Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a346630303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a346630303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          vZwyMEFTM0jzZVDNHz98hkmOQovmh+mNZO13zmg0Xno=
Subject key identifier:   D1:04:03:E7:66:32:91:E4:FB:F6:F4:88:AD:ED:31:52:AE:6E:34:77
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       2240C79D2E44968C1874725E9609040A8084D978
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a346630303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Thu 13 Jun 2024 20:03:34 +0000
ROA not before:           Thu 13 Jun 2024 19:58:34 +0000
ROA not after:            Thu 12 Jun 2025 20:03:34 +0000
asID:                     264344
IP address blocks:        2804:2674:4f00::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:40:c7:9d:2e:44:96:8c:18:74:72:5e:96:09:04:0a:80:84:d9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Jun 13 19:58:34 2024 GMT
            Not After : Jun 12 20:03:34 2025 GMT
        Subject: CN=D10403E7663291E4FBF6F488ADED3152AE6E3477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:89:88:0d:d5:04:b7:92:53:7d:a0:85:42:
                    42:65:b8:25:01:d8:f5:87:30:8a:97:eb:76:4c:17:
                    14:fb:be:67:37:07:4e:7d:f4:71:7f:eb:2b:13:4b:
                    2f:64:c6:e5:5a:b3:2b:f3:c0:b4:6f:0d:65:93:ab:
                    7c:6a:2c:36:95:e0:db:cc:40:50:bf:87:4d:06:e4:
                    a5:97:3a:07:39:11:49:20:c7:98:7b:b5:e3:17:ea:
                    fe:29:eb:52:94:56:61:24:1f:ca:07:2d:a9:39:78:
                    f8:bb:0d:16:e1:b7:35:bb:9e:76:ba:61:ba:9a:9f:
                    f6:c6:e1:c4:57:2e:35:51:b5:a6:b9:71:5c:26:e8:
                    23:d0:25:ad:27:8c:c0:4a:21:95:97:dd:3a:ac:5a:
                    19:02:21:e0:86:5e:58:55:2a:58:5c:8b:68:b9:8a:
                    0d:5f:7c:11:cc:08:6b:85:9b:73:3b:47:14:98:6b:
                    3a:34:d8:b6:84:9b:45:dc:84:cc:3e:35:95:19:74:
                    2c:6d:85:24:f7:a9:4e:90:fc:17:03:ca:11:43:25:
                    54:59:d5:70:af:71:1e:e5:64:48:f1:bf:b1:64:80:
                    77:1f:4f:72:b6:34:d8:8f:89:d7:42:4c:b9:17:07:
                    d9:f4:c4:61:41:27:45:1c:c7:4f:8e:20:4c:ec:b3:
                    16:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:04:03:E7:66:32:91:E4:FB:F6:F4:88:AD:ED:31:52:AE:6E:34:77
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a346630303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:83:cc:0f:7e:d0:db:4a:8e:86:e2:8b:82:7c:b3:4c:c3:b3:
         00:cf:00:49:ba:34:65:71:f9:d0:35:6f:95:49:dc:a9:c4:2e:
         0a:db:63:6e:82:5f:1d:d4:f2:4b:85:df:36:87:db:c2:32:86:
         fd:1c:46:06:77:fb:36:e3:99:85:2b:c4:f4:6a:47:3b:f7:21:
         69:ce:43:6c:54:41:94:6e:fd:16:72:b5:22:7f:d4:57:da:9d:
         0d:2d:da:8c:89:89:86:d2:41:ae:67:8a:6a:56:c9:e2:ec:7c:
         be:67:eb:52:ec:9e:cf:dc:c4:b7:f9:63:45:4b:c0:6f:10:49:
         16:55:72:c1:4f:85:32:9c:2b:4b:ae:d4:1d:a2:04:3c:35:01:
         0b:1e:d6:08:82:4c:bf:7a:d9:c6:61:88:46:dc:52:86:d8:98:
         cc:e6:45:ca:9d:70:8f:78:37:f1:72:66:e4:4f:67:df:a6:6c:
         56:6f:77:bb:6a:5d:09:cd:1f:94:66:29:9d:c5:88:69:b5:d9:
         fe:61:d6:8f:30:9f:51:8f:2a:22:60:84:0a:84:77:9c:81:79:
         6e:4c:a6:0e:1a:9a:10:28:42:c8:9b:ea:75:ef:ff:33:f3:87:
         58:5c:4e:f9:4e:c4:ea:7c:a2:4d:de:a7:21:eb:5f:b5:6b:3c:
         a1:93:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 14:00:36 2024 by rpki-client on console-fra.rpki-client.org