Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa
File:                     323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (raw, json)
Hash identifier:          OBlbYCDNSP0hrjQo5sJ51yg+QrwH/uUtjdEkzfX8i+Q=
Subject key identifier:   DB:78:FC:05:62:50:94:F4:EE:23:F0:6D:6F:41:03:7A:A3:11:A8:12
Certificate issuer:       /CN=AD2681D1C972CA6974EFD3586F20F15D9E6AFE07
Certificate serial:       70FC3064C71E7BC0552E961F2B6BBF87B40EE7E3
Authority key identifier: AD:26:81:D1:C9:72:CA:69:74:EF:D3:58:6F:20:F1:5D:9E:6A:FE:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa
Signing time:             Fri 03 May 2024 14:18:44 +0000
ROA not before:           Fri 03 May 2024 14:13:44 +0000
ROA not after:            Fri 02 May 2025 14:18:44 +0000
asID:                     267578
IP address blocks:        2804:4398::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fc:30:64:c7:1e:7b:c0:55:2e:96:1f:2b:6b:bf:87:b4:0e:e7:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2681D1C972CA6974EFD3586F20F15D9E6AFE07
        Validity
            Not Before: May  3 14:13:44 2024 GMT
            Not After : May  2 14:18:44 2025 GMT
        Subject: CN=DB78FC05625094F4EE23F06D6F41037AA311A812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:2f:80:b0:80:94:0b:3f:1c:6c:c4:e9:31:
                    76:df:c5:35:8b:44:07:cd:06:fd:dc:21:78:4d:a4:
                    c8:68:e2:8e:40:2f:72:c0:fc:45:d4:0a:3c:77:cc:
                    3c:1b:83:38:92:85:4d:ff:8b:b6:4e:cd:b8:bf:0b:
                    37:c5:80:a1:c7:2b:7c:aa:95:2d:4f:61:71:8f:14:
                    93:22:f3:2c:bb:f4:a7:a3:e8:84:c2:48:a9:bd:e2:
                    be:f3:bb:07:1b:3e:2b:de:cd:a2:e0:46:dd:e2:0f:
                    0c:c0:79:6c:84:1a:3d:a4:0b:c3:09:75:eb:27:c2:
                    6d:ab:86:80:14:ac:4a:cf:65:a1:47:10:07:44:11:
                    9b:e5:34:ec:ec:48:fb:de:d7:58:a4:23:69:f2:a2:
                    25:4e:eb:70:31:19:f9:17:b0:a4:4a:c0:40:7f:63:
                    c7:1a:5e:e0:89:1d:ab:6d:fa:43:c1:b7:ed:5e:5a:
                    f7:43:ce:db:31:a5:c9:3e:04:55:bf:43:97:9d:6b:
                    07:49:8e:cc:10:cb:5f:86:2e:21:b2:ce:be:d0:c4:
                    8e:4e:9b:ea:f4:7e:1f:a6:43:a7:28:53:b2:cc:db:
                    45:9e:a1:07:17:a9:07:65:a9:7b:1f:3e:84:6f:3c:
                    b5:d5:14:36:01:b3:01:d4:fc:21:ff:9e:21:16:1d:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:78:FC:05:62:50:94:F4:EE:23:F0:6D:6F:41:03:7A:A3:11:A8:12
            X509v3 Authority Key Identifier:
                keyid:AD:26:81:D1:C9:72:CA:69:74:EF:D3:58:6F:20:F1:5D:9E:6A:FE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4398::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:83:12:5c:8c:51:28:13:aa:5e:14:e2:dd:ac:9d:6f:1d:
         63:f2:52:16:47:4e:0f:bb:5e:a2:1b:7e:0f:e7:26:11:c4:69:
         a4:a6:d5:2b:76:56:49:90:da:a4:29:52:63:df:f4:20:ed:a8:
         ff:1d:fa:79:26:4f:1a:8c:b3:4b:8d:eb:26:af:36:f7:65:fc:
         cf:e0:db:64:80:4c:2b:5e:82:5e:25:89:7d:89:7c:ba:6a:0a:
         2f:eb:c2:24:ea:e7:f6:dc:63:87:cf:5f:65:cb:f9:ec:26:a3:
         8b:3b:02:30:1b:76:b8:17:bd:4f:54:1c:0f:aa:f9:23:40:e1:
         25:d9:3f:4a:de:ad:73:ea:cb:09:ce:6b:2b:10:69:b6:b0:d5:
         53:78:0b:00:83:3b:f6:cf:0e:cc:60:bb:f6:f7:ca:a6:ab:48:
         59:33:d6:fd:cd:52:17:55:d8:fe:27:fb:0e:b4:a3:11:d3:6a:
         9f:0c:3d:64:07:30:bc:c1:60:62:94:b4:13:96:5a:8d:e4:c5:
         67:9d:86:ab:f9:1f:06:77:f9:79:7d:51:46:f3:9b:44:ef:df:
         16:51:a0:b2:91:d7:18:72:77:2d:47:ae:95:b0:54:7d:0b:06:
         44:72:85:f2:56:77:bd:1a:8c:3c:f6:6b:9a:83:48:d0:b4:09:
         8f:15:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org