Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a633130303a3a2f34302d3430203d3e20323634393438.roa
File:                     323830343a333036343a633130303a3a2f34302d3430203d3e20323634393438.roa (raw, json)
Hash identifier:          ywr4D91u1pG397LC9KNpX5lk2M7INJsrgLV9NoPX2/8=
Subject key identifier:   64:3F:A4:EA:12:AE:63:B0:3B:11:07:C8:A0:25:14:4D:18:68:2E:30
Certificate issuer:       /CN=ADB3FE91804F34348D6CF226CFC7CD62F71E25A1
Certificate serial:       406991C79D3C0E51520A5E616E36581D675A33C2
Authority key identifier: AD:B3:FE:91:80:4F:34:34:8D:6C:F2:26:CF:C7:CD:62:F7:1E:25:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a633130303a3a2f34302d3430203d3e20323634393438.roa
Signing time:             Wed 05 Jun 2024 10:20:35 +0000
ROA not before:           Wed 05 Jun 2024 10:15:35 +0000
ROA not after:            Wed 04 Jun 2025 10:20:35 +0000
asID:                     264948
IP address blocks:        2804:3064:c100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:69:91:c7:9d:3c:0e:51:52:0a:5e:61:6e:36:58:1d:67:5a:33:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADB3FE91804F34348D6CF226CFC7CD62F71E25A1
        Validity
            Not Before: Jun  5 10:15:35 2024 GMT
            Not After : Jun  4 10:20:35 2025 GMT
        Subject: CN=643FA4EA12AE63B03B1107C8A025144D18682E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:69:fd:16:2e:91:78:55:dd:ed:7c:ca:fa:
                    ec:a0:13:22:09:09:9e:f3:50:0a:69:32:6a:70:99:
                    07:22:ad:3d:ea:03:0c:4e:2f:47:d0:0c:79:1a:27:
                    03:1b:ae:58:8c:9f:0c:4e:ff:33:45:ea:c7:7c:99:
                    06:f3:e5:13:63:7d:75:ad:59:87:6c:ef:b1:0d:9e:
                    18:c3:ef:b7:c8:bc:8f:de:70:08:cb:18:aa:b8:30:
                    0e:0e:54:29:13:74:05:15:9d:19:5c:ba:a1:f0:f4:
                    8e:17:2d:8a:d5:ea:ae:6a:e1:8d:dd:ba:39:30:ee:
                    11:29:65:21:3f:98:68:0c:96:c8:a6:74:69:65:d1:
                    45:a7:73:34:67:53:32:cb:a4:af:f6:9d:37:22:36:
                    12:30:ae:8d:e4:75:c6:e6:06:9d:44:5b:96:07:c3:
                    2a:b4:b3:6b:99:1f:e0:38:e6:a4:5b:d7:4a:c1:87:
                    93:64:57:30:19:fa:45:e1:45:96:3f:cb:15:35:83:
                    cf:92:5d:00:dc:4c:95:a3:b8:d2:ac:8f:ba:a7:5e:
                    66:76:5f:b3:69:2a:43:5c:c1:d2:30:3a:f0:44:12:
                    f7:7f:24:a9:41:72:2d:a3:3a:cc:d4:9c:30:be:1a:
                    c8:50:f8:78:c3:66:b5:cc:32:59:c0:e4:9e:f8:7d:
                    67:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3F:A4:EA:12:AE:63:B0:3B:11:07:C8:A0:25:14:4D:18:68:2E:30
            X509v3 Authority Key Identifier:
                keyid:AD:B3:FE:91:80:4F:34:34:8D:6C:F2:26:CF:C7:CD:62:F7:1E:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a633130303a3a2f34302d3430203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3064:c100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c2:fc:ae:a8:9d:ce:6f:14:40:d6:1a:f6:99:d0:92:10:68:ad:
         53:58:c1:57:82:7c:67:d0:ca:1c:9a:4e:b7:3a:cd:60:34:c0:
         f2:72:a8:14:8c:9f:1d:c0:de:ab:91:16:5a:a4:db:6c:2a:0f:
         7c:c2:b8:17:9a:21:ab:b2:9b:d8:88:15:c2:82:42:ac:cf:4b:
         d1:cf:21:85:82:a1:16:28:cb:b1:59:c5:2e:9c:61:c0:6d:2b:
         0c:5c:e1:45:9d:8c:47:41:14:2c:75:ff:ac:4e:4b:30:91:e6:
         93:70:87:3e:2e:19:5d:16:c2:69:49:bf:60:97:f1:15:91:62:
         3b:35:a1:67:49:6f:dd:02:b9:99:97:1e:40:64:30:a0:d4:13:
         34:a1:b6:4b:30:4a:80:26:65:87:58:57:1c:66:ea:7d:64:db:
         fc:99:73:04:c7:35:d5:fd:9a:1a:b2:c6:9e:79:59:7b:53:6e:
         59:b9:43:67:bb:c0:a5:8f:65:2d:13:48:7a:d0:37:a6:80:aa:
         77:f0:c5:cf:e9:04:a3:7c:ff:a5:82:40:3a:86:2b:4c:ee:20:
         d5:d9:ed:94:2b:10:04:6b:3d:61:b4:7f:57:5c:1c:cf:86:d7:
         77:b5:59:68:ed:2c:53:c1:f7:1e:50:72:ac:6f:17:b5:07:95:
         45:a9:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 21:25:27 2024 by rpki-client on console-fra.rpki-client.org