Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DuE86YPWQEhDA5Fmjm1E6To9msGjAj7vzk3MbNzb9ePL/0/323830343a343734343a3a2f33322d313238203d3e20323637303432.roa
File:                     323830343a343734343a3a2f33322d313238203d3e20323637303432.roa (raw, json)
Hash identifier:          znqXGrUtww9AayoDIuAI7hu49KgyGfMqHLrW4q5jKx8=
Subject key identifier:   82:7C:37:BD:BA:E6:74:22:4D:5D:2E:33:C9:C9:43:CF:24:D6:32:1F
Certificate issuer:       /CN=71D717580E4D546271A7BEA164D910E156D4E1D5
Certificate serial:       1147FC09809C422A3E414D4AAB0702400457E530
Authority key identifier: 71:D7:17:58:0E:4D:54:62:71:A7:BE:A1:64:D9:10:E1:56:D4:E1:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D717580E4D546271A7BEA164D910E156D4E1D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DuE86YPWQEhDA5Fmjm1E6To9msGjAj7vzk3MbNzb9ePL/0/323830343a343734343a3a2f33322d313238203d3e20323637303432.roa
Signing time:             Wed 21 Aug 2024 18:48:56 +0000
ROA not before:           Wed 21 Aug 2024 18:43:56 +0000
ROA not after:            Wed 20 Aug 2025 18:48:56 +0000
asID:                     267042
IP address blocks:        2804:4744::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:47:fc:09:80:9c:42:2a:3e:41:4d:4a:ab:07:02:40:04:57:e5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D717580E4D546271A7BEA164D910E156D4E1D5
        Validity
            Not Before: Aug 21 18:43:56 2024 GMT
            Not After : Aug 20 18:48:56 2025 GMT
        Subject: CN=827C37BDBAE674224D5D2E33C9C943CF24D6321F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:aa:7d:48:28:86:bf:e9:3d:ad:fe:70:2f:
                    5d:20:bb:65:52:67:c6:8e:9f:39:41:26:a7:e0:b8:
                    bf:4c:fc:0c:18:d2:63:43:f1:dd:7f:1a:b9:0e:6b:
                    bc:f8:1b:a7:4f:e0:64:dc:ec:c4:a2:ec:38:72:b8:
                    57:c5:b8:98:8a:03:f4:dd:55:45:e5:c9:b0:b6:9c:
                    28:e4:65:c6:a5:71:2b:bb:27:7d:06:f8:8c:a0:46:
                    8b:5a:ad:e5:b8:38:4f:df:0f:6a:07:64:9f:65:d4:
                    2f:32:70:c2:21:32:22:96:dd:ce:32:a0:e4:cc:fe:
                    be:c0:72:68:52:d3:8d:c3:3c:b9:30:85:c9:cf:c8:
                    24:f9:b6:a4:0c:da:cd:72:30:05:b4:ad:4c:6f:19:
                    49:b6:84:46:65:4e:73:10:e8:76:9a:99:96:df:89:
                    75:9d:f5:57:f5:ef:72:92:d2:05:8a:c3:77:26:79:
                    ed:ff:a0:76:af:12:93:9e:bf:09:d1:9b:6b:2e:d3:
                    9a:b0:2a:a8:35:e9:3c:6c:c2:ec:a0:c4:0b:29:60:
                    05:71:95:64:44:f8:5e:e7:a8:5b:dc:1f:26:36:f7:
                    88:38:b6:26:20:ee:ee:df:dc:e1:62:ad:c7:e8:9b:
                    eb:80:32:72:be:47:79:9e:cd:33:2e:21:48:8a:64:
                    ff:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7C:37:BD:BA:E6:74:22:4D:5D:2E:33:C9:C9:43:CF:24:D6:32:1F
            X509v3 Authority Key Identifier:
                keyid:71:D7:17:58:0E:4D:54:62:71:A7:BE:A1:64:D9:10:E1:56:D4:E1:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DuE86YPWQEhDA5Fmjm1E6To9msGjAj7vzk3MbNzb9ePL/0/71D717580E4D546271A7BEA164D910E156D4E1D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D717580E4D546271A7BEA164D910E156D4E1D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DuE86YPWQEhDA5Fmjm1E6To9msGjAj7vzk3MbNzb9ePL/0/323830343a343734343a3a2f33322d313238203d3e20323637303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4744::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:bd:94:b0:8f:18:a9:a3:60:56:e0:c1:b3:30:dc:11:11:
         9d:58:72:62:d0:95:63:14:ce:0b:d2:81:19:06:b8:45:5f:19:
         3b:c2:a2:9b:1f:6f:af:46:65:53:33:1a:20:1e:e4:87:4b:54:
         e5:66:72:7e:2a:a0:0b:21:4a:1d:6c:5d:54:57:3f:de:7b:99:
         63:65:74:02:3c:c4:78:5b:2d:86:2a:99:fa:98:e8:78:8a:a6:
         74:00:b8:49:b6:04:ae:99:47:ba:65:08:74:2f:ac:27:8f:98:
         ee:40:1c:08:31:ed:3b:0e:2e:09:66:b7:28:a7:90:85:5d:ec:
         5c:6b:56:06:0a:d6:eb:60:65:fe:93:89:48:7e:68:51:06:aa:
         03:ae:9d:30:37:dc:4c:6f:6a:2d:f7:62:f1:3d:c9:ab:db:b3:
         6e:0a:d4:3a:1d:7b:38:03:a9:2a:3b:35:50:4b:d7:d3:d8:54:
         49:4f:30:e8:fd:02:6c:2b:bc:f7:7a:fa:5c:c8:c3:b9:a6:73:
         f7:4a:e3:30:d1:a4:35:be:c2:aa:68:f5:03:aa:69:a8:96:f2:
         cd:87:41:32:95:60:3f:c6:81:64:5e:2b:4f:02:9d:88:85:b1:
         94:6c:46:32:cd:77:8a:8c:3f:ee:56:5e:b6:71:23:1b:ec:19:
         05:37:f0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 20:02:26 2024 by rpki-client on console-ams.rpki-client.org