Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33322d3332203d3e20323732353636.roa
File:                     323830343a383533633a3a2f33322d3332203d3e20323732353636.roa (raw, json)
Hash identifier:          9GhXkOGs3yAfswx3K+gMDj6BRmiSb3PYN9cBSU8pZnE=
Subject key identifier:   70:D5:8C:EF:AE:C8:B3:0C:DF:B8:24:88:B2:60:CC:CF:15:A4:E0:70
Certificate issuer:       /CN=BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73
Certificate serial:       394F3999A2D0BC0F9818183ECFDAD21360540D9D
Authority key identifier: BC:16:6A:86:44:14:AD:D4:DC:D8:CD:B1:AC:BB:6C:48:E8:CF:6A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33322d3332203d3e20323732353636.roa
Signing time:             Wed 10 Jul 2024 13:59:32 +0000
ROA not before:           Wed 10 Jul 2024 13:54:32 +0000
ROA not after:            Wed 09 Jul 2025 13:59:32 +0000
asID:                     272566
IP address blocks:        2804:853c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4f:39:99:a2:d0:bc:0f:98:18:18:3e:cf:da:d2:13:60:54:0d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73
        Validity
            Not Before: Jul 10 13:54:32 2024 GMT
            Not After : Jul  9 13:59:32 2025 GMT
        Subject: CN=70D58CEFAEC8B30CDFB82488B260CCCF15A4E070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:fe:b2:ec:03:79:6e:b1:8d:e9:56:86:e5:
                    fb:8a:1c:44:7c:a7:01:ef:d5:cc:d3:f3:5f:b6:66:
                    41:13:c3:a4:f4:9a:61:3c:97:2d:57:04:6a:db:77:
                    29:e5:14:59:ee:25:a4:72:1a:9c:ea:f6:8b:e5:7b:
                    ec:d4:36:44:2f:36:0b:88:a7:90:13:ab:6b:ce:d0:
                    59:6e:b4:c9:67:8c:0e:60:63:74:50:1c:88:c2:20:
                    a1:38:db:ec:34:3a:84:9c:9d:b1:59:ab:d0:bc:0b:
                    3a:13:43:f0:b2:e6:59:35:d4:41:53:ba:c0:76:66:
                    f9:98:c4:44:ce:88:47:ef:d9:30:4e:89:11:0c:9f:
                    68:df:ba:cd:45:a7:c4:78:b0:fa:01:0d:fc:02:37:
                    75:1e:ff:78:ca:07:b8:90:b6:dd:6f:63:c3:36:3c:
                    a8:e3:94:8c:df:ae:e4:7a:64:6a:e6:57:86:0c:8a:
                    4b:80:d4:e5:3b:e0:0c:cc:c2:95:cb:c2:22:94:eb:
                    f8:5d:4c:b0:e0:06:1c:52:23:db:15:5c:06:cb:49:
                    c6:04:62:c7:78:66:a9:68:73:a1:e0:06:07:25:c7:
                    c4:59:42:73:bf:2b:8f:66:02:4e:00:03:b3:c3:4d:
                    31:94:f8:d6:54:c5:03:12:12:35:c2:61:52:5a:bb:
                    3c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D5:8C:EF:AE:C8:B3:0C:DF:B8:24:88:B2:60:CC:CF:15:A4:E0:70
            X509v3 Authority Key Identifier:
                keyid:BC:16:6A:86:44:14:AD:D4:DC:D8:CD:B1:AC:BB:6C:48:E8:CF:6A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33322d3332203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:05:ff:a1:61:9d:64:73:b3:7f:5c:05:9c:04:74:07:1e:65:
         fa:29:c6:14:56:a9:8f:fb:a2:85:c3:5e:70:0f:60:73:76:8c:
         6f:13:e3:58:2e:ab:51:93:fa:46:37:c4:da:13:9a:e8:66:3a:
         2d:7a:97:d4:a7:e1:a2:b6:ce:67:0f:09:d5:68:cf:87:79:bc:
         96:99:03:65:14:e0:c4:af:42:7f:19:58:92:f6:f5:e8:a0:3f:
         d0:41:fd:6e:06:c2:44:fc:c8:2d:f5:7b:8d:7b:80:a6:ee:7b:
         bf:ac:3c:d4:e2:e8:99:64:16:2d:9c:aa:a6:0a:37:c2:d1:df:
         bd:f5:92:d4:92:21:af:62:cf:a0:35:8d:9c:d0:c6:c0:db:1e:
         70:88:a7:09:ed:b4:61:96:78:9b:86:f0:d0:cc:3e:7d:22:ab:
         3d:bd:58:3c:e7:31:b4:c9:0c:b0:10:62:49:b7:29:38:78:b4:
         0e:c5:53:8e:e7:d4:1e:bf:24:f9:59:c0:f0:42:80:2e:e9:27:
         91:da:e3:2a:21:43:ee:3e:4e:54:9c:99:a7:8e:f2:ab:24:1f:
         51:6d:2a:21:8f:9d:1d:2c:16:6f:42:88:af:03:49:a8:b3:4f:
         79:9a:f9:6f:1e:b6:57:57:c5:e9:5d:f8:5f:e5:98:39:32:e9:
         b4:de:b5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 06:28:42 2024 by rpki-client on console-ams.rpki-client.org