Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a3a2f33332d3333203d3e20323632333736.roa
File:                     323830343a313064343a3a2f33332d3333203d3e20323632333736.roa (raw, json)
Hash identifier:          mffZ75XRTd8PSbc4s+2prfag5W5LJ7jQ91/Glv6hU2A=
Subject key identifier:   29:4F:0A:3B:4A:C8:B7:E7:9C:85:A0:31:06:B4:B1:82:4A:67:FA:7C
Certificate issuer:       /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial:       0467F7FFA2B89EB927190B4248E475AE6C477C9D
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a3a2f33332d3333203d3e20323632333736.roa
Signing time:             Tue 04 Jun 2024 17:34:56 +0000
ROA not before:           Tue 04 Jun 2024 17:29:56 +0000
ROA not after:            Tue 03 Jun 2025 17:34:56 +0000
asID:                     262376
IP address blocks:        2804:10d4::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:67:f7:ff:a2:b8:9e:b9:27:19:0b:42:48:e4:75:ae:6c:47:7c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Validity
            Not Before: Jun  4 17:29:56 2024 GMT
            Not After : Jun  3 17:34:56 2025 GMT
        Subject: CN=294F0A3B4AC8B7E79C85A03106B4B1824A67FA7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:00:f2:f7:1a:ea:54:e1:4a:d3:6c:8e:c6:
                    be:d9:ee:cd:27:19:00:45:06:68:f2:00:d4:e7:61:
                    81:14:a5:37:d6:b7:bf:76:47:c1:a9:2c:dc:a8:ac:
                    c1:b6:60:92:a9:48:a9:d5:a7:9b:2b:85:b0:5f:5e:
                    44:cf:7d:33:76:a9:55:f4:8c:2c:75:9f:66:e4:0f:
                    54:2c:53:40:31:f1:34:91:0d:ad:e6:00:d5:84:19:
                    cb:6e:3f:26:97:62:ea:64:04:de:57:21:27:c5:01:
                    9c:90:51:60:59:00:bf:0b:0e:95:f9:f0:b7:ee:58:
                    b9:3f:07:0b:25:7c:82:89:d7:a5:e1:7f:7c:a8:cd:
                    de:c9:1b:80:77:78:36:8e:1b:fa:6c:84:1d:b4:89:
                    2e:c5:e4:74:88:17:8f:41:ac:f3:80:9c:38:30:a7:
                    ec:c6:aa:04:15:2a:84:b3:9b:3c:05:12:5a:e5:1b:
                    07:ec:d3:69:83:b6:76:52:d1:cc:51:94:8e:ce:49:
                    9e:c8:2a:f5:93:53:9b:57:d9:a6:89:9f:09:fd:78:
                    a9:1e:a0:fe:38:fc:e6:45:0a:79:a1:67:08:da:95:
                    84:76:94:b8:bc:4f:af:10:e0:16:9b:98:14:6a:ff:
                    44:84:88:45:7d:55:cc:20:95:8f:63:a7:46:1d:e0:
                    c5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4F:0A:3B:4A:C8:B7:E7:9C:85:A0:31:06:B4:B1:82:4A:67:FA:7C
            X509v3 Authority Key Identifier:
                keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a3a2f33332d3333203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         b5:3d:17:03:8b:58:1e:54:67:0d:3b:ad:27:0a:8d:1a:eb:59:
         5d:3d:4e:bb:f3:1a:6b:3c:70:5a:b4:c1:7f:5e:04:74:1d:da:
         4f:22:2d:72:12:b7:6f:0c:f6:5c:8e:03:b6:a2:3b:09:05:bb:
         7b:68:86:58:46:41:35:c2:86:12:34:47:e1:ab:51:f3:99:65:
         94:22:cb:7f:6d:a3:c7:77:da:bd:77:c5:c2:e7:86:e9:81:30:
         94:d9:1b:22:ed:e9:9b:7e:f9:bc:c1:5f:3d:bf:24:f9:af:4e:
         b7:fa:7f:67:12:5c:c3:7e:32:18:f9:4a:18:ce:81:50:45:dd:
         81:44:06:a5:f3:1e:b3:03:6e:db:24:7c:5b:af:49:2c:48:25:
         21:b6:a5:c9:ad:eb:55:9d:15:08:df:cf:a0:ca:31:83:6e:db:
         01:f7:1a:da:63:eb:e8:9d:08:cf:f5:98:23:00:bd:35:5b:fa:
         2d:d2:80:82:cc:f9:bb:9c:b8:89:03:d0:34:fc:48:0f:b7:92:
         d7:83:30:d6:31:9a:7e:fe:20:85:83:2b:68:c3:75:ab:be:17:
         b8:cf:3f:38:f2:ff:8d:d7:d5:13:06:8c:7e:d3:09:6f:1f:e9:
         57:62:ab:68:77:b7:ed:51:9f:7c:83:f2:b7:2c:ed:b6:96:12:
         c2:50:24:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 04:39:20 2024 by rpki-client on console-ams.rpki-client.org