Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/323830343a376339303a343030303a3a2f33342d3334203d3e20323731353034.roa
File:                     323830343a376339303a343030303a3a2f33342d3334203d3e20323731353034.roa (raw, json)
Hash identifier:          4TM2egpENBcifIjJ1DhUUQwSOSUcaCb6wj5sw6pHFZc=
Subject key identifier:   A8:41:D9:A9:14:46:68:11:F2:74:1A:FB:E1:AD:04:8E:1B:88:FC:3C
Certificate issuer:       /CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
Certificate serial:       71BAB8767B726B0FD0E0151BBD4B398EFA458259
Authority key identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/323830343a376339303a343030303a3a2f33342d3334203d3e20323731353034.roa
Signing time:             Fri 20 Sep 2024 12:47:50 +0000
ROA not before:           Fri 20 Sep 2024 12:42:50 +0000
ROA not after:            Fri 19 Sep 2025 12:47:50 +0000
asID:                     271504
IP address blocks:        2804:7c90:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ba:b8:76:7b:72:6b:0f:d0:e0:15:1b:bd:4b:39:8e:fa:45:82:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
        Validity
            Not Before: Sep 20 12:42:50 2024 GMT
            Not After : Sep 19 12:47:50 2025 GMT
        Subject: CN=A841D9A914466811F2741AFBE1AD048E1B88FC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:3a:5b:77:b8:be:3e:de:f2:14:12:22:ad:
                    81:1e:24:63:e4:66:bf:5e:6f:bd:ce:50:9a:83:5f:
                    ea:21:4a:be:e7:8d:ef:3f:a4:57:1b:de:88:63:5a:
                    4a:76:6f:55:02:eb:ab:ad:2c:b5:50:c4:c4:63:0f:
                    c7:56:d5:26:a5:f8:89:5c:17:d0:06:c9:27:9a:75:
                    14:c5:7f:57:98:a6:83:47:23:44:05:43:47:77:f5:
                    c3:7c:1c:00:a2:2e:7a:f6:7f:83:ad:25:92:22:af:
                    7f:45:4a:3e:9e:53:2b:63:78:24:5d:8d:7c:8f:40:
                    26:70:be:af:d0:03:21:45:c1:29:65:3e:0f:9b:bb:
                    09:fd:28:26:3c:e1:e1:ff:25:21:17:80:6f:3b:a9:
                    70:a1:79:aa:30:c6:98:d8:36:c9:45:7f:94:b9:54:
                    a0:e3:33:a8:4e:ec:8a:d9:28:da:37:48:bb:db:0f:
                    68:3f:c1:91:04:6f:71:36:40:ee:b7:ef:c6:23:5c:
                    df:6d:5d:ff:55:74:34:07:7d:b0:75:fa:a4:30:06:
                    62:29:55:42:53:9f:27:0b:a6:ac:54:6e:b7:72:38:
                    e7:3b:f3:14:71:20:28:ab:fd:36:bd:f9:d9:cc:5f:
                    3f:98:98:fc:41:fd:21:ef:b3:98:7f:79:94:a4:ff:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:41:D9:A9:14:46:68:11:F2:74:1A:FB:E1:AD:04:8E:1B:88:FC:3C
            X509v3 Authority Key Identifier:
                keyid:8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/323830343a376339303a343030303a3a2f33342d3334203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c90:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:24:3f:4d:8c:e8:3e:f0:8e:9d:1d:52:f1:cb:c4:47:ff:33:
         0e:c9:cd:3e:d9:0c:46:49:fa:01:8e:33:8f:98:19:02:55:1f:
         55:32:05:32:5a:57:78:83:61:69:47:98:ab:2e:e9:8e:f2:b4:
         16:71:d7:ec:6a:15:a3:e0:e0:30:73:7b:25:a6:a0:e4:69:5d:
         1a:19:33:14:df:3b:5a:0c:a2:0d:47:1e:14:2f:58:90:62:f6:
         c9:a3:52:61:0a:17:0b:9e:95:36:00:ca:2e:a7:e2:c7:9d:ea:
         e6:6e:04:92:da:d0:0a:db:56:c6:8a:bf:88:ca:51:e2:46:ee:
         14:1a:2d:df:ba:38:5b:16:ad:12:85:6d:ec:3a:c6:f4:77:75:
         f1:f5:00:cb:06:64:3a:86:7b:56:60:2c:1d:fe:3a:94:98:61:
         2b:64:26:ac:d0:72:71:b6:77:47:6f:f7:f0:fe:b9:38:0d:93:
         80:c5:d9:67:33:ca:1c:3c:71:9b:02:7e:e3:f9:5f:38:36:e8:
         e7:82:52:33:4d:93:9f:fe:79:7a:2d:8f:4c:98:da:c3:cc:3c:
         53:40:80:5a:aa:d4:71:04:4a:59:b9:cc:f2:52:58:be:e2:84:
         a5:c2:bb:98:de:64:d9:c1:33:c3:b2:78:71:73:37:3f:c5:35:
         04:f3:d8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:29:21 2024 by rpki-client on console-fra.rpki-client.org