Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          lf2b5K3h8SRN5p/qGhX+KQmLSVwolKH1oC0nc6B3ddw=
Subject key identifier:   91:C5:89:51:2E:B0:27:80:F3:8E:38:88:2B:EA:ED:54:D5:48:5E:B8
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       01C768E5414C75F6748DC7A5DF7D8042F61E8818
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Thu 04 Apr 2024 02:39:49 +0000
ROA not before:           Thu 04 Apr 2024 02:34:49 +0000
ROA not after:            Thu 03 Apr 2025 02:39:49 +0000
asID:                     265393
IP address blocks:        2804:3364:500::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c7:68:e5:41:4c:75:f6:74:8d:c7:a5:df:7d:80:42:f6:1e:88:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: Apr  4 02:34:49 2024 GMT
            Not After : Apr  3 02:39:49 2025 GMT
        Subject: CN=91C589512EB02780F38E38882BEAED54D5485EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:60:7d:cf:d2:6c:fc:1e:24:e5:46:c5:a2:
                    73:ba:8c:1e:6e:4d:fd:f5:d1:47:33:57:11:7c:37:
                    2a:04:bd:a1:c6:01:90:4c:4a:46:f6:53:16:b3:f0:
                    6d:89:4c:59:33:f7:e7:4e:4c:56:2d:dd:4f:11:86:
                    bf:73:54:5b:00:90:cd:77:69:3b:b6:ef:30:e3:1f:
                    5e:64:aa:3e:7e:cc:17:3a:4b:87:d6:33:9d:37:0a:
                    0c:22:19:dd:05:b7:c0:73:60:36:d3:5a:35:87:de:
                    76:97:9d:7b:8f:94:d7:0e:27:e4:77:fe:05:b8:bc:
                    88:d2:e5:e7:b2:39:d0:5e:0d:a8:aa:0e:2f:2b:5e:
                    97:ec:dc:41:a9:af:e9:7b:b1:da:3b:7f:7d:86:f4:
                    f2:61:18:3c:7f:84:5c:f0:35:5b:d1:47:9d:c6:d5:
                    3b:23:74:79:5b:f9:79:81:8f:12:6d:5e:72:74:ca:
                    b1:f4:4d:af:ba:9b:80:fb:27:1d:4f:6d:8a:33:13:
                    42:d8:bd:85:12:2a:a4:c2:1f:cc:2c:6f:d3:46:96:
                    68:c8:1a:97:54:d5:0a:c8:b9:41:9e:84:fc:e5:c5:
                    b4:5e:81:98:db:2e:de:cf:c5:f4:b2:1e:4f:c3:33:
                    11:7a:5d:e0:da:7e:54:65:f5:37:f0:55:9d:a4:2d:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C5:89:51:2E:B0:27:80:F3:8E:38:88:2B:EA:ED:54:D5:48:5E:B8
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:1b:c0:1c:ac:e8:0f:5f:66:5f:52:f0:18:51:fe:0b:6a:
         86:7f:95:03:89:fb:ce:f7:ef:7a:f8:ff:20:d9:3b:09:55:81:
         fb:70:78:0e:bb:53:3c:03:08:c0:0f:cd:4f:57:e3:a8:b0:f9:
         c0:47:dc:df:10:cf:75:1d:3d:a8:95:f5:10:d4:3c:17:31:ab:
         3f:af:7b:50:f1:da:6c:aa:a0:4f:bf:56:a2:b5:14:c3:bd:03:
         60:86:c7:e5:f5:96:e6:39:dd:60:7e:fb:f9:7e:4e:f6:05:28:
         2c:5d:df:cd:e6:f9:71:6a:73:39:c5:78:d2:16:4b:fc:85:b4:
         7f:71:44:16:2d:9a:84:51:dc:ca:c4:71:71:64:14:34:8a:19:
         df:db:d4:d9:14:61:7e:ee:f4:68:3a:5d:59:ff:aa:da:36:ba:
         57:33:2b:37:af:f1:a2:fc:b8:b0:82:76:b8:17:2d:9b:04:59:
         aa:fc:b4:f9:e9:e3:d7:5f:1e:ef:e1:fe:54:a9:92:93:e4:a3:
         2e:7c:f6:b6:59:6a:0b:07:3e:56:77:d9:fe:7d:20:00:23:d8:
         71:b3:17:14:95:db:80:c5:46:0c:bb:9e:2c:1a:5d:96:b5:37:
         a6:59:f3:b0:d9:7e:9f:c7:59:0e:59:2d:5a:ed:2c:e9:0e:03:
         d7:fd:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:57:57 2024 by rpki-client on console-fra.rpki-client.org