Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a383030303a3a2f33342d3334203d3e20323634333434.roa
File:                     323830343a323637343a383030303a3a2f33342d3334203d3e20323634333434.roa (raw, json)
Hash identifier:          IT14reKi/ZfG2zJwiBlFjzI18NkkiKtxo5VJL7jR0Mo=
Subject key identifier:   28:E6:43:8A:84:8A:36:FC:11:65:2B:13:63:0E:84:E0:3A:1D:BD:3B
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       5FAD319BD0B2DB36ECEFE579B2A82559EEA298F1
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a383030303a3a2f33342d3334203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:36 +0000
ROA not before:           Wed 03 Apr 2024 21:19:36 +0000
ROA not after:            Wed 02 Apr 2025 21:24:36 +0000
asID:                     264344
IP address blocks:        2804:2674:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ad:31:9b:d0:b2:db:36:ec:ef:e5:79:b2:a8:25:59:ee:a2:98:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:36 2024 GMT
            Not After : Apr  2 21:24:36 2025 GMT
        Subject: CN=28E6438A848A36FC11652B13630E84E03A1DBD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:4a:e5:72:06:0c:b3:13:0f:2e:1c:02:c9:
                    69:3b:64:fe:24:dd:99:23:e7:ea:a9:5f:a8:3b:ec:
                    5b:f8:75:15:cd:24:4a:8f:fa:18:ba:7a:ab:c1:eb:
                    7d:a2:0b:03:53:07:b9:dd:22:1c:24:7d:4a:25:cb:
                    f2:58:a6:ee:ee:ad:d8:7f:46:52:04:95:36:3b:ed:
                    64:67:62:e3:e4:e3:eb:bf:11:0d:58:cf:bc:c4:54:
                    5e:21:a5:a7:bb:2c:eb:98:77:37:d1:75:83:1d:24:
                    5a:b5:b8:98:fa:cd:f7:8a:f8:42:9b:42:e7:5d:ba:
                    0b:d3:e7:6e:0b:b4:53:5a:3f:03:d8:f3:2f:6a:b0:
                    b5:64:af:eb:a6:b7:a2:b3:91:66:64:cc:23:7f:7c:
                    1c:65:80:3d:13:f9:c4:f8:fc:ae:c5:f3:ce:6b:62:
                    cc:50:c5:d4:b1:92:78:8b:65:e7:6f:09:fe:90:38:
                    66:fe:e6:9e:ff:3b:13:1a:bd:6c:9d:40:ae:35:a6:
                    b3:3e:b4:0f:9e:42:7e:34:4c:54:c9:34:21:de:f2:
                    a8:19:04:f4:50:33:01:65:48:32:b0:43:82:30:6e:
                    e9:4e:60:c0:33:f4:8e:dc:f8:ba:a9:4e:d3:65:60:
                    a9:81:56:8c:59:2b:26:eb:7e:e1:e0:42:9b:65:c4:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E6:43:8A:84:8A:36:FC:11:65:2B:13:63:0E:84:E0:3A:1D:BD:3B
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a383030303a3a2f33342d3334203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ac:d0:10:30:5c:e3:c3:c4:75:ed:d7:3b:08:e8:ef:fb:00:12:
         25:22:e3:ce:82:80:a7:ab:90:18:77:b1:ec:6e:68:54:57:fe:
         1a:db:a0:1d:59:f1:21:e4:6b:46:55:60:c9:75:2f:07:8b:46:
         c3:c3:27:17:a8:81:03:b8:65:fb:8e:ba:f8:7c:01:30:7d:4c:
         07:1b:a3:fe:94:9c:eb:fb:a7:a0:12:e2:cb:a5:5f:a2:1d:17:
         81:25:47:fb:7a:78:be:eb:6d:47:3d:10:ca:0e:47:59:01:16:
         46:15:fe:80:f3:fa:ed:b6:0a:69:65:09:a3:b6:8a:15:80:06:
         78:e1:8a:81:2e:a2:f2:a8:12:e1:1f:5e:32:04:b9:17:bf:6d:
         ca:4e:3c:98:d1:4e:13:5e:a2:01:39:72:4c:59:ba:c8:30:f2:
         1b:a0:e6:7e:09:a1:ce:ea:93:a5:76:cd:54:d9:95:74:e5:67:
         9e:e2:f1:b8:25:a4:b2:69:93:82:41:e1:fb:5f:cb:fc:dd:20:
         61:eb:b7:46:b7:da:6f:f3:52:0b:a6:4a:f7:f0:df:b8:6f:65:
         a4:aa:51:a8:0c:c6:4d:f1:a9:ff:f8:94:e6:a3:51:03:67:8c:
         24:36:20:09:c6:50:db:e3:4f:df:0d:d7:7d:01:cf:1c:ae:08:
         a6:21:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 13:33:45 2024 by rpki-client on console-ams.rpki-client.org