Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a3a2f33322d3438203d3e203631373236.roa
File:                     323830343a316236383a3a2f33322d3438203d3e203631373236.roa (raw, json)
Hash identifier:          /MRiVHVYHuON1ZLhdH6FegQv+nc4CDgyg8clqnnj3QA=
Subject key identifier:   BD:1D:86:39:0D:9A:63:81:E5:B5:91:B6:2D:DB:36:E2:45:32:93:0E
Certificate issuer:       /CN=31913C696443B8596EC7722D368B4749C287A025
Certificate serial:       1E3F5672B4EC976B5420844EA13BBF60C15E41D9
Authority key identifier: 31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a3a2f33322d3438203d3e203631373236.roa
Signing time:             Thu 04 Apr 2024 03:27:35 +0000
ROA not before:           Thu 04 Apr 2024 03:22:35 +0000
ROA not after:            Thu 03 Apr 2025 03:27:35 +0000
asID:                     61726
IP address blocks:        2804:1b68::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3f:56:72:b4:ec:97:6b:54:20:84:4e:a1:3b:bf:60:c1:5e:41:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31913C696443B8596EC7722D368B4749C287A025
        Validity
            Not Before: Apr  4 03:22:35 2024 GMT
            Not After : Apr  3 03:27:35 2025 GMT
        Subject: CN=BD1D86390D9A6381E5B591B62DDB36E24532930E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8b:2f:05:c6:4d:2b:27:39:91:ca:fc:92:58:
                    68:85:1b:3d:bd:26:62:40:ce:ce:77:18:66:32:f8:
                    d8:c1:ec:a3:20:e2:c1:cb:1a:83:09:5c:36:3f:14:
                    b9:11:3c:f2:da:9e:cf:d7:0d:14:f7:7e:84:a4:46:
                    a8:1e:6c:bf:95:31:dc:16:1c:87:f4:a5:ca:66:2b:
                    b8:82:5c:30:60:31:cd:7a:33:7f:7a:cb:e1:05:73:
                    0a:14:ed:f8:1f:c7:c4:46:68:d4:4c:55:75:0f:42:
                    ad:59:ed:bc:04:37:16:8f:f6:e0:92:a7:ed:be:ab:
                    60:f7:d1:42:3f:09:0b:87:34:76:c8:e0:df:64:d3:
                    b2:0d:83:56:65:4d:df:c9:ba:39:e7:f8:4e:42:4c:
                    c5:d8:b5:e3:dd:43:88:29:d4:71:4c:a3:51:dc:35:
                    51:4c:5b:5c:46:9f:a6:0e:2c:91:92:fb:3c:05:ba:
                    20:44:de:27:83:09:31:51:dc:81:69:13:71:87:be:
                    17:d8:6a:e7:22:1e:af:a2:8d:a2:ab:f4:b4:21:9c:
                    c1:bb:cd:c2:d4:6b:07:43:4b:64:88:c4:5d:ea:bd:
                    43:17:96:26:f0:6c:cb:83:3d:e6:38:65:fd:d3:2d:
                    03:71:ab:16:57:d8:28:dd:92:2f:fe:30:80:74:cd:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1D:86:39:0D:9A:63:81:E5:B5:91:B6:2D:DB:36:E2:45:32:93:0E
            X509v3 Authority Key Identifier:
                keyid:31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a3a2f33322d3438203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:38:15:80:ad:0f:5f:3a:86:fd:ae:4f:32:b1:27:ab:72:
         f9:1a:8e:4f:e4:91:37:9a:67:72:38:ee:8f:bb:91:1d:cd:a9:
         e0:7b:e9:1c:8a:fa:30:7e:e9:86:e3:8b:be:7d:cc:29:6d:c0:
         ff:da:3f:87:88:fa:be:61:bc:f5:39:5a:3a:77:a3:67:d9:0d:
         76:e7:3f:f0:4a:49:78:39:38:4d:dc:47:fb:66:38:22:38:25:
         7e:ca:6e:4a:51:8f:f6:9c:09:a9:eb:a0:0b:e6:c3:66:74:29:
         16:41:bb:58:22:6a:b0:ce:b8:3c:51:89:0f:e7:98:56:1e:65:
         ae:26:e3:99:91:58:ef:ab:16:db:e5:eb:0b:81:89:dc:60:5f:
         53:a7:e3:6f:e9:44:bf:8c:c5:6f:88:fc:8d:99:6c:0e:c4:4a:
         24:27:e8:2f:e3:fc:02:49:85:e5:b8:8d:9e:ab:94:5a:a4:54:
         fa:f0:0d:38:3e:4f:f7:c6:53:46:96:46:3f:ad:54:78:8a:27:
         87:5e:d6:11:16:7f:1a:d6:eb:66:17:1f:4e:27:84:bc:8d:51:
         d5:58:b7:dc:a6:c4:3a:f6:77:69:35:22:95:3c:22:94:50:23:
         2e:c2:60:7e:cd:5a:9f:10:bb:8b:4d:d9:25:48:1b:af:b8:b2:
         c1:8f:6a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 09:26:57 2024 by rpki-client on console-fra.rpki-client.org