Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/3/323830343a343238633a3a2f33322d3334203d3e20323637353037.roa
File:                     323830343a343238633a3a2f33322d3334203d3e20323637353037.roa (raw, json)
Hash identifier:          YZIgZAYcwgwRy5uVv22siiWCkqUtN9htPtTrUU7oW5A=
Subject key identifier:   6D:CD:1B:F2:12:D5:CF:6C:DE:5D:C9:86:A7:BE:90:52:08:25:29:93
Certificate issuer:       /CN=48E7521FBE2B2A15B1FF27FF7828C2E0997DF652
Certificate serial:       318A1D456CFD0DBC8CB004FBF121D8A8C23A0871
Authority key identifier: 48:E7:52:1F:BE:2B:2A:15:B1:FF:27:FF:78:28:C2:E0:99:7D:F6:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48E7521FBE2B2A15B1FF27FF7828C2E0997DF652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/3/323830343a343238633a3a2f33322d3334203d3e20323637353037.roa
Signing time:             Thu 04 Apr 2024 17:26:22 +0000
ROA not before:           Thu 04 Apr 2024 17:21:22 +0000
ROA not after:            Thu 03 Apr 2025 17:26:22 +0000
asID:                     267507
IP address blocks:        2804:428c::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8a:1d:45:6c:fd:0d:bc:8c:b0:04:fb:f1:21:d8:a8:c2:3a:08:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48E7521FBE2B2A15B1FF27FF7828C2E0997DF652
        Validity
            Not Before: Apr  4 17:21:22 2024 GMT
            Not After : Apr  3 17:26:22 2025 GMT
        Subject: CN=6DCD1BF212D5CF6CDE5DC986A7BE905208252993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:79:42:09:11:ba:97:41:83:3d:9d:12:26:
                    92:1b:54:97:12:99:19:6c:b9:c0:55:93:db:bb:9e:
                    76:c1:3c:89:fe:45:cc:6a:29:62:0c:bc:c6:35:57:
                    99:18:17:07:3c:09:94:e8:c6:f5:de:8a:33:6b:c7:
                    8c:2c:7c:5f:12:f5:fb:74:62:d2:4e:f1:2c:35:f0:
                    ff:a5:07:df:12:03:7f:69:2f:e4:b4:a8:3e:03:a6:
                    fb:af:6f:b2:d0:83:93:e8:49:e1:43:b2:7c:62:48:
                    22:31:fa:48:bc:1b:9d:1d:6c:ed:46:7a:f3:1c:ae:
                    22:a6:55:e3:f5:dc:75:64:c6:a5:16:d2:76:c9:81:
                    2b:8c:b8:75:43:e7:5c:2d:2d:5a:83:fd:4a:d6:a0:
                    8c:19:2b:1e:df:d3:97:2a:36:2e:ab:2a:50:4b:b1:
                    87:b7:0a:82:e1:3a:2c:e4:dd:c1:f8:4c:91:a6:6f:
                    34:62:3a:f8:fe:0e:df:ad:bf:4f:39:62:9c:23:a1:
                    0c:27:ad:47:5d:77:6f:b7:d8:21:ca:95:df:be:bf:
                    2f:ca:90:22:ca:01:01:9a:00:c9:a5:a8:6d:80:aa:
                    46:c6:1a:24:18:5b:38:70:e8:e5:22:cf:cb:ef:cf:
                    5d:f7:56:84:72:98:04:01:21:c6:f6:64:14:d4:3c:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CD:1B:F2:12:D5:CF:6C:DE:5D:C9:86:A7:BE:90:52:08:25:29:93
            X509v3 Authority Key Identifier:
                keyid:48:E7:52:1F:BE:2B:2A:15:B1:FF:27:FF:78:28:C2:E0:99:7D:F6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/3/48E7521FBE2B2A15B1FF27FF7828C2E0997DF652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48E7521FBE2B2A15B1FF27FF7828C2E0997DF652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/3/323830343a343238633a3a2f33322d3334203d3e20323637353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:428c::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:2e:27:15:ce:45:e5:4c:73:77:ce:89:48:55:f0:59:87:93:
         8b:e7:8b:54:79:ce:b7:5e:0b:4b:ae:82:55:1e:a0:07:68:c3:
         c0:07:ce:ac:4c:c5:53:27:1b:07:06:08:84:31:cb:21:49:b3:
         91:f4:df:26:21:47:d4:90:d4:9e:f6:70:a5:7d:60:37:45:9c:
         9a:f4:24:68:18:b2:ce:48:bd:d3:c8:80:8f:57:d9:35:78:cb:
         48:74:da:4d:ab:b5:fe:56:09:80:d1:21:6d:15:3e:25:ac:94:
         cf:41:c6:f1:21:f3:69:06:91:43:d8:61:f6:3b:60:cb:b3:fc:
         80:3e:0b:5c:5b:78:b3:38:ee:4e:79:14:8b:8f:d8:aa:f2:be:
         16:1c:dc:5d:67:86:8b:ab:ea:99:65:a9:27:df:83:53:4c:83:
         c3:c7:58:c4:6b:50:d9:ab:f1:13:7d:19:33:ca:27:86:6d:a9:
         49:13:2d:48:90:31:32:6d:b5:69:05:4a:29:5f:40:61:b1:d0:
         bc:ac:b5:ec:55:8a:12:e8:63:d0:f3:dd:c1:32:50:d6:7b:4e:
         55:23:29:b0:5e:d3:9a:60:ac:f2:8f:41:b6:3d:78:6f:09:d7:
         56:78:95:0b:db:ae:da:8f:cf:bc:7f:48:97:68:26:b4:95:b6:
         1a:1c:93:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 09:30:02 2024 by rpki-client on console-ams.rpki-client.org