Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a346430303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a346430303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          7VqbySoKEXyy2vWVENiguGaGTcGhjiGJmhEb8LO/ecg=
Subject key identifier:   10:9E:CE:6F:5C:C7:BF:42:4A:03:E7:6E:B8:31:54:89:41:8F:AD:57
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       18916FD139454AAF9E0A10AD78CA39B645B31E34
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a346430303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:36 +0000
ROA not before:           Wed 03 Apr 2024 21:19:36 +0000
ROA not after:            Wed 02 Apr 2025 21:24:36 +0000
asID:                     264344
IP address blocks:        2804:2674:4d00::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:91:6f:d1:39:45:4a:af:9e:0a:10:ad:78:ca:39:b6:45:b3:1e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:36 2024 GMT
            Not After : Apr  2 21:24:36 2025 GMT
        Subject: CN=109ECE6F5CC7BF424A03E76EB8315489418FAD57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:de:94:c1:1a:c2:d2:0d:75:62:b1:f0:c2:
                    24:23:04:dd:17:46:9f:af:31:76:50:74:80:24:55:
                    fb:25:b1:3b:6d:80:d0:d3:16:fb:90:db:93:2f:25:
                    0b:cd:92:06:53:41:8c:bf:07:f7:83:f0:7e:e6:fb:
                    45:91:1c:df:27:ae:37:ac:60:6a:e9:6a:e9:9b:21:
                    36:55:f6:de:41:68:c0:9b:39:ea:61:f4:79:79:af:
                    31:46:2d:65:4c:5a:17:f4:ac:f5:7b:03:95:88:a0:
                    e8:1b:f3:4b:79:cc:1c:c1:8c:78:ad:1e:ca:ac:ad:
                    84:dc:64:01:ca:50:72:d6:fb:dd:28:8a:2e:ec:d9:
                    10:b3:7a:ec:dc:4b:42:ef:d9:24:1f:65:7d:c6:37:
                    c9:b8:47:db:c6:40:f5:1e:45:f6:86:f0:2f:a4:a3:
                    e2:93:87:4a:27:d1:51:39:12:cd:24:6c:26:c1:d5:
                    af:cb:19:3f:18:e4:57:cf:a2:b5:12:54:a7:f3:91:
                    58:20:9d:43:96:d7:4e:04:ed:b3:00:01:d1:ef:e6:
                    d6:6e:72:e2:73:c5:46:b7:7f:5b:8b:4b:19:bf:fa:
                    01:4d:57:c7:14:c2:b2:0c:c3:db:50:ca:6b:f3:f9:
                    bd:2b:f2:4d:92:90:a5:43:69:82:c7:59:50:91:9c:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9E:CE:6F:5C:C7:BF:42:4A:03:E7:6E:B8:31:54:89:41:8F:AD:57
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a346430303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:5b:0b:7b:b4:6a:c5:a0:55:82:7d:10:af:f3:f5:30:00:b6:
         da:53:cb:40:be:b8:69:4c:58:f6:db:35:14:87:14:94:c4:8e:
         33:9d:00:7e:27:95:93:a7:f5:1d:b0:d7:1a:b0:d5:d7:f2:d9:
         be:a4:5a:42:fa:97:e7:15:00:f3:ca:b4:a0:f5:3b:90:26:ad:
         a5:b2:57:67:12:89:25:d7:0e:b8:04:29:66:44:9f:f9:c8:9d:
         c2:63:aa:93:ad:fd:c4:b0:40:bc:89:b1:a7:e0:74:49:26:f5:
         56:d0:db:92:f1:60:22:e3:4e:e0:d4:c6:ce:f6:87:3e:f3:c2:
         ce:2b:96:6f:e3:6f:5e:c8:a3:12:8a:40:46:b6:dd:11:97:f1:
         b7:f8:1c:61:51:db:d0:d5:9c:18:b0:0a:8e:6d:19:ac:35:6c:
         01:db:8a:7e:16:51:52:1e:43:ea:a5:b8:09:70:0b:ef:9e:8a:
         26:ff:c8:de:8b:bc:b9:5c:0b:6e:b3:5d:ea:1b:33:f3:b8:d7:
         32:bd:10:a2:07:b5:e3:63:d9:27:16:c2:43:e0:e3:46:19:3e:
         7b:ab:3c:55:b1:15:d2:42:ff:0a:ba:64:51:18:b3:2e:fe:d8:
         60:41:a0:e5:ba:8c:8b:3b:b8:28:fc:8c:86:09:28:e1:4b:d3:
         00:aa:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 13:33:45 2024 by rpki-client on console-ams.rpki-client.org