Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/323830343a363565633a3a2f33322d3333203d3e20323639353233.roa
File:                     323830343a363565633a3a2f33322d3333203d3e20323639353233.roa (raw, json)
Hash identifier:          21CcGiQ/RrKda2JAfufARaY1zoV8jLpKL6xj8v39Pu0=
Subject key identifier:   9C:B2:23:90:A8:78:C9:E9:C7:5B:80:3D:BD:0B:A0:B7:84:E8:A2:13
Certificate issuer:       /CN=4C66981CBC4C89129E4FB5EEC64AD1AC99F90098
Certificate serial:       35EC421BFD9F8580AF3AFD96C172A0E7383AB738
Authority key identifier: 4C:66:98:1C:BC:4C:89:12:9E:4F:B5:EE:C6:4A:D1:AC:99:F9:00:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C66981CBC4C89129E4FB5EEC64AD1AC99F90098.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/323830343a363565633a3a2f33322d3333203d3e20323639353233.roa
Signing time:             Tue 03 Sep 2024 15:28:41 +0000
ROA not before:           Tue 03 Sep 2024 15:23:41 +0000
ROA not after:            Tue 02 Sep 2025 15:28:41 +0000
asID:                     269523
IP address blocks:        2804:65ec::/32 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ec:42:1b:fd:9f:85:80:af:3a:fd:96:c1:72:a0:e7:38:3a:b7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C66981CBC4C89129E4FB5EEC64AD1AC99F90098
        Validity
            Not Before: Sep  3 15:23:41 2024 GMT
            Not After : Sep  2 15:28:41 2025 GMT
        Subject: CN=9CB22390A878C9E9C75B803DBD0BA0B784E8A213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:16:f8:38:92:fc:eb:d8:ce:4e:6c:c5:7a:
                    f4:ad:0a:52:23:06:1b:44:cf:48:b2:64:42:94:b9:
                    71:63:f5:fd:57:31:c5:8a:e3:ef:ec:22:ab:62:05:
                    ba:78:4a:cc:6d:5d:08:a0:10:4d:14:ab:12:97:65:
                    1f:20:d5:e8:5b:e8:d3:f2:88:89:ba:c8:f6:e1:db:
                    48:d1:4c:5d:95:64:62:8d:5b:f5:36:f0:41:26:79:
                    d8:e7:5b:5a:78:65:7f:39:d2:d6:2a:8a:c0:4b:ef:
                    e3:ed:c4:3f:dc:ba:10:1e:ca:a2:7d:f2:b7:c9:2e:
                    6d:52:55:19:58:3c:e4:1a:9e:ce:69:fc:d7:eb:ea:
                    de:e4:3c:29:7b:c6:53:9c:3c:e6:ba:c1:e1:07:bd:
                    7a:50:be:14:2a:14:04:fe:45:b0:82:1e:69:58:45:
                    24:32:97:64:91:c5:a8:c1:d6:79:9d:da:0b:7b:68:
                    b0:e9:50:02:27:2a:dd:a6:84:42:5b:65:67:af:fc:
                    60:7f:ac:76:33:ce:9e:d2:4a:28:17:48:e1:93:13:
                    17:47:96:39:ee:27:50:b1:87:42:62:47:5f:17:f8:
                    90:a2:c1:1d:7a:d1:7e:b8:08:c1:ca:fd:0d:c2:81:
                    87:30:ba:91:a9:83:02:68:0f:52:6f:40:50:94:bc:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B2:23:90:A8:78:C9:E9:C7:5B:80:3D:BD:0B:A0:B7:84:E8:A2:13
            X509v3 Authority Key Identifier:
                keyid:4C:66:98:1C:BC:4C:89:12:9E:4F:B5:EE:C6:4A:D1:AC:99:F9:00:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/4C66981CBC4C89129E4FB5EEC64AD1AC99F90098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C66981CBC4C89129E4FB5EEC64AD1AC99F90098.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/323830343a363565633a3a2f33322d3333203d3e20323639353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:76:30:e6:a8:b0:81:96:73:06:1b:5d:b3:f4:9f:6b:94:16:
         a1:02:1e:6f:8f:fa:0a:10:ca:eb:56:22:4e:41:e3:fe:b4:b3:
         f9:f6:16:6f:44:7b:58:e7:bf:73:2f:77:d9:96:6a:fb:9c:fa:
         2d:d0:c9:18:20:aa:a9:06:de:7e:f9:2e:bf:05:ef:41:4e:5c:
         39:84:97:0c:cd:b9:ce:02:88:41:92:74:67:75:e0:34:07:ab:
         31:cd:4d:43:e2:60:9b:ab:2e:e6:d9:83:c7:08:4d:9d:00:85:
         fa:d9:af:9c:35:0d:15:cf:ff:fd:bf:28:33:b2:86:47:95:bd:
         bd:67:cc:fb:fd:4a:2d:ad:ea:5d:84:69:1b:8b:89:0f:e6:26:
         5c:5f:a9:4a:f1:d6:1d:c5:31:41:0e:19:57:47:21:09:93:a0:
         3d:0a:f0:03:7d:71:9f:84:a9:eb:23:8f:3d:41:00:42:48:ca:
         ad:41:1d:4e:14:04:a8:2c:81:e3:e9:55:cf:46:28:7a:34:fe:
         6d:5a:e7:20:12:3c:10:0f:86:5c:3a:41:77:3f:51:ce:1a:a2:
         06:5f:e4:73:48:95:e8:09:23:f6:05:5c:ca:7b:6d:49:35:e4:
         db:a3:28:ea:6d:b8:72:81:b2:70:1a:0f:b0:05:12:fb:e4:98:
         7c:6c:bb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 21:19:09 2024 by rpki-client on console-ams.rpki-client.org