Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a343030303a3a2f33342d3334203d3e20323639323337.roa
File:                     323830343a363137633a343030303a3a2f33342d3334203d3e20323639323337.roa (raw, json)
Hash identifier:          XATEMO7iBmI+B+jLOcjPOmmqLyG71EstvE4Vp41uAKE=
Subject key identifier:   CF:2E:5B:72:C3:91:5C:A7:91:C1:19:58:EE:92:54:F1:77:55:0D:37
Certificate issuer:       /CN=67070564D53ACB6604FA560F1E051D47A5C3F657
Certificate serial:       3DFEA850A13A48463CB74D9FF8AA445C75500E36
Authority key identifier: 67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a343030303a3a2f33342d3334203d3e20323639323337.roa
Signing time:             Thu 04 Apr 2024 03:11:59 +0000
ROA not before:           Thu 04 Apr 2024 03:06:59 +0000
ROA not after:            Thu 03 Apr 2025 03:11:59 +0000
asID:                     269237
IP address blocks:        2804:617c:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fe:a8:50:a1:3a:48:46:3c:b7:4d:9f:f8:aa:44:5c:75:50:0e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67070564D53ACB6604FA560F1E051D47A5C3F657
        Validity
            Not Before: Apr  4 03:06:59 2024 GMT
            Not After : Apr  3 03:11:59 2025 GMT
        Subject: CN=CF2E5B72C3915CA791C11958EE9254F177550D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:14:44:a4:19:0b:e2:62:89:71:ce:8d:a1:
                    33:ad:25:e2:2f:75:18:8e:45:8c:ef:fa:e5:48:10:
                    b2:db:56:1b:07:3a:c9:8a:25:72:16:84:4b:89:4c:
                    57:45:4a:cc:23:f9:87:0a:f7:d5:22:d3:15:8f:32:
                    46:3a:27:16:51:5c:81:40:f5:c6:83:c7:5b:d8:f3:
                    47:33:64:0a:a7:92:4a:8c:03:86:27:83:27:1d:e8:
                    99:af:47:c6:8a:8a:35:1a:00:47:de:2c:8a:bd:8b:
                    e9:f6:6c:83:4c:fb:da:5f:8c:96:66:11:9e:9e:13:
                    71:26:9c:1e:c4:c7:0d:d9:a5:db:a0:2f:2b:b8:87:
                    36:e0:de:ff:f5:fd:c4:53:95:cc:e4:04:5a:b4:cd:
                    06:f8:9e:cd:7c:a4:fc:30:55:66:01:0a:1c:cb:71:
                    82:fc:e2:8e:83:aa:55:61:f5:33:be:b8:8c:78:aa:
                    21:c0:bc:69:d7:4c:b0:de:07:5e:51:fd:34:c4:dc:
                    95:4a:4c:fb:1f:94:93:af:69:63:97:d9:53:6e:7c:
                    26:6c:40:2b:75:44:76:7f:c8:21:9f:6d:ed:7c:85:
                    22:7e:cc:ce:86:26:d7:c2:f5:c2:9d:29:9d:69:c2:
                    35:09:32:5d:31:85:64:2f:61:d6:46:18:ab:80:c3:
                    f7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2E:5B:72:C3:91:5C:A7:91:C1:19:58:EE:92:54:F1:77:55:0D:37
            X509v3 Authority Key Identifier:
                keyid:67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/67070564D53ACB6604FA560F1E051D47A5C3F657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a343030303a3a2f33342d3334203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:617c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         db:aa:8a:72:2c:f3:6e:ca:35:9d:69:95:eb:0c:11:e2:5c:de:
         b8:79:15:95:0f:cf:69:d9:a8:15:74:d2:df:26:22:06:83:4c:
         dc:e8:05:39:c4:ad:5c:51:eb:95:24:f3:ae:ae:39:c3:c7:cc:
         92:04:75:f8:00:f3:2d:f7:d9:b1:cc:a7:85:96:ae:b5:c2:23:
         b0:cb:b7:a4:5d:89:ee:3a:28:99:9a:e0:a1:5e:f1:dd:b5:ec:
         9f:88:e1:0a:a3:2d:50:69:2f:b4:97:01:b0:db:dc:cf:80:92:
         2c:8a:24:f5:8d:d6:10:41:7e:3a:cb:dd:e8:31:5e:4c:a8:a8:
         62:79:df:d3:69:a8:56:60:c2:cd:88:51:f9:68:5d:f2:5a:71:
         63:63:6e:3f:95:d6:92:35:fe:88:a5:c4:60:d0:c8:0b:5f:c6:
         64:2e:6f:f5:27:e7:31:fa:6a:7e:13:de:66:52:08:b8:1b:1d:
         49:c4:6b:a9:69:91:0a:e0:4c:67:6f:8a:c4:b5:32:5e:77:39:
         fb:6d:5e:33:4b:97:8b:41:b7:8e:30:b0:14:1e:f6:a2:e6:67:
         98:7f:c5:2d:3e:15:e8:d5:7d:37:ae:8f:e0:39:f5:e1:b5:6c:
         2f:a3:06:ee:6b:0d:77:5b:d4:a5:f6:99:bb:11:d3:90:eb:e0:
         ab:1b:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:55:19 2024 by rpki-client on console-fra.rpki-client.org