Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/323830343a336130383a3a2f33322d313238203d3e20323636303636.roa
File:                     323830343a336130383a3a2f33322d313238203d3e20323636303636.roa (raw, json)
Hash identifier:          NOoFPEsDzlq6vC7lf1QhAPo4eL4n511a60+fjiLw/5Q=
Subject key identifier:   C3:53:C7:CD:3C:E6:CC:64:68:B0:9C:C3:3C:D2:46:43:B7:5A:B2:30
Certificate issuer:       /CN=F3698D7241A7709C231EAE882D9687C76C4BD16A
Certificate serial:       1E7D3CD0C29DFDBEE6E5FEA9A63EEA2A53544588
Authority key identifier: F3:69:8D:72:41:A7:70:9C:23:1E:AE:88:2D:96:87:C7:6C:4B:D1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/323830343a336130383a3a2f33322d313238203d3e20323636303636.roa
Signing time:             Thu 04 Apr 2024 22:33:24 +0000
ROA not before:           Thu 04 Apr 2024 22:28:24 +0000
ROA not after:            Thu 03 Apr 2025 22:33:24 +0000
asID:                     266066
IP address blocks:        2804:3a08::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7d:3c:d0:c2:9d:fd:be:e6:e5:fe:a9:a6:3e:ea:2a:53:54:45:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698D7241A7709C231EAE882D9687C76C4BD16A
        Validity
            Not Before: Apr  4 22:28:24 2024 GMT
            Not After : Apr  3 22:33:24 2025 GMT
        Subject: CN=C353C7CD3CE6CC6468B09CC33CD24643B75AB230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:82:eb:70:0e:5d:a4:16:1b:de:59:e2:5a:
                    98:48:d3:fe:8a:62:d3:13:32:99:d6:40:e8:36:c9:
                    0a:e2:87:f8:a6:0b:2d:ed:60:6b:a9:da:34:25:fe:
                    20:8f:b0:7d:62:58:a8:ca:ff:20:79:3f:2b:07:16:
                    59:c8:b9:0a:a7:fb:c4:e9:80:c1:ba:2e:7c:6d:68:
                    20:8c:cc:9d:f5:d2:0f:9b:91:5c:41:5e:f2:b9:47:
                    78:7f:5e:32:bd:89:d6:b5:dc:c6:c7:c7:71:85:dd:
                    8b:98:b2:08:db:0d:44:44:71:18:8c:9f:a5:78:61:
                    f4:b7:d9:ec:86:a2:a2:4b:25:80:c9:8c:4a:f7:56:
                    15:09:aa:ef:d2:84:9b:f7:e8:24:9c:5d:7d:b5:c3:
                    93:ac:bd:dd:e2:dc:88:4f:30:13:68:89:e2:92:f7:
                    c8:6b:91:70:53:48:e3:12:0f:66:65:ba:88:73:ad:
                    88:7a:05:ed:7b:ea:75:37:fd:d0:f3:b4:a6:22:7e:
                    2f:c7:a3:72:21:14:66:7f:71:73:b8:bb:69:bd:22:
                    11:9f:35:80:12:5e:b0:32:76:bd:8a:d8:6f:d8:41:
                    27:f5:f1:bd:d2:5b:75:e9:ee:9b:30:6c:99:55:0e:
                    00:c3:2a:bf:00:09:dc:a6:06:4b:bf:28:b4:86:19:
                    dc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:53:C7:CD:3C:E6:CC:64:68:B0:9C:C3:3C:D2:46:43:B7:5A:B2:30
            X509v3 Authority Key Identifier:
                keyid:F3:69:8D:72:41:A7:70:9C:23:1E:AE:88:2D:96:87:C7:6C:4B:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/323830343a336130383a3a2f33322d313238203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a08::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:5a:2e:66:fd:86:dd:28:9b:35:fa:c7:fa:e4:ab:6d:4e:18:
         dd:de:ea:e4:b7:11:aa:12:78:95:a6:ef:45:d1:3f:68:b5:47:
         35:68:5a:11:44:8b:60:83:71:24:84:8d:0e:4b:03:64:f3:31:
         61:83:d1:bd:76:5d:42:83:2b:53:a0:e3:23:21:35:9e:ea:0e:
         8b:00:fb:7b:78:bd:09:5e:8c:d2:0f:f2:56:cb:fd:47:cb:9e:
         7a:1b:a1:7a:74:38:6b:b0:2a:64:47:e0:07:b0:ae:64:16:74:
         5b:21:6d:4e:04:ba:cc:80:9b:38:91:32:99:8b:59:4e:34:31:
         8c:83:33:84:e5:6f:26:c6:fc:fb:38:3b:7e:3a:e0:1c:ee:3f:
         3f:50:84:90:ef:d0:5c:30:3c:43:e4:9d:b8:8d:20:79:86:ed:
         2a:cb:2b:79:44:92:b1:69:c8:a7:b0:a1:cc:24:f7:d2:51:ed:
         04:8c:fc:1a:7a:3d:c5:55:6a:85:e2:fe:61:06:30:6f:7e:1a:
         f3:c7:c8:bf:a0:8c:58:17:dc:6f:a5:1b:21:16:2e:ae:51:4c:
         a9:98:12:4e:10:41:78:73:6b:68:f6:80:93:92:fb:d4:25:f7:
         1e:cd:66:eb:a3:65:c0:72:de:18:39:38:ac:ca:f8:0a:9d:90:
         8b:3c:7d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 18:06:48 2024 by rpki-client on console-fra.rpki-client.org