Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a3a2f33322d313238203d3e20323637393939.roa
File:                     323830343a353637343a3a2f33322d313238203d3e20323637393939.roa (raw, json)
Hash identifier:          BEyTC0DlGVPs6eVhCINjmmscgAs6kk1j1vZaJnNecLs=
Subject key identifier:   B1:3D:58:C7:E3:14:22:21:92:F0:98:D6:4C:6B:CF:74:46:A3:0A:26
Certificate issuer:       /CN=42614C68B5B97437E1FC1379B17F977D9E72CCB3
Certificate serial:       5BE1042F31F3920A40D54ABA546D81371773045E
Authority key identifier: 42:61:4C:68:B5:B9:74:37:E1:FC:13:79:B1:7F:97:7D:9E:72:CC:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42614C68B5B97437E1FC1379B17F977D9E72CCB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a3a2f33322d313238203d3e20323637393939.roa
Signing time:             Mon 03 Jun 2024 16:46:54 +0000
ROA not before:           Mon 03 Jun 2024 16:41:54 +0000
ROA not after:            Mon 02 Jun 2025 16:46:54 +0000
asID:                     267999
IP address blocks:        2804:5674::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e1:04:2f:31:f3:92:0a:40:d5:4a:ba:54:6d:81:37:17:73:04:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42614C68B5B97437E1FC1379B17F977D9E72CCB3
        Validity
            Not Before: Jun  3 16:41:54 2024 GMT
            Not After : Jun  2 16:46:54 2025 GMT
        Subject: CN=B13D58C7E314222192F098D64C6BCF7446A30A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:53:48:7b:49:9f:df:6d:cf:f6:b2:80:2f:
                    52:83:b3:eb:22:5a:18:d9:07:fa:6a:56:3c:41:d3:
                    f8:94:42:80:f6:25:fe:97:f1:50:b2:2a:5f:27:85:
                    1a:76:70:0b:8a:95:61:71:a5:cc:7a:aa:71:cc:41:
                    11:3d:7b:57:17:98:be:66:09:1e:24:23:d1:7b:5e:
                    a3:6e:af:83:52:c1:e4:c1:b9:6a:82:7c:8d:83:18:
                    36:a4:67:b7:97:e4:97:e9:03:84:88:48:33:bf:54:
                    09:49:f1:10:fc:38:45:ec:f7:c0:4b:97:9b:d3:83:
                    f2:40:55:5e:2f:72:3b:71:10:d1:be:0e:2e:75:56:
                    c5:a4:24:74:37:b1:bb:27:1c:6e:ea:88:a2:19:00:
                    59:0b:25:9a:c8:ae:9b:32:92:b4:3c:34:eb:22:b8:
                    13:58:93:bc:83:52:93:21:9c:39:bb:eb:b8:8b:e0:
                    36:56:ec:52:16:75:0a:53:53:28:d1:b4:04:a2:2c:
                    73:64:0d:f4:5f:97:2d:0f:d9:bb:36:26:9f:3a:94:
                    d8:07:85:25:6a:83:92:a5:d8:98:ed:55:43:27:19:
                    39:29:fa:b2:f7:dc:e9:35:d3:da:7e:1a:44:4b:53:
                    f8:f8:d2:65:08:af:69:fb:33:7a:09:8e:76:f0:77:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3D:58:C7:E3:14:22:21:92:F0:98:D6:4C:6B:CF:74:46:A3:0A:26
            X509v3 Authority Key Identifier:
                keyid:42:61:4C:68:B5:B9:74:37:E1:FC:13:79:B1:7F:97:7D:9E:72:CC:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/42614C68B5B97437E1FC1379B17F977D9E72CCB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42614C68B5B97437E1FC1379B17F977D9E72CCB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a3a2f33322d313238203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:e7:95:6a:35:3f:b9:58:79:6c:e6:06:1b:23:84:9b:72:99:
         46:a1:9d:77:85:4e:0f:6f:37:86:ff:cd:f3:25:41:80:27:e5:
         db:a6:37:20:1d:f5:63:d4:ad:be:4a:23:a3:7c:35:c7:aa:ff:
         88:40:27:f6:72:25:ff:dc:2b:9d:9a:f7:01:71:e5:3e:7e:c7:
         5f:b5:dd:da:86:d7:18:e8:e2:5f:42:47:bc:95:32:c2:28:2c:
         14:28:04:27:8a:83:5b:7b:fe:fa:f2:82:24:c5:9c:b1:58:f9:
         4f:02:d3:aa:cd:cf:df:80:47:66:07:47:e8:e5:b0:6f:65:01:
         bb:0e:a4:da:7c:02:51:c9:c1:24:95:d0:74:ed:95:76:ff:8b:
         34:0f:d3:83:cc:f9:87:3c:77:87:d1:3f:b7:16:66:49:c5:72:
         28:2c:40:ed:ec:50:ee:63:15:df:de:31:06:68:7a:e3:35:6b:
         b1:a1:84:66:3a:7c:b6:5f:78:ac:89:7c:ee:3f:3c:7d:9e:45:
         dd:9c:e8:cd:da:1c:e4:dc:ef:1d:38:c1:9a:7d:4c:f3:0e:9b:
         03:86:ea:37:a2:0a:4a:25:e5:ef:29:dd:af:81:09:44:6b:36:
         47:16:37:38:9f:47:5f:5f:9d:73:0d:b6:6a:be:fb:d2:aa:fd:
         7d:d7:db:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 17:43:49 2024 by rpki-client on console-ams.rpki-client.org