Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/323830343a373538343a3a2f33322d3438203d3e20323631303532.roa
File:                     323830343a373538343a3a2f33322d3438203d3e20323631303532.roa (raw, json)
Hash identifier:          gNPgML598aaiX9LXsCUsAxzr3iBUYt0lqf9IJ1MJzFk=
Subject key identifier:   27:E3:A5:73:7C:DC:13:0C:C7:D5:42:83:0F:0E:89:04:B7:E7:E9:AA
Certificate issuer:       /CN=B04A452EB38A02D7F3654B584B9EB5D982A399BE
Certificate serial:       3E0D6724F0D1645FBC09882B1AD8E47D6E702F67
Authority key identifier: B0:4A:45:2E:B3:8A:02:D7:F3:65:4B:58:4B:9E:B5:D9:82:A3:99:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04A452EB38A02D7F3654B584B9EB5D982A399BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/323830343a373538343a3a2f33322d3438203d3e20323631303532.roa
Signing time:             Tue 02 Jul 2024 18:56:19 +0000
ROA not before:           Tue 02 Jul 2024 18:51:19 +0000
ROA not after:            Wed 02 Jul 2025 18:56:19 +0000
asID:                     261052
IP address blocks:        2804:7584::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0d:67:24:f0:d1:64:5f:bc:09:88:2b:1a:d8:e4:7d:6e:70:2f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04A452EB38A02D7F3654B584B9EB5D982A399BE
        Validity
            Not Before: Jul  2 18:51:19 2024 GMT
            Not After : Jul  2 18:56:19 2025 GMT
        Subject: CN=3082010A0282010100D0F4CA93BF07587A4D4E9285948B4867A535201348CB00DB30C1A6D2C4D203B6B7DC08A36DFD4A1878CF9E2FA5FAAB053351C139EDC3140FC8060699816BB2958CAC9D8793EAB42D824D9BCE3062A7D6318836A7BDC1EE853DFCD5FB674B1FA51C70166DE754164732CCC6CF5DF2184DA8B122899E5A6BBB42AC830BF64980DA4C2D5F72BD573986FF21C45DCCFFFFDE28B815A73D88238878920035805EC774A8EC6AB89C88453C1CDB97B80A5684EB7BDA7A8D0A9A1CC7720FD0A1DDD52C01B706C293278010A4BCE89F64EE6D171F55DA8AE64954F571AA02FFC0C459A9D3AB9C552696BD3C52041C0ECDC86823AFD48AAAB51D29C88BA32B574DCD354CAF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f4:ca:93:bf:07:58:7a:4d:4e:92:85:94:8b:
                    48:67:a5:35:20:13:48:cb:00:db:30:c1:a6:d2:c4:
                    d2:03:b6:b7:dc:08:a3:6d:fd:4a:18:78:cf:9e:2f:
                    a5:fa:ab:05:33:51:c1:39:ed:c3:14:0f:c8:06:06:
                    99:81:6b:b2:95:8c:ac:9d:87:93:ea:b4:2d:82:4d:
                    9b:ce:30:62:a7:d6:31:88:36:a7:bd:c1:ee:85:3d:
                    fc:d5:fb:67:4b:1f:a5:1c:70:16:6d:e7:54:16:47:
                    32:cc:c6:cf:5d:f2:18:4d:a8:b1:22:89:9e:5a:6b:
                    bb:42:ac:83:0b:f6:49:80:da:4c:2d:5f:72:bd:57:
                    39:86:ff:21:c4:5d:cc:ff:ff:de:28:b8:15:a7:3d:
                    88:23:88:78:92:00:35:80:5e:c7:74:a8:ec:6a:b8:
                    9c:88:45:3c:1c:db:97:b8:0a:56:84:eb:7b:da:7a:
                    8d:0a:9a:1c:c7:72:0f:d0:a1:dd:d5:2c:01:b7:06:
                    c2:93:27:80:10:a4:bc:e8:9f:64:ee:6d:17:1f:55:
                    da:8a:e6:49:54:f5:71:aa:02:ff:c0:c4:59:a9:d3:
                    ab:9c:55:26:96:bd:3c:52:04:1c:0e:cd:c8:68:23:
                    af:d4:8a:aa:b5:1d:29:c8:8b:a3:2b:57:4d:cd:35:
                    4c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E3:A5:73:7C:DC:13:0C:C7:D5:42:83:0F:0E:89:04:B7:E7:E9:AA
            X509v3 Authority Key Identifier:
                keyid:B0:4A:45:2E:B3:8A:02:D7:F3:65:4B:58:4B:9E:B5:D9:82:A3:99:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/B04A452EB38A02D7F3654B584B9EB5D982A399BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04A452EB38A02D7F3654B584B9EB5D982A399BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/323830343a373538343a3a2f33322d3438203d3e20323631303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7584::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:a5:6b:82:e3:27:91:93:90:7a:91:78:8a:b6:0f:44:e4:aa:
         30:3a:ed:25:77:64:84:c5:ee:ae:62:6c:f9:02:4f:72:74:d5:
         6a:39:6e:17:50:6d:91:f0:c2:57:9a:90:ed:5d:cc:b1:8e:e9:
         e6:21:81:f4:9f:b1:7e:b5:6d:20:f1:4c:91:93:94:39:e3:85:
         bc:f4:b9:02:66:84:67:14:81:03:35:fd:ed:50:b6:dc:cf:e9:
         9f:1e:71:49:87:65:55:1f:00:5c:09:90:58:cb:10:30:4a:b0:
         93:c6:c0:78:d1:b3:88:07:60:5e:eb:5a:f8:19:67:c2:f0:61:
         78:0d:ba:ef:50:08:00:98:e1:61:11:0f:aa:42:68:c2:b2:34:
         10:ed:56:dd:8a:83:e7:1c:8b:d1:aa:47:da:b3:f9:e7:8b:55:
         6a:91:09:28:22:dd:e9:e3:e1:e1:87:99:28:ad:a7:81:2f:24:
         89:71:e6:aa:77:b5:03:b0:c9:4a:3a:8e:f9:1e:8b:ba:5b:42:
         17:23:aa:64:1e:61:82:2d:7b:6e:9c:1d:3d:72:54:79:55:00:
         26:17:a1:76:bd:c3:93:35:c4:b1:e6:e1:bb:d9:cb:f2:6e:fa:
         2f:01:0e:1a:2f:c8:a1:ff:76:fe:1e:e8:86:ac:35:48:a0:7f:
         40:ee:31:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:35:52 2024 by rpki-client on console-fra.rpki-client.org