Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/323830343a386161343a3a2f33322d3438203d3e20323733363833.roa
File:                     323830343a386161343a3a2f33322d3438203d3e20323733363833.roa (raw, json)
Hash identifier:          Fs1Fy8FXi81YRxtlVEh7LTTbnjM6hguFSTXv+D+vVVg=
Subject key identifier:   2B:AD:2D:D6:9A:90:9A:00:5E:62:9D:9A:4B:1A:5C:5C:6D:1F:3F:FD
Certificate issuer:       /CN=A700B738441CDD3978A0EECBB6A84022929D91AC
Certificate serial:       0EBD0AE3BAE6E0F304191BF4098DEA65A8C73E66
Authority key identifier: A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/323830343a386161343a3a2f33322d3438203d3e20323733363833.roa
Signing time:             Wed 10 Apr 2024 13:21:36 +0000
ROA not before:           Wed 10 Apr 2024 13:16:36 +0000
ROA not after:            Wed 09 Apr 2025 13:21:36 +0000
asID:                     273683
IP address blocks:        2804:8aa4::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bd:0a:e3:ba:e6:e0:f3:04:19:1b:f4:09:8d:ea:65:a8:c7:3e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A700B738441CDD3978A0EECBB6A84022929D91AC
        Validity
            Not Before: Apr 10 13:16:36 2024 GMT
            Not After : Apr  9 13:21:36 2025 GMT
        Subject: CN=2BAD2DD69A909A005E629D9A4B1A5C5C6D1F3FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:21:4e:bc:51:ad:3d:84:14:f8:94:12:8b:5b:
                    68:cd:3e:51:81:ce:41:6f:bc:61:20:08:b1:9e:b7:
                    bc:ad:15:b1:9c:c8:3c:58:22:87:97:36:a4:d0:be:
                    9d:ce:aa:19:5f:8d:2e:15:b1:cd:5f:b9:ce:68:2b:
                    42:dc:8c:f2:fc:a7:4a:23:99:d5:a3:5f:75:29:07:
                    ab:3b:5a:e7:ef:60:84:f4:f6:8d:54:21:cb:3a:4f:
                    d5:7d:84:59:db:dd:1a:0b:ce:79:9e:14:fd:5f:f3:
                    ab:c1:66:46:c4:36:9a:dc:67:91:43:e0:bf:64:f2:
                    00:0c:60:23:c0:cb:a7:a9:a9:89:91:d0:93:b0:d7:
                    e6:46:35:d0:d7:21:d8:9e:a3:7a:df:7b:e9:9f:d0:
                    8f:63:48:09:e0:31:1f:09:bb:05:51:90:e3:f9:60:
                    b8:88:eb:a9:46:77:00:fe:2f:cf:04:41:ef:9f:00:
                    9b:7f:b6:77:c6:3f:db:29:fa:9a:67:1c:6d:02:b1:
                    d3:43:91:94:59:08:f0:be:9a:32:3b:07:91:e1:ba:
                    84:03:07:2e:ee:11:71:fa:e2:43:ba:30:0e:59:f4:
                    87:f2:2c:c9:8e:ae:03:a9:a9:6b:14:96:59:5c:1e:
                    19:5b:95:b5:60:d2:cc:f5:e7:01:1a:e8:30:0b:3d:
                    9d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AD:2D:D6:9A:90:9A:00:5E:62:9D:9A:4B:1A:5C:5C:6D:1F:3F:FD
            X509v3 Authority Key Identifier:
                keyid:A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/A700B738441CDD3978A0EECBB6A84022929D91AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/323830343a386161343a3a2f33322d3438203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:be:39:f4:ff:ad:12:a8:f2:2f:e2:8b:60:44:c8:5e:9b:78:
         c3:82:fd:9b:29:e1:a6:02:b5:85:64:e0:03:26:8d:3d:a6:b6:
         73:16:88:e5:4b:51:e3:4f:0b:18:7d:74:4e:f4:5f:a1:a7:be:
         ac:a6:b1:d0:39:ba:b1:a4:ca:40:98:7c:20:f8:1f:69:34:15:
         56:7e:84:a0:64:e5:ce:27:ba:60:af:9d:fa:00:b6:c8:53:eb:
         c9:95:5d:9d:ba:27:31:98:f0:f2:60:bc:15:21:12:e4:2a:9b:
         3e:b1:9c:96:50:f6:b1:2c:7f:0e:d0:13:76:83:b1:c0:6d:31:
         84:9b:bf:f5:f1:54:81:1b:c9:e4:45:6f:1b:36:56:3a:ab:0a:
         59:71:d4:c9:c2:68:a1:8b:0b:cd:4f:64:23:87:89:84:c5:0d:
         16:9f:02:ad:50:53:90:62:c4:98:09:56:9b:df:b5:fc:20:6f:
         22:7b:53:58:03:54:56:09:04:36:df:e7:64:07:0c:34:46:56:
         16:dc:86:da:af:6d:b1:55:86:31:3f:21:ba:e1:37:22:64:e8:
         27:17:81:db:71:bf:1b:59:6b:a6:be:2a:f4:4d:98:ac:b0:2f:
         9a:24:6b:d6:ff:23:cb:f8:5e:dd:7e:2f:9d:ad:14:4a:a2:e2:
         c6:58:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 15:28:21 2024 by rpki-client on console-fra.rpki-client.org