Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3130303a3a2f34302d3430203d3e20323633343231.roa
File:                     323830343a313630303a3130303a3a2f34302d3430203d3e20323633343231.roa (raw, json)
Hash identifier:          4WrNs5sF6WJj3U8LkVe96NTMxTU3xah6eyEdnNxCImE=
Subject key identifier:   EB:02:7C:59:3A:85:25:72:FA:58:E3:C6:0A:CA:20:87:2B:18:F6:09
Certificate issuer:       /CN=A0FF9A83436226FF19D020B34271420BD55D7D05
Certificate serial:       60C43423FBC897B2846403494BB8607416809D6F
Authority key identifier: A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3130303a3a2f34302d3430203d3e20323633343231.roa
Signing time:             Thu 25 Jul 2024 01:01:27 +0000
ROA not before:           Thu 25 Jul 2024 00:56:27 +0000
ROA not after:            Thu 24 Jul 2025 01:01:27 +0000
asID:                     263421
IP address blocks:        2804:1600:100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c4:34:23:fb:c8:97:b2:84:64:03:49:4b:b8:60:74:16:80:9d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0FF9A83436226FF19D020B34271420BD55D7D05
        Validity
            Not Before: Jul 25 00:56:27 2024 GMT
            Not After : Jul 24 01:01:27 2025 GMT
        Subject: CN=EB027C593A852572FA58E3C60ACA20872B18F609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:70:ab:38:72:4e:7e:87:21:81:ba:29:6b:
                    34:93:d2:4b:d7:8f:5f:48:f1:71:04:42:c4:60:8b:
                    88:e5:a6:8b:35:2c:ab:fc:6a:ea:e8:2e:37:a2:47:
                    08:d0:af:d8:1f:c5:c2:e5:a3:b2:2d:96:63:18:ad:
                    82:be:f4:ae:c5:ac:ff:24:38:b6:32:ab:58:4f:14:
                    1f:08:3b:17:2a:44:4c:be:87:35:78:61:08:3e:c5:
                    84:01:ff:7b:27:77:4a:72:d7:3d:55:16:62:73:6d:
                    7f:de:c0:69:13:72:7a:f5:5e:02:40:f9:0c:64:5e:
                    23:71:2e:a1:9b:d1:e5:0f:ba:60:91:b5:31:cb:43:
                    a5:f9:d0:d1:0e:75:cc:71:8c:b3:c8:f4:59:7c:78:
                    8c:56:ca:a9:c1:6f:ee:81:cb:3a:9d:b4:a1:09:bc:
                    8a:bc:d6:39:54:8e:9f:f7:59:b7:9e:2b:f5:fc:f7:
                    20:06:0a:13:e3:18:b1:b5:69:74:68:ab:73:2d:e1:
                    91:69:5d:f0:0d:64:3b:9e:4b:f4:6f:d0:97:80:b9:
                    88:9a:da:82:31:3b:07:36:2d:42:79:22:b0:fa:c5:
                    0c:9b:c2:95:51:8b:51:29:83:a0:ed:f1:e6:fa:8a:
                    19:ea:82:d4:33:83:b4:90:a1:69:0a:6b:3f:7e:90:
                    0e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:02:7C:59:3A:85:25:72:FA:58:E3:C6:0A:CA:20:87:2B:18:F6:09
            X509v3 Authority Key Identifier:
                keyid:A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3130303a3a2f34302d3430203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:62:b3:19:11:60:8d:cc:e0:12:6b:b9:b2:0f:57:7d:2c:ef:
         28:3a:81:4f:05:f0:24:ce:2c:49:9a:c5:ed:03:f8:9b:bf:d7:
         80:54:ce:31:97:e5:58:16:36:93:10:64:38:b9:b8:df:0b:f1:
         f8:4a:d5:70:c9:3b:bd:2a:2c:9c:97:e0:c9:3b:5c:d3:f4:01:
         db:8f:cd:1f:57:d6:8d:1f:33:15:fc:06:2d:dc:a9:d4:16:87:
         f7:10:9d:bf:eb:6f:f7:af:f1:1a:76:6a:ea:94:ef:a2:75:77:
         fc:21:12:c1:4b:a8:ea:f5:5e:59:ca:2d:4d:c8:c8:10:d9:ae:
         10:83:c9:19:5a:d9:27:53:2d:1c:9d:4e:d0:13:36:44:3e:78:
         85:4f:4a:5a:3b:76:bc:a2:3b:a8:4e:b6:3a:8c:2f:dd:d7:80:
         98:0c:88:1f:2b:c2:68:29:fd:5a:9b:f9:08:3c:45:61:33:82:
         8f:11:28:73:04:76:72:30:a6:54:e2:8f:01:99:5e:ba:ba:af:
         ca:e8:c7:eb:15:6f:5b:93:fa:11:81:af:20:47:34:34:2a:01:
         04:1b:02:4f:c5:f8:98:64:aa:ca:ff:8b:4a:84:4e:c1:d8:12:
         6a:92:d3:2b:2b:55:ff:a5:50:52:92:09:b3:75:1c:ad:e3:4d:
         5d:59:a6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 04:47:30 2024 by rpki-client on console-fra.rpki-client.org