Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343330303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343330303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          mmXN/DrTEEnEXXF3rU4CiOOcEqZzO9gGXTPp+5gT71A=
Subject key identifier:   84:95:EE:BF:C1:8E:E1:9D:73:E4:43:34:3D:90:AB:A8:42:D1:76:58
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       1A9666977820F6F0F1FC027FA5FD118BEA4C9E00
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343330303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:36 +0000
ROA not before:           Wed 03 Apr 2024 21:19:36 +0000
ROA not after:            Wed 02 Apr 2025 21:24:36 +0000
asID:                     264344
IP address blocks:        2804:2674:4300::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:96:66:97:78:20:f6:f0:f1:fc:02:7f:a5:fd:11:8b:ea:4c:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:36 2024 GMT
            Not After : Apr  2 21:24:36 2025 GMT
        Subject: CN=8495EEBFC18EE19D73E443343D90ABA842D17658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:c1:2e:70:ed:d7:ff:3f:90:0b:ff:57:2f:
                    f8:e6:03:39:57:21:eb:e3:dd:72:84:bd:f6:5c:a7:
                    2e:8b:c4:3a:cd:3f:86:43:31:05:fc:48:92:ea:43:
                    b1:17:64:cd:c2:36:b4:68:16:8b:f2:b4:4a:8e:73:
                    60:5e:52:8b:f0:8a:7e:17:92:b4:85:e9:e5:97:68:
                    4e:4d:5a:7d:e8:e5:cb:39:8d:d0:be:52:3e:a3:f8:
                    4a:13:9d:cb:0e:4f:61:f1:7d:bc:62:4c:63:ed:be:
                    dc:98:a3:16:b4:4c:40:a0:67:86:a7:43:f1:39:8a:
                    b0:07:55:0a:19:7c:e7:30:d4:24:5e:0c:7b:b6:35:
                    ba:c0:83:3d:36:7b:fd:75:69:01:88:73:9d:2f:84:
                    d7:a2:fd:f7:23:a2:03:fe:9c:c8:74:e0:47:aa:fa:
                    ed:70:2b:dc:44:6b:31:9e:d5:32:ce:dd:00:2f:f8:
                    7e:a5:5a:41:f8:44:92:04:44:c5:6e:cc:15:d1:61:
                    16:34:87:da:14:34:30:2e:7d:81:e2:5f:5f:82:f9:
                    97:51:a1:14:fa:be:6e:aa:07:c8:2c:82:06:fc:22:
                    20:d4:96:4c:40:bd:cf:a5:44:d6:da:57:08:53:01:
                    0c:48:cf:71:dd:67:5b:07:03:6e:fd:39:0d:6b:0b:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:95:EE:BF:C1:8E:E1:9D:73:E4:43:34:3D:90:AB:A8:42:D1:76:58
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343330303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4300::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:26:4a:fd:79:8f:fc:97:4f:80:d2:11:d4:c3:9b:fb:55:e8:
         a3:3d:be:7b:78:68:76:7b:f1:ba:d6:7f:54:18:52:3d:e0:89:
         9e:90:fa:bc:4b:f4:d9:71:20:4c:2f:ca:7a:3b:ea:a1:c9:87:
         d0:0b:e8:3b:9d:a8:54:02:d1:2f:d3:1c:63:83:65:a2:76:a7:
         ce:dd:cc:cc:8c:d1:d1:c5:2f:c4:da:c6:c8:78:f5:a2:aa:9c:
         49:f1:47:91:80:0c:e3:07:0e:d8:cc:a4:b1:64:3b:bf:f8:a8:
         d6:21:f2:2a:cd:56:a4:17:e3:e6:03:15:a8:c3:98:06:d3:78:
         72:22:ff:a9:f3:8a:a9:47:2e:1a:8a:c0:81:ea:15:26:bf:56:
         6c:25:c4:82:42:91:5a:3c:d9:1d:5a:d1:f9:b6:ac:22:d4:ea:
         dc:a9:f4:1e:5f:0f:25:5c:35:08:8f:27:5e:ef:e1:cb:e1:eb:
         d4:c2:ae:4d:a7:80:8d:98:9c:bd:e1:58:6f:a7:6b:f6:7f:42:
         24:ae:98:c7:3d:44:62:ad:14:bb:d3:9c:ec:17:08:e6:ac:c5:
         8a:93:d3:75:18:7a:86:2d:13:2d:16:de:30:23:34:c6:73:8d:
         3c:c2:66:2d:c8:d0:db:4f:6b:24:0c:52:05:74:fd:17:11:cb:
         ed:72:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 14:00:36 2024 by rpki-client on console-fra.rpki-client.org