Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/1/323830343a376538383a3a2f33322d313238203d3e20323731363330.roa
File:                     323830343a376538383a3a2f33322d313238203d3e20323731363330.roa (raw, json)
Hash identifier:          60pFqfYj7YHDZvH4C69r1cYZ4tCoU2rih/7CmcBnBL8=
Subject key identifier:   51:65:5F:40:26:16:29:76:57:A7:DD:58:FD:39:44:62:CC:FF:BA:8E
Certificate issuer:       /CN=EBA789C1A33CAB9D8FE16BD0087BF78CB13CDB98
Certificate serial:       671D6E88FF34D99FCA62C3BFD46D54E2FB9E4A31
Authority key identifier: EB:A7:89:C1:A3:3C:AB:9D:8F:E1:6B:D0:08:7B:F7:8C:B1:3C:DB:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA789C1A33CAB9D8FE16BD0087BF78CB13CDB98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/1/323830343a376538383a3a2f33322d313238203d3e20323731363330.roa
Signing time:             Thu 04 Apr 2024 02:35:56 +0000
ROA not before:           Thu 04 Apr 2024 02:30:56 +0000
ROA not after:            Thu 03 Apr 2025 02:35:56 +0000
asID:                     271630
IP address blocks:        2804:7e88::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1d:6e:88:ff:34:d9:9f:ca:62:c3:bf:d4:6d:54:e2:fb:9e:4a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA789C1A33CAB9D8FE16BD0087BF78CB13CDB98
        Validity
            Not Before: Apr  4 02:30:56 2024 GMT
            Not After : Apr  3 02:35:56 2025 GMT
        Subject: CN=51655F402616297657A7DD58FD394462CCFFBA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:13:fe:ee:a4:85:ff:cb:fc:04:c7:27:a0:73:
                    e4:55:ba:37:4a:c7:c5:61:0f:de:2e:14:a6:98:c7:
                    05:d8:56:56:9f:2e:84:29:b8:92:c8:ef:2c:83:1d:
                    2e:fa:46:f4:f0:9c:e9:31:1c:36:61:59:64:eb:17:
                    a3:37:16:48:ed:e0:1b:7b:29:77:fa:11:0d:57:0a:
                    7b:6f:a3:2f:e1:9c:b9:a6:e9:dc:a9:6b:65:e8:56:
                    c8:a4:ce:55:86:4c:cb:bf:7d:bd:a4:2e:85:12:9b:
                    0a:12:02:48:39:d9:6e:b3:da:ce:97:56:39:9b:d3:
                    be:09:e1:2d:aa:22:40:ea:57:a1:44:b7:40:67:e5:
                    fe:eb:04:f6:04:8b:00:28:31:f1:b6:3f:9c:90:b9:
                    a3:bc:75:8c:fc:79:77:d1:37:71:2c:a3:82:f4:cd:
                    6c:a7:7c:cb:25:f5:a9:86:1c:f3:b3:91:3c:d9:ef:
                    fb:34:a9:22:39:ab:27:a1:f2:b7:18:37:a9:44:8b:
                    05:10:97:a7:51:ae:4d:9e:6e:93:a0:99:e3:8d:e0:
                    5e:bb:ee:60:56:97:bf:71:8e:95:19:4a:26:9c:bd:
                    30:88:02:3d:07:5c:13:ff:de:f2:47:12:89:e1:d5:
                    e3:a0:64:91:9d:9a:bb:e2:3d:b9:8c:3d:21:aa:a2:
                    6c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:65:5F:40:26:16:29:76:57:A7:DD:58:FD:39:44:62:CC:FF:BA:8E
            X509v3 Authority Key Identifier:
                keyid:EB:A7:89:C1:A3:3C:AB:9D:8F:E1:6B:D0:08:7B:F7:8C:B1:3C:DB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/1/EBA789C1A33CAB9D8FE16BD0087BF78CB13CDB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA789C1A33CAB9D8FE16BD0087BF78CB13CDB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/1/323830343a376538383a3a2f33322d313238203d3e20323731363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:e5:a2:2a:3d:48:a0:73:c8:0d:a5:78:89:66:ea:20:cd:71:
         06:e8:dc:4e:aa:d1:52:96:c4:15:06:a1:af:e6:c4:d1:81:26:
         12:0b:b2:56:1f:6a:cc:41:a1:a8:ee:f8:fc:ca:09:73:90:f0:
         bc:28:c9:f7:c3:31:bd:e9:15:e0:a7:03:3f:17:d5:10:be:ef:
         58:e1:1a:69:4f:45:8e:ce:ed:d5:15:38:2a:49:6e:e8:13:e5:
         df:ae:88:66:6d:12:e5:78:f6:75:2b:6c:92:07:11:f0:38:2f:
         83:cc:3c:12:7f:bf:92:47:c7:cd:0a:49:85:87:5d:c3:36:fe:
         66:23:c4:42:13:d0:30:58:27:37:6b:eb:72:54:04:39:01:da:
         30:70:1d:d7:30:d8:91:36:ab:b3:0f:e4:28:8a:42:e0:67:58:
         96:a0:99:d2:61:b7:11:e3:e6:1b:a0:95:78:b2:07:ca:7d:e4:
         38:ac:67:a4:73:09:cd:f3:33:2e:37:44:be:57:f7:1d:b6:64:
         cb:99:da:ed:ed:d3:a1:00:e7:51:24:77:51:be:d1:ed:6d:7b:
         53:44:5d:03:99:3b:60:90:4a:3c:3a:28:a7:4e:2c:95:99:d5:
         0e:73:db:27:c9:83:25:d9:3d:47:92:08:7b:2a:44:76:ba:42:
         17:c4:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 18:10:28 2024 by rpki-client on console-ams.rpki-client.org