5c:33:11:
                    2e:31:b3:88:b6:50:e2:17:ef:5e:13:b0:76:e8:c1:
                    93:c4:bb:da:37:c8:a6:0a:dd:2a:42:27:b3:34:5c:
                    af:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5C:58:D8:3D:65:6B:4E:BF:F1:45:76:DE:79:09:52:F1:9F:39:D6
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:7f:1d:d6:0f:1d:0e:16:9f:0d:7d:50:24:e3:22:18:66:1f:
         35:5e:75:c5:de:5a:8b:ec:c4:ff:7a:aa:1f:85:f3:e5:8e:8b:
         73:b3:a4:eb:8c:15:32:89:f5:44:3e:45:9d:f9:f8:8d:c1:a0:
         27:13:2e:26:2d:c4:90:c9:8e:39:10:19:75:b3:9a:9d:23:f0:
         5b:2d:ec:39:a3:fa:a3:a8:46:97:28:b7:a9:c3:15:41:4a:85:
         5a:c0:c8:d4:3d:33:16:e4:ab:dc:1b:2a:e0:b0:a8:78:c4:05:
         8a:cb:64:07:a9:e0:ba:46:4b:3d:44:5a:66:b4:48:d7:6a:22:
         76:61:7b:10:6e:17:87:17:e4:bf:3e:d9:2e:c3:54:ec:fe:0c:
         4a:3f:1b:64:00:e2:97:a6:c4:08:b7:75:1d:23:5a:7c:9b:6e:
         87:5c:97:98:b7:45:f4:7d:a5:21:71:22:13:57:41:5a:29:85:
         94:4f:1f:5e:62:e9:9a:05:66:01:13:bd:e1:6d:a2:a7:46:bb:
         e1:ac:f8:e8:0c:ca:4a:0e:01:19:06:cb:dd:cc:1f:0a:84:9f:
         e9:95:8e:22:dd:ca:53:94:59:bb:73:2c:c2:a1:f4:92:ab:97:
         02:91:04:7e:1b:e5:6b:72:dd:7a:6a:8c:45:4a:1e:78:cf:df:
         c1:2c:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 22:39:17 2024 by rpki-client on console-ams.rpki-client.org