Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/323830343a376435343a3a2f33322d313238203d3e20323731353534.roa
File:                     323830343a376435343a3a2f33322d313238203d3e20323731353534.roa (raw, json)
Hash identifier:          ejUUuo7UJJewokeyU/XFM1VlPnqwpqtKqfNDhkKq4sE=
Subject key identifier:   C4:FB:19:C3:20:31:66:82:BF:E6:80:E6:2A:C7:9A:57:A5:8B:98:D4
Certificate issuer:       /CN=6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95
Certificate serial:       037A451539F3771575BEF09A1403A14BB719F3A6
Authority key identifier: 6D:04:BC:5E:D8:BA:34:8F:4B:F9:50:89:7B:B2:11:E8:E5:BE:8D:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/323830343a376435343a3a2f33322d313238203d3e20323731353534.roa
Signing time:             Wed 03 Apr 2024 21:11:44 +0000
ROA not before:           Wed 03 Apr 2024 21:06:44 +0000
ROA not after:            Wed 02 Apr 2025 21:11:44 +0000
asID:                     271554
IP address blocks:        2804:7d54::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7a:45:15:39:f3:77:15:75:be:f0:9a:14:03:a1:4b:b7:19:f3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95
        Validity
            Not Before: Apr  3 21:06:44 2024 GMT
            Not After : Apr  2 21:11:44 2025 GMT
        Subject: CN=C4FB19C320316682BFE680E62AC79A57A58B98D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:1e:da:3f:36:2d:31:1c:92:4e:46:dd:6e:
                    2a:ce:cd:77:66:0d:1c:60:ae:66:d0:9f:ee:b6:89:
                    30:c8:27:20:8a:56:6b:99:85:6c:d6:d4:48:4a:4a:
                    33:a1:53:02:98:4e:af:02:7f:1c:88:ba:0e:ca:e6:
                    dc:bb:5f:9f:0a:38:f1:79:30:89:39:b4:ce:a6:53:
                    aa:fd:b6:6b:09:c7:0e:89:59:fe:88:d0:e6:41:ed:
                    b3:24:15:48:1b:85:2f:af:48:2c:17:a1:68:05:df:
                    16:aa:c0:d3:34:bc:b6:88:ea:5c:4d:ed:58:f7:16:
                    d9:ae:3e:64:b7:6b:4e:62:c6:5a:48:4f:66:55:24:
                    29:91:95:ba:b1:30:44:c2:e3:1d:b8:91:08:98:ca:
                    70:f1:17:24:46:88:81:0c:70:fe:00:9a:24:ed:37:
                    a3:d6:ef:6d:4b:99:be:6c:91:c8:4b:32:aa:6f:8c:
                    f3:69:fa:5a:a6:f0:32:01:0e:56:43:0b:dd:9a:18:
                    db:3a:1e:8f:ca:ac:ea:e2:0f:d5:56:66:e4:6b:68:
                    14:2b:90:a0:c7:03:22:3d:ef:93:5a:90:a9:d0:27:
                    b9:e1:c7:32:ac:65:11:ad:8a:88:8c:6c:21:b0:0d:
                    4a:b1:5c:bd:6b:44:fa:08:5c:a2:b9:5a:d1:c3:ec:
                    91:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FB:19:C3:20:31:66:82:BF:E6:80:E6:2A:C7:9A:57:A5:8B:98:D4
            X509v3 Authority Key Identifier:
                keyid:6D:04:BC:5E:D8:BA:34:8F:4B:F9:50:89:7B:B2:11:E8:E5:BE:8D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/323830343a376435343a3a2f33322d313238203d3e20323731353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d54::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:9d:ee:c7:65:9e:f6:89:3b:51:66:97:95:cb:27:fd:e9:b0:
         2f:f4:79:19:d1:c3:28:b5:e0:d6:27:d9:a3:ea:0a:eb:20:a9:
         30:62:20:b9:24:54:11:99:d5:7b:b5:39:cd:0a:74:34:c0:41:
         a4:18:0c:90:c0:a5:da:04:2b:7d:4f:c2:8d:a2:12:3b:eb:e0:
         5a:bc:e1:4e:d1:61:23:95:8a:69:72:9f:aa:3a:ce:de:88:49:
         28:02:cf:23:fd:30:ad:6d:91:4f:ce:0c:5c:21:64:14:9f:dc:
         fc:7d:c3:f8:1d:ed:3e:92:1b:3f:32:8b:cc:d0:dd:a3:40:86:
         23:0a:c1:87:0f:ec:50:f0:37:13:cd:ae:80:91:b4:6d:f6:86:
         1d:40:ac:b5:53:4c:39:84:d8:b3:93:9e:12:fa:52:d7:c0:b9:
         c1:c4:d1:67:6b:92:7b:d8:ba:72:16:c8:74:5f:39:b7:34:c9:
         bb:00:f0:f3:00:96:b3:ff:fd:bc:07:21:5c:9e:79:75:cf:36:
         ba:13:bb:59:69:bc:c9:fc:a4:87:3e:c5:67:be:e6:ff:fd:ac:
         4b:40:93:77:b5:35:c9:89:14:e5:65:9d:5a:9e:6a:72:3e:67:
         d8:7b:d9:fb:cc:fd:5c:2f:1e:ac:91:52:7b:c9:14:3c:be:fa:
         9c:a6:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 23:46:28 2024 by rpki-client on console-fra.rpki-client.org