Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343130303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343130303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          ao+Z0n7Ep/jSLwIjisk6pSBzowSVohzbnLS98aUynSQ=
Subject key identifier:   26:59:BC:46:8D:E1:80:EA:A1:E7:07:E4:0C:59:9E:C7:D0:36:BA:98
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       66F741D6FCBAC5F9526AC8C41C96783248CFC6DF
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343130303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:36 +0000
ROA not before:           Wed 03 Apr 2024 21:19:36 +0000
ROA not after:            Wed 02 Apr 2025 21:24:36 +0000
asID:                     264344
IP address blocks:        2804:2674:4100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f7:41:d6:fc:ba:c5:f9:52:6a:c8:c4:1c:96:78:32:48:cf:c6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:36 2024 GMT
            Not After : Apr  2 21:24:36 2025 GMT
        Subject: CN=2659BC468DE180EAA1E707E40C599EC7D036BA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:15:d1:6a:33:22:04:57:c2:4a:37:22:0c:
                    5b:da:39:1c:0f:a2:32:51:44:b3:7f:d4:4f:34:e3:
                    51:f1:79:5c:75:f9:3a:dc:f3:11:d2:4c:3a:2a:2f:
                    35:f4:96:dd:40:95:22:1d:16:4c:13:14:8b:a0:41:
                    fc:90:15:65:69:61:42:26:7e:42:6f:a7:88:80:c0:
                    11:01:17:ad:fd:e5:ae:ea:d4:5b:cb:ca:d6:2a:57:
                    20:77:23:c8:71:a9:e5:98:71:d2:4d:92:83:22:f3:
                    78:18:c1:a4:27:24:7a:fb:e0:e8:dc:76:73:03:79:
                    ae:30:bc:e1:28:e8:b2:ff:6d:5c:66:31:79:31:a8:
                    7d:0e:c7:56:86:42:50:dc:08:cc:cb:03:54:06:2c:
                    92:c2:6c:87:11:6e:8e:9b:d0:5b:09:b9:8a:b3:0e:
                    17:e2:50:ba:ac:39:07:67:78:cc:d8:4a:ff:6f:89:
                    bc:84:45:a2:2d:de:03:0f:08:95:d1:ed:f8:ec:62:
                    59:91:a5:af:6f:d5:04:61:bb:74:a9:b9:13:d5:29:
                    8d:86:f5:78:ea:9e:85:fa:e3:b5:a2:4b:66:88:4c:
                    a9:60:e0:8b:28:69:75:30:c0:d0:2c:e7:98:c1:37:
                    0f:54:42:50:19:81:2f:a1:e9:e8:bc:5b:28:61:5f:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:59:BC:46:8D:E1:80:EA:A1:E7:07:E4:0C:59:9E:C7:D0:36:BA:98
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343130303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:e4:ce:80:e2:d7:8d:8e:e3:2e:9a:1b:57:c1:db:fd:c7:61:
         d7:c7:90:31:e0:44:ce:6b:c6:aa:05:c3:fd:25:51:9b:d9:72:
         19:9f:0a:71:90:23:6c:a6:11:2a:46:07:e3:e6:c9:2e:75:8a:
         dd:30:96:1d:78:7d:f7:67:8f:22:1c:91:b2:c3:39:cd:02:ff:
         d1:b3:ec:01:58:b4:54:19:2a:33:fc:4b:18:9c:74:7f:1d:2a:
         62:0f:95:53:aa:84:56:35:4f:f9:86:a5:c7:71:26:6f:b8:eb:
         1d:e4:2d:40:6b:ec:c2:a3:a8:4b:3d:84:76:93:1c:bc:9a:a3:
         ac:e8:f6:93:38:c7:fa:ee:fb:b1:68:60:9a:61:5c:c5:56:40:
         1e:57:30:b4:48:86:67:6f:72:cd:91:7d:f7:5d:12:78:66:bb:
         74:70:1d:f1:0d:49:36:8f:9e:85:c7:9d:a0:6d:51:68:e4:8e:
         54:00:73:c8:59:68:f1:91:67:6f:17:49:aa:25:07:2b:09:7a:
         f0:68:a4:ae:69:5f:e0:91:b3:c3:f0:28:31:94:08:d7:71:f1:
         49:c9:72:bf:7e:4d:17:51:2f:8a:95:95:ba:9a:a2:32:9e:f1:
         56:c6:bd:41:55:4e:5e:16:c9:89:95:3e:84:58:6a:36:ae:25:
         cd:dc:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 13:33:45 2024 by rpki-client on console-ams.rpki-client.org