Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343630303a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a343630303a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          HeVBlMXPtLnKjccN67Ws3QqrrlMPjY04YFwSBga3RbM=
Subject key identifier:   65:7A:E6:AA:59:8B:D7:C7:47:46:00:7B:FE:98:E2:2A:E9:F7:93:6B
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       27C7B8DBE6C5CC16F29A6E43903D38406A5C97B0
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343630303a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:35 +0000
ROA not before:           Wed 03 Apr 2024 21:19:35 +0000
ROA not after:            Wed 02 Apr 2025 21:24:35 +0000
asID:                     264344
IP address blocks:        2804:2674:4600::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c7:b8:db:e6:c5:cc:16:f2:9a:6e:43:90:3d:38:40:6a:5c:97:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:35 2024 GMT
            Not After : Apr  2 21:24:35 2025 GMT
        Subject: CN=657AE6AA598BD7C74746007BFE98E22AE9F7936B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:98:90:11:7a:54:30:b2:22:ec:57:45:ce:
                    6b:95:39:b1:55:fe:df:99:ad:0c:d1:18:8f:e1:be:
                    97:5a:a8:f9:b1:b6:ea:a3:fa:04:cd:66:b9:be:49:
                    cb:0f:e7:98:56:d6:9f:29:05:74:52:d5:70:59:bd:
                    06:f2:77:fe:37:7f:ed:0a:5f:4a:29:76:cb:9a:08:
                    3b:a2:59:44:cd:21:e8:52:39:56:b2:ff:bc:de:c8:
                    fe:73:41:0f:b3:32:fd:ff:29:1b:e5:87:7f:14:5b:
                    96:f8:f3:14:c9:56:77:7c:a9:76:6a:9a:25:54:42:
                    4d:4e:59:0c:2f:5b:80:43:2d:25:10:c6:60:97:06:
                    12:b7:0c:7e:da:0d:bb:af:e3:20:4d:49:1f:73:84:
                    f8:b9:51:08:67:82:5f:a1:0e:2d:40:41:20:1b:92:
                    39:dd:04:1a:f8:6e:70:d0:b7:83:2f:ce:58:9f:d4:
                    d2:a2:70:eb:bf:77:bb:05:55:79:3f:24:bd:c9:14:
                    54:05:b8:a8:dc:ff:d9:69:a7:95:6b:ca:c4:b4:0a:
                    0b:a4:20:98:6e:16:a8:ff:99:44:04:6a:15:19:e3:
                    f8:68:9e:8e:f4:2b:aa:d2:b2:e6:a1:b8:4c:48:fd:
                    90:41:0d:35:ab:21:52:8d:67:0f:70:4e:72:73:30:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7A:E6:AA:59:8B:D7:C7:47:46:00:7B:FE:98:E2:2A:E9:F7:93:6B
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343630303a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4600::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:8f:0f:b6:2b:55:f2:0b:d5:dd:11:be:0e:8a:30:8c:5d:3e:
         bd:5d:23:7f:e0:7c:6d:b1:39:a6:76:7b:72:b4:86:7d:97:3d:
         a1:7b:8b:34:6f:12:79:64:18:d6:72:73:22:aa:7c:94:cd:29:
         13:10:54:de:f2:0b:de:f4:7c:6b:f2:0b:f0:07:f5:dd:a2:f8:
         1a:1b:f1:0f:45:d3:f8:93:5c:43:77:54:47:74:ec:ce:39:13:
         fd:82:92:a8:22:71:0f:26:78:3e:7b:4b:42:22:ff:80:28:78:
         c0:3f:d7:7f:0b:bd:7b:6d:bd:e9:3a:42:07:00:71:35:fb:67:
         03:1d:aa:fe:df:1e:28:f4:f8:ad:3d:a5:e4:46:0e:ff:8e:d4:
         7e:e6:ad:e7:d6:3e:ad:d5:da:4e:8f:8b:31:b9:f5:95:02:c8:
         46:1f:be:e2:59:09:32:c8:35:d5:ee:6c:c5:78:44:3a:31:e4:
         2c:a2:ae:67:dc:21:23:99:aa:49:fc:2f:a8:b2:13:e8:53:52:
         79:be:ae:ab:9a:1f:a4:b3:45:c2:66:82:9d:6a:f8:fe:d1:65:
         83:e6:d3:c1:30:e5:a0:ed:ff:20:19:f1:18:36:f6:00:eb:97:
         18:40:b0:ec:c6:89:e1:8a:70:a5:5e:e7:b0:41:f6:b2:5c:0e:
         02:b5:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 14:00:36 2024 by rpki-client on console-fra.rpki-client.org