Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a383030303a3a2f33332d3333203d3e20323730393436.roa
File:                     323830343a373365633a383030303a3a2f33332d3333203d3e20323730393436.roa (raw, json)
Hash identifier:          FnPrWLdR9d1i9RuUvJBYjczoIwNPLSrW3muxCPShUE4=
Subject key identifier:   73:3F:8F:68:4D:59:73:4A:BF:AB:F5:BA:65:A7:72:FD:E9:B8:E3:EE
Certificate issuer:       /CN=52699658780E9F763780991668B33774ACEDCAE9
Certificate serial:       13964C967979127F93482BCAAF5F28BF06E5CC28
Authority key identifier: 52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a383030303a3a2f33332d3333203d3e20323730393436.roa
Signing time:             Thu 04 Apr 2024 06:49:08 +0000
ROA not before:           Thu 04 Apr 2024 06:44:08 +0000
ROA not after:            Thu 03 Apr 2025 06:49:08 +0000
asID:                     270946
IP address blocks:        2804:73ec:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:96:4c:96:79:79:12:7f:93:48:2b:ca:af:5f:28:bf:06:e5:cc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52699658780E9F763780991668B33774ACEDCAE9
        Validity
            Not Before: Apr  4 06:44:08 2024 GMT
            Not After : Apr  3 06:49:08 2025 GMT
        Subject: CN=733F8F684D59734ABFABF5BA65A772FDE9B8E3EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:33:64:d5:48:52:28:e8:1e:74:26:9b:44:
                    59:73:57:b6:a4:97:95:1b:4b:51:02:39:a5:b3:9a:
                    d3:51:82:6d:9e:58:04:a6:0d:ec:8b:32:73:28:3c:
                    8c:52:0d:0c:18:fe:a6:a6:ba:c3:c6:19:8e:ec:c2:
                    6b:18:98:db:c5:da:55:77:1e:9e:9c:5c:81:1d:ed:
                    c9:ec:12:37:39:79:d8:94:c7:6b:ca:91:35:9d:b4:
                    91:58:df:4d:25:e0:3e:85:b6:20:e3:51:38:0e:10:
                    7d:a6:af:91:92:c4:26:59:63:8e:4f:36:16:3f:91:
                    63:ee:ee:e9:d4:a8:75:f9:64:a0:56:81:4f:10:d5:
                    7b:20:e2:67:7d:ce:c7:10:22:18:45:67:a2:6b:df:
                    e2:c2:56:86:2c:5a:c9:a7:95:9c:c5:44:d0:92:fc:
                    bb:1a:d5:9c:7d:6d:2e:1a:9a:14:c7:9e:52:ba:21:
                    33:32:52:5a:1e:c2:14:35:f5:81:d0:ba:d0:9a:df:
                    d1:82:7d:83:7d:99:96:2f:12:26:11:e8:d5:a0:4f:
                    f7:13:ba:c5:80:84:d6:fb:56:d7:5a:e2:4c:19:0a:
                    0e:ac:f3:21:2e:e0:30:2e:98:b2:30:e9:3b:5c:fc:
                    db:7d:98:e9:f9:44:93:4e:9f:3d:db:8b:06:ab:31:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3F:8F:68:4D:59:73:4A:BF:AB:F5:BA:65:A7:72:FD:E9:B8:E3:EE
            X509v3 Authority Key Identifier:
                keyid:52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a383030303a3a2f33332d3333203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:bd:ec:45:3b:8c:20:65:10:5d:6b:86:3b:30:bc:5a:86:
         6f:74:df:ae:96:3c:f9:96:d1:b5:ec:8d:75:c8:41:08:86:12:
         97:62:f0:1b:ff:4f:96:90:b5:ce:00:0a:4c:9a:b2:b5:57:fb:
         5c:b2:2e:6b:67:57:05:e5:c1:7b:d6:fb:ab:12:9b:e7:11:ea:
         24:05:51:3e:fa:ce:ab:4d:08:5a:a4:26:81:04:b9:a1:5f:b6:
         3b:52:7e:8a:62:b2:8e:90:1b:bd:4a:28:a4:30:bc:d8:15:fa:
         e4:02:a6:63:56:3d:fb:90:b1:22:35:10:90:8a:c9:4b:86:22:
         1f:dc:2d:4d:bb:29:3b:c0:f2:cb:a0:0d:0e:13:7f:78:3f:07:
         69:41:0f:d9:bc:05:7e:94:6d:21:25:28:82:d4:6a:32:00:58:
         94:1d:6c:37:17:e1:3a:09:0d:ae:3e:4c:bc:25:ff:23:cf:a7:
         49:02:6d:8f:14:3c:3b:d1:18:b6:7e:c3:67:36:3f:8b:92:70:
         8d:46:b9:ab:cd:d8:d7:b4:94:7a:9d:08:46:24:e8:1a:58:ab:
         81:3f:c4:1b:40:5b:e8:05:f6:04:ca:ef:40:fa:98:08:a2:e8:
         9f:f0:7c:ad:75:c8:63:c5:d5:2f:55:5d:5d:8a:f8:ba:d9:d4:
         1c:23:f5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 03:32:09 2024 by rpki-client on console-fra.rpki-client.org