Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/323830343a363538633a383030303a3a2f33342d3334203d3e20323639343939.roa
File:                     323830343a363538633a383030303a3a2f33342d3334203d3e20323639343939.roa (raw, json)
Hash identifier:          XDOpxZWY6YGRCBEUnbm6CCe2bD9qvxQPCSkFLH9PcIA=
Subject key identifier:   76:7F:C4:58:A7:28:F9:09:1E:9A:01:AF:FD:C3:4C:AF:1F:04:CE:0B
Certificate issuer:       /CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
Certificate serial:       356E42EDDF2AA4E9D131FABB614F6BFAF2056205
Authority key identifier: 21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/323830343a363538633a383030303a3a2f33342d3334203d3e20323639343939.roa
Signing time:             Thu 05 Sep 2024 19:37:13 +0000
ROA not before:           Thu 05 Sep 2024 19:32:13 +0000
ROA not after:            Thu 04 Sep 2025 19:37:13 +0000
asID:                     269499
IP address blocks:        2804:658c:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6e:42:ed:df:2a:a4:e9:d1:31:fa:bb:61:4f:6b:fa:f2:05:62:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
        Validity
            Not Before: Sep  5 19:32:13 2024 GMT
            Not After : Sep  4 19:37:13 2025 GMT
        Subject: CN=767FC458A728F9091E9A01AFFDC34CAF1F04CE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:88:0c:68:25:03:b9:87:71:e8:00:93:0c:
                    3b:ea:f4:7c:7b:9d:b1:bf:42:a6:a6:28:f1:80:de:
                    1b:26:74:e7:5d:70:d9:bc:59:f8:1b:5b:c5:ca:c1:
                    61:f7:64:38:ce:1a:fc:aa:73:b6:d5:80:4f:2a:64:
                    12:a6:fb:eb:73:66:1d:00:e0:f4:6c:b2:22:58:65:
                    7b:3d:89:ef:bb:96:d7:ed:70:20:de:e5:81:1e:73:
                    a7:1c:b5:c4:64:1b:48:3a:0e:93:c8:6a:ad:aa:f3:
                    fc:5f:b3:80:c5:a9:cd:43:31:92:bb:11:4b:c6:00:
                    8c:46:f6:aa:d8:9c:d8:e5:80:e7:7f:4b:0e:94:28:
                    34:4d:48:fa:5d:f1:6c:1d:90:1c:47:d1:8c:63:b9:
                    8d:0d:2d:68:55:b4:7e:2c:aa:ff:02:32:e7:7f:7e:
                    d4:10:45:91:d1:0b:8f:2c:e9:fe:b6:ea:f5:31:6b:
                    33:f4:b9:29:c0:09:8a:d2:e7:c9:71:40:06:69:44:
                    04:ee:2d:2b:ae:fa:5f:83:93:0a:6f:b8:29:40:43:
                    6f:e2:c8:f8:87:b6:a5:01:c1:f5:82:41:15:33:b2:
                    96:29:46:b3:3f:92:93:7e:cd:b3:46:b9:5f:cd:56:
                    7e:30:e5:ac:85:0e:e0:48:57:7c:d5:37:6a:33:50:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7F:C4:58:A7:28:F9:09:1E:9A:01:AF:FD:C3:4C:AF:1F:04:CE:0B
            X509v3 Authority Key Identifier:
                keyid:21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/323830343a363538633a383030303a3a2f33342d3334203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:84:26:59:32:ec:72:bb:9b:ab:4f:85:ae:ce:2b:23:80:13:
         e5:a3:61:73:8d:2a:a6:ed:8a:ce:4a:84:9a:2d:92:52:67:d1:
         0d:7c:60:8e:a6:a2:fe:ca:ad:67:0e:bd:b6:94:4e:fc:c1:b0:
         ab:16:af:cb:4a:7b:81:14:de:97:78:ae:00:3c:3b:77:5f:63:
         3d:28:4f:f6:3e:58:43:b0:11:d9:ff:b6:b4:dc:90:bb:28:4c:
         5f:fb:41:0b:50:f6:b0:7d:f8:39:b0:f9:16:af:51:26:9c:27:
         11:27:32:e3:70:75:53:fb:b3:71:7e:a4:ac:1f:15:2e:70:a6:
         d9:d0:dc:7d:f4:cc:e5:ce:a8:ae:93:48:9f:a6:2c:26:a3:05:
         59:99:91:15:47:8c:94:d7:ba:3f:55:c7:7f:3b:a8:a6:57:4d:
         a0:ee:a8:13:00:26:15:ff:89:b4:02:a9:96:97:23:11:60:ac:
         28:32:77:e2:d6:27:33:37:5b:b7:e5:57:74:82:f9:d2:bc:84:
         f0:b0:42:2f:31:e7:32:24:8d:4f:dc:d2:44:b7:0b:86:77:77:
         9e:5b:b9:9a:95:0b:3e:0f:f0:52:ac:09:a1:37:14:e3:b8:a7:
         3a:61:36:0a:a7:bc:c3:fa:0f:99:aa:5f:06:f2:27:d0:52:d9:
         af:25:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:49:48 2024 by rpki-client on console-ams.rpki-client.org