Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343830303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343830303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          iJC+iOnutjeJKKVeZBbYKr9xqKbbK2CVxukXz0TY2UU=
Subject key identifier:   A7:82:9F:1D:7E:C1:6F:2D:F7:4A:0D:D8:6C:AF:67:5B:0C:F1:74:B7
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       5620EAB432516D9B02F6D9E3B10B628868E19667
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343830303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:35 +0000
ROA not before:           Wed 03 Apr 2024 21:19:35 +0000
ROA not after:            Wed 02 Apr 2025 21:24:35 +0000
asID:                     264344
IP address blocks:        2804:2674:4800::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:20:ea:b4:32:51:6d:9b:02:f6:d9:e3:b1:0b:62:88:68:e1:96:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:35 2024 GMT
            Not After : Apr  2 21:24:35 2025 GMT
        Subject: CN=A7829F1D7EC16F2DF74A0DD86CAF675B0CF174B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:64:b1:5a:20:9a:88:61:4a:b9:59:a0:ff:
                    d9:6a:47:d9:6f:3f:db:76:4a:e8:72:50:fe:ed:75:
                    65:ac:15:2a:e9:6b:cd:4f:7f:a7:6a:bc:94:a2:40:
                    28:c6:ca:ce:2d:9c:81:3d:ad:7b:e5:ff:3f:ef:c7:
                    b4:0a:a7:21:a2:0e:b9:9a:ba:c3:cd:5e:d1:cb:46:
                    43:ce:ba:c0:05:55:12:87:f7:28:4c:4e:3b:1a:64:
                    87:91:bf:bf:e8:09:51:9d:3d:f1:6d:c1:91:c4:23:
                    c9:0a:da:e4:5b:04:b2:41:b2:aa:91:e6:cd:fe:1b:
                    2d:46:29:4e:6c:38:ac:1f:6b:6f:a4:88:f2:d3:f7:
                    10:d0:67:39:45:67:81:3b:64:ee:8f:20:47:57:8e:
                    ff:74:bd:7e:44:85:b1:43:d2:a0:46:e0:92:26:85:
                    b4:78:1e:9d:fc:cb:6c:65:20:de:9d:a2:eb:d6:e1:
                    cf:92:88:08:f1:1f:ad:59:41:34:74:6c:f5:33:8a:
                    e0:34:b2:52:47:5b:4d:59:b7:4c:34:4d:c3:4e:36:
                    7a:52:bd:8a:91:07:1e:f6:9b:02:02:39:ce:3e:97:
                    51:4b:2d:84:3e:5b:ef:bc:32:fe:0c:ab:43:10:84:
                    23:09:ff:cd:2e:4b:65:a2:e0:4a:95:da:cc:f2:69:
                    2c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:82:9F:1D:7E:C1:6F:2D:F7:4A:0D:D8:6C:AF:67:5B:0C:F1:74:B7
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343830303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:cf:80:e4:86:0c:7d:1a:cd:eb:dc:34:ff:27:ec:ef:3a:86:
         e8:a5:68:12:fd:c4:83:ae:f6:ed:f0:ff:16:21:b8:e6:b0:61:
         2d:a3:73:69:e3:c8:75:ca:37:aa:b0:2f:bc:d7:df:61:8c:46:
         26:c2:e0:5c:64:25:8a:4d:17:81:4d:3e:1d:d8:bf:cc:b3:a8:
         a0:79:fb:ac:17:68:bd:da:14:50:00:2f:9d:36:41:3b:b5:e7:
         74:05:70:0c:53:7b:9a:03:2e:ee:df:2e:d6:e9:36:9e:88:c4:
         72:bf:10:07:7e:75:02:3b:41:ac:d6:c8:35:a3:e3:54:af:eb:
         20:fd:63:a8:b4:0c:3f:ea:c2:14:56:74:eb:90:0d:2e:fe:14:
         f3:49:8d:b5:25:52:67:94:47:dc:fa:45:68:e7:40:30:47:a0:
         05:14:32:d4:de:e2:12:02:2e:ab:b3:86:30:fc:c0:b5:34:92:
         cd:58:57:af:99:3f:2c:5f:c4:64:66:e3:0b:87:21:8d:cf:2b:
         33:3a:4d:e9:bd:eb:0c:43:8f:6f:30:b3:b5:4b:7b:af:eb:67:
         4f:b9:3b:59:c5:f2:b3:94:9b:8f:e1:29:89:28:f7:e8:cf:0e:
         54:4b:7a:a4:7a:27:9d:24:6c:a5:ad:77:90:0e:29:e6:94:50:
         d7:3a:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 13:33:45 2024 by rpki-client on console-ams.rpki-client.org