Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a353230303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a353230303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          QAKNQopDGWutqlpfeER0b7Im7Yg9OO0r5J+lMshVMuE=
Subject key identifier:   5D:D2:1E:32:BB:AE:CD:63:0F:F6:09:89:5D:2A:A8:2A:FD:73:37:48
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       05FC8A49FD2375E581C39525ADBEF57956EE3489
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a353230303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:37 +0000
ROA not before:           Wed 03 Apr 2024 21:19:37 +0000
ROA not after:            Wed 02 Apr 2025 21:24:37 +0000
asID:                     264344
IP address blocks:        2804:2674:5200::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fc:8a:49:fd:23:75:e5:81:c3:95:25:ad:be:f5:79:56:ee:34:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:37 2024 GMT
            Not After : Apr  2 21:24:37 2025 GMT
        Subject: CN=5DD21E32BBAECD630FF609895D2AA82AFD733748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7d:c8:eb:30:c3:f0:ec:dc:d8:d2:9e:dc:b9:
                    48:11:13:a5:bc:32:13:25:56:41:01:79:9c:ef:3c:
                    24:e6:60:b5:4a:91:fb:c8:05:7d:cb:01:69:3a:64:
                    3e:05:74:ed:f4:5a:c1:3d:0f:07:9b:9c:a4:e5:f5:
                    c0:f2:20:41:8f:31:28:fe:f0:c5:98:b7:ab:40:e7:
                    37:bb:09:91:a7:33:4f:6f:64:3f:50:d7:bc:ed:21:
                    ec:57:ba:d7:53:4c:b0:55:13:43:3e:9b:4d:c7:3e:
                    f1:65:fc:bb:12:39:55:71:00:39:bc:2c:65:96:48:
                    d1:02:8a:f0:0d:c1:9b:b3:5f:ac:05:42:b9:65:31:
                    96:c1:05:a6:13:5e:a8:9e:51:97:b2:fc:e6:40:e2:
                    f5:8a:da:5a:75:1a:1d:af:3f:75:e4:01:e7:20:ef:
                    d9:4f:6d:43:da:95:0d:d3:60:72:ea:a7:e8:c6:bb:
                    9c:60:cd:b9:87:63:28:70:90:4e:73:06:dd:19:6e:
                    83:06:18:c4:d1:1e:6c:47:da:43:e2:b7:ac:a4:31:
                    de:c6:49:c2:d4:54:a5:3e:d1:90:43:8e:7e:7a:60:
                    a5:40:41:b1:a6:e1:33:38:bf:b2:75:31:28:1e:3d:
                    c6:33:ad:42:24:80:b5:27:a8:5a:63:35:8d:67:3e:
                    ca:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D2:1E:32:BB:AE:CD:63:0F:F6:09:89:5D:2A:A8:2A:FD:73:37:48
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a353230303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:95:51:49:d0:f2:49:28:48:a0:d5:00:71:95:fd:28:9f:0b:
         81:3d:cf:1e:f2:3f:a5:00:15:a5:df:ef:b8:43:c3:85:50:cd:
         3b:58:11:1a:53:e5:cd:a1:9d:d6:57:6a:45:6a:c9:7b:07:ca:
         22:e0:c6:fe:e3:d8:5d:e8:2d:0b:8f:7c:5a:63:99:c5:57:3b:
         3b:e0:c8:4a:1e:b1:55:f7:3b:f0:68:9e:fc:12:2a:29:b2:52:
         01:f7:fd:33:36:48:45:47:22:e0:96:95:e4:4c:ff:c0:c2:2c:
         b8:04:fa:ad:3e:90:0b:7a:a3:46:bc:a9:07:9e:44:03:3e:6b:
         0d:0a:28:62:bf:79:2a:80:28:4b:5d:80:ed:5e:04:9f:95:1e:
         2c:b1:4a:b1:59:35:92:b1:e3:67:16:94:7f:fd:80:ec:7d:e9:
         5e:1b:26:d0:55:91:a7:50:1f:fa:6d:42:6a:ac:78:d0:4c:2b:
         fa:64:4f:c5:6c:bd:21:58:07:7f:d5:80:7d:0e:9c:ab:b7:4d:
         e7:61:c9:02:46:10:78:98:2d:eb:92:b5:f4:81:a1:9b:48:90:
         5a:49:5e:32:7e:39:5d:1e:02:82:2d:26:c7:9a:67:c1:6c:d8:
         d0:df:9a:ba:86:77:89:b2:54:28:c5:e3:23:93:25:36:fb:7c:
         d3:b9:fc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 13:33:45 2024 by rpki-client on console-ams.rpki-client.org