Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/323830343a363362343a3a2f33322d3438203d3e20323639333738.roa
File:                     323830343a363362343a3a2f33322d3438203d3e20323639333738.roa (raw, json)
Hash identifier:          aIiwG9a1usz0mhL3NF2qdnq1LDPK3lA+65EKEkF/QXw=
Subject key identifier:   9F:DA:A1:59:DC:53:26:49:AB:0B:0B:81:D4:0D:37:95:B6:D4:0F:21
Certificate issuer:       /CN=DBB64CCDB727E7F11F10919482DBA32E200A88AE
Certificate serial:       2502A18043B54C333ABD11451BD1555810C5A994
Authority key identifier: DB:B6:4C:CD:B7:27:E7:F1:1F:10:91:94:82:DB:A3:2E:20:0A:88:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB64CCDB727E7F11F10919482DBA32E200A88AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/323830343a363362343a3a2f33322d3438203d3e20323639333738.roa
Signing time:             Wed 03 Apr 2024 22:32:47 +0000
ROA not before:           Wed 03 Apr 2024 22:27:47 +0000
ROA not after:            Wed 02 Apr 2025 22:32:47 +0000
asID:                     269378
IP address blocks:        2804:63b4::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:02:a1:80:43:b5:4c:33:3a:bd:11:45:1b:d1:55:58:10:c5:a9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB64CCDB727E7F11F10919482DBA32E200A88AE
        Validity
            Not Before: Apr  3 22:27:47 2024 GMT
            Not After : Apr  2 22:32:47 2025 GMT
        Subject: CN=9FDAA159DC532649AB0B0B81D40D3795B6D40F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:01:8a:3f:7e:6a:90:a9:e7:cf:82:de:2b:82:
                    70:60:43:e3:5f:c7:17:14:5a:0e:48:c0:ce:e3:ee:
                    9d:14:7e:df:1e:f2:c7:04:72:bf:c1:cb:d3:bb:7a:
                    47:3e:c0:a4:7a:6d:c6:8d:b6:0c:74:d6:84:e3:b7:
                    03:c3:43:a5:3b:5c:41:a1:d0:8b:5f:25:8c:69:59:
                    85:7b:dd:72:7f:ce:05:de:4c:c8:37:eb:07:cf:8f:
                    c1:aa:95:02:a5:ef:0e:b1:60:9d:33:2c:f3:02:7a:
                    5b:92:13:9c:41:14:2d:90:97:6d:4e:c3:be:f4:9b:
                    71:8f:17:95:10:2f:1a:95:01:b6:cd:57:de:3f:c0:
                    54:fb:4d:58:29:12:26:f1:f8:8d:ed:b4:85:b9:2d:
                    08:9e:ce:da:10:93:ce:26:4c:6a:5a:ea:80:5f:72:
                    35:10:d6:41:f2:02:ac:8d:1c:25:f8:5c:ae:21:04:
                    a9:02:fd:f1:44:bc:29:c2:30:e1:65:fd:9b:43:93:
                    3f:69:0c:50:fa:88:34:09:50:5f:45:96:43:7c:0e:
                    9c:5e:c0:f6:3f:b4:18:12:0c:54:5f:9f:ea:71:6c:
                    34:7b:e9:7e:ba:6c:bb:d2:40:83:43:05:bc:a4:67:
                    72:a3:e8:84:03:23:9b:ba:c3:8e:6b:1b:bf:a6:48:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DA:A1:59:DC:53:26:49:AB:0B:0B:81:D4:0D:37:95:B6:D4:0F:21
            X509v3 Authority Key Identifier:
                keyid:DB:B6:4C:CD:B7:27:E7:F1:1F:10:91:94:82:DB:A3:2E:20:0A:88:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/DBB64CCDB727E7F11F10919482DBA32E200A88AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB64CCDB727E7F11F10919482DBA32E200A88AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/323830343a363362343a3a2f33322d3438203d3e20323639333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:c9:c8:ce:bc:87:22:7c:24:76:84:ef:12:3e:91:53:4b:0c:
         9e:6a:09:9b:49:0f:4c:bd:fc:e7:07:6c:88:ac:b9:f6:bb:98:
         c1:30:02:f9:b2:4f:0f:9f:fe:d8:f7:7c:40:5e:ae:55:75:99:
         f7:13:bb:0f:56:dc:97:cf:47:78:e3:74:aa:6a:fb:19:ad:6e:
         19:59:64:34:53:4d:c4:ac:77:e8:2d:dd:47:6d:af:d6:33:20:
         56:7c:8d:9b:76:98:51:36:fc:17:6f:ca:b3:f5:a6:4b:4e:53:
         ea:bc:dd:09:12:28:bb:e1:0a:ab:a4:b4:21:a3:86:7a:a9:c1:
         c1:35:73:d8:9d:79:31:1b:c2:12:c1:9d:05:4d:b2:28:58:ae:
         2e:c2:aa:a6:2e:55:8c:e3:1e:92:8e:58:b8:89:e1:96:43:5b:
         79:78:81:0d:c3:1d:9a:1a:98:1f:04:25:1f:ac:57:82:63:1d:
         02:d1:9a:3d:d6:ba:b1:83:0a:65:70:b9:e2:41:e9:7b:dc:2d:
         95:a3:b2:65:b6:bb:e1:dd:3b:f2:1a:8e:6a:f4:41:27:bf:40:
         14:35:ea:89:85:fd:7e:bc:f1:f1:92:61:f0:41:bf:a9:b6:b4:
         a5:e8:5e:1a:e2:53:fd:06:a7:37:0c:d4:d2:6a:4c:ec:be:11:
         b8:af:41:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 10:30:18 2024 by rpki-client on console-fra.rpki-client.org