Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a383030303a3a2f33342d3334203d3e20323636303232.roa
File:                     323830343a333934343a383030303a3a2f33342d3334203d3e20323636303232.roa (raw, json)
Hash identifier:          3d1r1uFzqxXQMribh2xG8cxPTA1TUy6OUE1ybqNZ3HM=
Subject key identifier:   B0:EA:80:8A:6E:A6:F8:7D:B5:69:BB:0E:35:B9:DB:CB:81:C4:DC:B4
Certificate issuer:       /CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
Certificate serial:       5C0B5229C64F7DD6C1B68E27AA3D13DA6E5F158C
Authority key identifier: 63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a383030303a3a2f33342d3334203d3e20323636303232.roa
Signing time:             Tue 05 Nov 2024 14:47:39 +0000
ROA not before:           Tue 05 Nov 2024 14:42:39 +0000
ROA not after:            Tue 04 Nov 2025 14:47:39 +0000
asID:                     266022
IP address blocks:        2804:3944:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0b:52:29:c6:4f:7d:d6:c1:b6:8e:27:aa:3d:13:da:6e:5f:15:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
        Validity
            Not Before: Nov  5 14:42:39 2024 GMT
            Not After : Nov  4 14:47:39 2025 GMT
        Subject: CN=B0EA808A6EA6F87DB569BB0E35B9DBCB81C4DCB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:97:b5:c0:1a:8c:f8:81:98:b7:76:2c:4a:
                    50:5a:36:27:91:70:3f:42:cc:63:6b:99:ec:ca:ae:
                    48:2f:40:73:ff:99:55:d1:80:28:39:84:e7:77:d5:
                    bd:99:ff:01:61:8b:5d:de:9c:32:ac:0f:eb:6f:4e:
                    d0:3e:f6:15:50:33:29:2e:60:4e:4b:e1:57:fa:b4:
                    32:94:4a:d3:c1:6c:9c:14:2b:cd:f4:de:2d:56:0d:
                    6c:2c:8d:83:31:ab:d5:52:9e:9d:f1:82:09:12:5c:
                    27:70:7a:61:6d:1e:c9:39:8b:d7:1d:66:80:f5:62:
                    2b:8c:eb:a4:3c:7a:59:f2:81:41:2f:59:07:a4:ff:
                    b5:03:64:73:81:5d:5e:b7:6a:60:05:5a:ab:1b:89:
                    a1:22:fd:8b:3e:0a:ff:b5:ad:e3:e6:0a:b2:98:61:
                    32:d0:1b:85:ea:3a:3f:61:ea:4d:9b:6f:48:74:ea:
                    55:45:ce:82:14:0b:f0:bd:e6:3a:89:1b:c9:02:48:
                    46:50:6f:46:14:ab:2c:8e:53:59:fc:cb:1a:39:37:
                    0f:e7:93:78:b6:c0:4a:b5:1c:25:99:7a:f2:ee:68:
                    2c:68:0a:c2:d5:59:cc:37:bb:1d:bd:32:d8:29:cd:
                    18:54:8d:68:7d:ef:28:db:30:da:4e:03:38:0a:50:
                    47:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EA:80:8A:6E:A6:F8:7D:B5:69:BB:0E:35:B9:DB:CB:81:C4:DC:B4
            X509v3 Authority Key Identifier:
                keyid:63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a383030303a3a2f33342d3334203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3944:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:2a:87:d3:a0:e2:72:e5:8b:ed:66:bc:f5:f9:a9:e4:c2:f5:
         df:92:ca:de:b6:94:21:50:1a:21:d9:63:50:ff:a4:d6:48:b9:
         68:b7:13:70:8f:77:ff:62:6d:b5:a3:d6:41:88:64:f6:96:33:
         4e:64:23:ae:56:e2:92:8f:64:31:09:ec:9e:4f:80:c6:de:32:
         b2:8d:93:5c:94:42:e8:f4:3f:93:9b:a7:5d:4e:a9:a5:a0:49:
         7a:1c:4f:bf:80:7a:2a:f7:34:ee:59:1e:48:ac:df:28:50:fa:
         95:a9:ed:a2:00:57:a1:fa:81:a6:b2:8e:18:80:6b:03:35:b2:
         de:ca:e2:ec:f1:2b:ba:10:96:f2:af:45:8b:84:5a:01:70:23:
         ee:82:e6:ed:3a:a9:b0:eb:92:3e:dc:34:3c:73:e2:fc:38:9d:
         d1:10:e1:bb:ae:76:8c:04:fd:a0:1b:d7:66:f5:ed:2d:81:04:
         50:b0:b8:f9:98:c5:b7:29:f0:40:2e:7b:2e:8c:58:90:12:08:
         2f:6f:6c:3b:e8:22:13:fc:ba:34:91:44:78:b8:44:87:27:87:
         89:cc:27:64:1a:ff:a7:fb:3c:a4:0d:e9:f0:95:70:6a:9c:46:
         45:f5:d3:8a:91:bc:25:24:b3:61:b6:79:c9:ae:2e:2c:f7:fe:
         01:08:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 11:26:54 2024 by rpki-client on console-ams.rpki-client.org