Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/323830343a3230383a3a2f33322d3438203d3e20323632373839.roa
File:                     323830343a3230383a3a2f33322d3438203d3e20323632373839.roa (raw, json)
Hash identifier:          lueO9jY7YG73uDceryR9xHZeWD0DWIdkTpkyjKRmyVE=
Subject key identifier:   BC:56:A5:92:FD:A2:75:44:C1:5C:FC:D9:0D:B7:B7:F3:4B:BC:5B:3F
Certificate issuer:       /CN=8ABB6A2294CEA33843E7E6859153ED5228C357F6
Certificate serial:       4C8486F2B45A9789DC2AD7E948D0238BC99DC2D8
Authority key identifier: 8A:BB:6A:22:94:CE:A3:38:43:E7:E6:85:91:53:ED:52:28:C3:57:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB6A2294CEA33843E7E6859153ED5228C357F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/323830343a3230383a3a2f33322d3438203d3e20323632373839.roa
Signing time:             Wed 15 May 2024 19:14:35 +0000
ROA not before:           Wed 15 May 2024 19:09:35 +0000
ROA not after:            Wed 14 May 2025 19:14:35 +0000
asID:                     262789
IP address blocks:        2804:208::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:84:86:f2:b4:5a:97:89:dc:2a:d7:e9:48:d0:23:8b:c9:9d:c2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABB6A2294CEA33843E7E6859153ED5228C357F6
        Validity
            Not Before: May 15 19:09:35 2024 GMT
            Not After : May 14 19:14:35 2025 GMT
        Subject: CN=BC56A592FDA27544C15CFCD90DB7B7F34BBC5B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:26:2a:ed:7b:a1:7c:53:16:c7:fb:3c:c3:
                    55:35:a3:c7:1d:b6:9f:f5:64:03:f5:dd:92:68:36:
                    25:82:a6:83:ed:84:17:85:b5:7e:63:bb:bf:96:44:
                    6f:81:08:06:85:60:da:ab:bf:39:1c:90:93:8f:c9:
                    ac:6a:0b:04:e0:8f:6a:b7:93:66:3d:db:ea:72:05:
                    4c:d2:8c:96:82:76:58:7b:a2:ba:b0:63:09:bb:c9:
                    a4:d9:d0:cd:ce:f1:aa:8c:37:dc:e7:fe:b7:2e:e1:
                    98:d4:7b:d6:cc:16:9a:01:80:91:01:2a:cc:8f:5b:
                    16:ca:f6:3b:ea:26:a9:4b:93:f9:1e:1b:6a:0c:df:
                    0d:3f:52:df:96:6d:99:16:00:7d:32:80:e9:ab:af:
                    e7:8f:8f:76:c0:04:d4:48:2b:0a:9f:0d:37:49:91:
                    2b:c5:61:0a:62:40:59:80:27:5b:e2:ae:ec:a0:12:
                    43:4f:b0:06:6a:7e:da:45:2d:57:27:5c:20:a1:fc:
                    82:12:df:2a:46:d4:71:f9:34:5f:a9:73:ce:23:38:
                    0d:fb:69:25:09:78:63:a9:6d:29:87:db:ee:b0:ed:
                    ae:7f:b7:61:11:9d:ac:8f:d6:0f:93:59:02:02:70:
                    52:87:32:d0:e7:19:e7:56:cf:f4:03:1f:97:e9:2f:
                    6f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:56:A5:92:FD:A2:75:44:C1:5C:FC:D9:0D:B7:B7:F3:4B:BC:5B:3F
            X509v3 Authority Key Identifier:
                keyid:8A:BB:6A:22:94:CE:A3:38:43:E7:E6:85:91:53:ED:52:28:C3:57:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/8ABB6A2294CEA33843E7E6859153ED5228C357F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB6A2294CEA33843E7E6859153ED5228C357F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/323830343a3230383a3a2f33322d3438203d3e20323632373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:208::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:61:c2:db:8f:6c:4d:e6:94:dc:94:b7:4d:80:f4:9c:37:07:
         4b:77:af:d2:37:d9:c1:c7:30:46:a8:df:03:cb:2d:84:c3:30:
         a5:d3:ff:30:db:75:ff:29:31:58:95:d8:54:78:e3:d1:22:af:
         6b:bd:31:72:b9:66:23:fb:26:42:a5:a1:2d:5d:1b:c4:e2:76:
         09:f4:31:19:a8:e1:03:89:3d:1a:93:71:6d:c5:b6:78:17:9f:
         d4:34:4f:4b:83:ec:08:7a:62:8e:ea:cf:b5:c6:ae:38:18:cf:
         42:20:71:08:54:61:6e:be:39:15:60:1c:c3:a9:31:84:90:e5:
         63:94:63:ec:c0:9c:11:66:c5:64:8b:f5:15:87:b2:f1:cb:a4:
         be:0f:41:38:a2:5c:3e:5b:0f:48:0d:d8:15:70:64:4c:df:60:
         c2:25:27:59:38:13:94:e8:70:6a:51:71:2f:d6:fc:ed:66:db:
         6e:b1:1d:06:5c:ce:30:22:76:4b:03:2a:89:61:d1:6c:f2:08:
         03:41:7a:b3:30:42:a6:9a:9f:f5:2f:a7:f4:90:79:76:ce:d8:
         b2:a2:4f:a7:7a:57:16:8c:47:a1:4a:2d:16:ce:53:29:64:15:
         ae:2c:03:76:c3:d8:06:c0:d6:4d:fa:92:ae:57:fa:05:73:b3:
         ff:50:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 16:25:57 2024 by rpki-client on console-ams.rpki-client.org