Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a3a2f33332d3333203d3e20323639323337.roa
File:                     323830343a363137633a3a2f33332d3333203d3e20323639323337.roa (raw, json)
Hash identifier:          w18RlVkjAKbzKbhLHK3GlL/ak2Yo8RwixguPs3CvMjs=
Subject key identifier:   51:4F:07:9A:E7:F8:B6:61:B1:04:40:31:7A:7F:E3:8B:A9:63:C8:73
Certificate issuer:       /CN=67070564D53ACB6604FA560F1E051D47A5C3F657
Certificate serial:       64D7B0019436F195424277A59A239EDF258373E8
Authority key identifier: 67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a3a2f33332d3333203d3e20323639323337.roa
Signing time:             Thu 04 Apr 2024 03:11:58 +0000
ROA not before:           Thu 04 Apr 2024 03:06:58 +0000
ROA not after:            Thu 03 Apr 2025 03:11:58 +0000
asID:                     269237
IP address blocks:        2804:617c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d7:b0:01:94:36:f1:95:42:42:77:a5:9a:23:9e:df:25:83:73:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67070564D53ACB6604FA560F1E051D47A5C3F657
        Validity
            Not Before: Apr  4 03:06:58 2024 GMT
            Not After : Apr  3 03:11:58 2025 GMT
        Subject: CN=514F079AE7F8B661B10440317A7FE38BA963C873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:f7:73:d6:6f:40:5d:98:1d:43:b5:68:4f:
                    68:2b:3a:16:d4:d2:b6:52:67:76:64:7a:46:59:35:
                    36:67:35:37:11:fc:a8:13:a6:35:d5:f0:00:d3:cf:
                    48:3e:7f:03:b6:0d:14:34:43:4b:bc:83:43:da:43:
                    6f:89:8f:21:f8:06:3f:14:bf:0f:6a:46:a4:f9:a1:
                    df:45:1b:37:45:b6:a0:57:4c:ca:42:62:4d:ad:fa:
                    de:55:81:e9:72:9c:cf:65:d5:4d:2b:7c:6f:33:7d:
                    5a:e4:96:17:07:b4:68:55:17:9b:be:8b:d5:ee:59:
                    d9:54:cd:cf:67:de:2b:b4:09:14:95:38:22:41:19:
                    e9:f9:81:0e:a9:1f:c1:8d:05:47:23:a6:e5:b9:fb:
                    bf:f2:1b:fb:d8:69:35:92:1f:ec:e8:7a:96:1e:12:
                    90:a4:4d:21:0c:65:b6:59:f5:c0:49:84:4c:5c:3f:
                    2e:2b:c0:e9:b9:3c:79:0f:b6:3d:22:7f:cf:59:28:
                    4b:9f:1b:50:cb:2d:d7:15:19:6d:62:19:0f:b3:ae:
                    a8:70:68:4a:25:7d:05:e3:48:bd:aa:93:4a:72:4c:
                    40:5d:7f:1a:47:5b:ea:2a:e2:8f:3c:ac:09:2d:c3:
                    da:b4:5b:78:1b:21:50:4c:1e:5c:d0:d8:e2:ea:d9:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4F:07:9A:E7:F8:B6:61:B1:04:40:31:7A:7F:E3:8B:A9:63:C8:73
            X509v3 Authority Key Identifier:
                keyid:67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/67070564D53ACB6604FA560F1E051D47A5C3F657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a3a2f33332d3333203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:617c::/33

    Signature Algorithm: sha256WithRSAEncryption
         07:b6:9e:9c:af:79:02:b2:18:c6:e5:85:21:ec:12:5f:0e:08:
         10:99:86:a4:8a:c7:e4:d9:cf:90:f1:ce:5a:4c:60:5f:83:20:
         82:e4:05:8f:53:16:fb:c0:55:a1:f8:7c:f6:d0:d9:89:9a:cf:
         69:3e:2a:9e:9e:f2:5a:9e:a4:a8:a8:e8:1b:0b:c7:7c:50:c9:
         23:21:ea:bd:c4:81:1b:03:ae:3b:ff:d7:79:38:af:88:9b:68:
         00:96:61:c7:8d:48:aa:d9:a4:d7:bb:18:56:ea:c0:3e:11:e5:
         f8:32:b4:90:29:ed:b0:9a:a2:da:01:81:9d:b3:63:e5:72:24:
         6d:95:df:bc:2e:42:34:38:18:55:0c:b1:91:bc:b7:79:79:82:
         c6:38:4d:5c:d4:0d:3c:d3:9c:e1:d6:6c:7b:41:c0:57:9b:17:
         cc:4f:43:d2:74:36:18:74:ae:ec:3a:00:b2:56:ec:bc:27:b4:
         af:99:c0:45:ea:ab:ba:85:6b:36:1c:7c:7e:16:64:48:56:f3:
         8e:08:82:f6:eb:a0:39:0a:8f:bb:1c:30:ca:c1:55:6a:93:ec:
         10:78:3c:4c:1f:75:81:a6:25:9e:86:eb:bc:51:49:3b:24:9d:
         86:0a:5d:18:2a:cc:a3:0c:e8:45:aa:10:7b:fd:9a:ea:ed:00:
         33:13:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:55:19 2024 by rpki-client on console-fra.rpki-client.org