Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343730303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343730303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          TpQVXo2XraL9SFgZWAx6AG+MO11VPm27p2zk0ZUz6IE=
Subject key identifier:   5D:05:BA:75:20:2E:06:E3:56:58:52:50:B1:C3:84:62:2F:ED:E5:70
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       5B9C511F810E0052ADEF4A14670AB8DB699C6F39
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343730303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:37 +0000
ROA not before:           Wed 03 Apr 2024 21:19:37 +0000
ROA not after:            Wed 02 Apr 2025 21:24:37 +0000
asID:                     264344
IP address blocks:        2804:2674:4700::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9c:51:1f:81:0e:00:52:ad:ef:4a:14:67:0a:b8:db:69:9c:6f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:37 2024 GMT
            Not After : Apr  2 21:24:37 2025 GMT
        Subject: CN=5D05BA75202E06E356585250B1C384622FEDE570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:ff:cb:ad:e9:6d:07:84:9f:bb:2f:4e:ac:
                    b6:46:d7:e2:3f:2f:04:68:92:c0:e5:bd:ed:6b:94:
                    9a:ab:c0:55:27:f9:a7:17:95:83:bd:c0:04:13:90:
                    86:32:fe:f2:d7:62:27:3b:be:00:82:d0:5d:86:30:
                    d8:9b:cf:e3:72:f1:45:d9:c9:54:00:19:4e:94:9f:
                    7e:87:a6:4e:9f:3c:8e:d9:37:7d:a2:5b:55:8e:fc:
                    ed:f0:75:99:0e:2f:24:dd:1b:e0:eb:5d:f1:8b:ae:
                    d9:1b:a0:a5:01:fd:db:4c:d2:09:f6:34:08:d3:91:
                    66:7d:70:c6:37:61:26:d5:1e:91:16:da:a8:2c:ac:
                    eb:71:af:93:47:38:ea:7e:7e:36:23:71:2b:42:d6:
                    8a:61:28:9d:b4:2d:43:68:7d:63:70:81:bd:dc:ce:
                    f6:06:9d:c0:6e:59:7f:3c:a3:88:6f:e5:3a:73:ce:
                    97:02:8e:34:4b:31:46:c3:29:e8:1e:dc:c9:21:48:
                    7d:13:5a:4e:5d:57:d8:1b:54:24:a9:eb:a5:44:05:
                    76:03:45:83:c3:0e:e3:77:2b:db:97:aa:ee:78:fc:
                    b1:66:ac:36:24:41:c0:8a:17:23:bd:8c:af:72:88:
                    ef:7f:fd:70:4f:e3:76:fb:26:6e:9a:61:10:35:6c:
                    f8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:05:BA:75:20:2E:06:E3:56:58:52:50:B1:C3:84:62:2F:ED:E5:70
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343730303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4700::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:c1:90:3e:b1:16:7f:88:73:19:a7:3a:df:24:f1:25:3c:1e:
         99:2b:06:c9:47:7e:60:8f:1d:1a:0a:77:7e:63:7a:c3:7f:24:
         4d:3d:d4:31:d8:38:43:52:5f:a6:9b:2b:bf:ad:5d:31:20:61:
         e4:26:b4:47:02:8a:e2:1e:96:34:9c:5d:45:43:ab:aa:5b:cd:
         3b:db:b9:0a:4f:bb:99:ce:72:d3:b5:1d:cd:03:ae:80:c6:00:
         7c:48:20:af:ad:4d:6d:c2:df:70:66:66:82:74:aa:92:44:f5:
         b8:b3:21:2d:b1:c3:54:bb:4f:8b:46:94:b6:66:17:fc:68:d5:
         22:ae:67:5c:e1:96:ba:7e:c8:b9:b5:94:dd:35:6e:5c:b9:f0:
         77:8e:8a:5c:88:53:7f:8b:3a:95:6d:ba:9a:15:1b:0f:dd:a0:
         15:e6:63:5e:fa:51:1a:70:ba:d8:2c:63:53:52:a8:f9:13:a8:
         28:57:e0:f6:4d:0e:c7:ae:20:d6:c0:62:7d:8a:13:20:57:fc:
         83:f1:85:44:cd:9f:31:d7:4a:85:67:87:bd:f4:4d:d3:37:a2:
         4d:b8:d7:b5:8e:98:f6:c1:4e:ab:2a:71:99:e0:98:0e:3e:a8:
         92:25:82:dd:b1:5c:65:80:f4:e6:43:f5:fa:5f:fe:2a:9f:d7:
         82:0b:a7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 14:00:36 2024 by rpki-client on console-fra.rpki-client.org