Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d313238203d3e20323639333539.roa
File:                     323830343a363336383a3a2f33322d313238203d3e20323639333539.roa (raw, json)
Hash identifier:          7V5S0oYgIeWd8Se0gCp7omB0NN8vFyzQdYXGWcC4a8U=
Subject key identifier:   DE:54:83:1E:3B:AC:13:78:58:44:96:9E:FD:E8:47:35:2F:C2:27:03
Certificate issuer:       /CN=6EFCA001487167C1DEB4618A143333F6D08C3710
Certificate serial:       715E5B8AD211038F6DD11CE11B297696A86E6F48
Authority key identifier: 6E:FC:A0:01:48:71:67:C1:DE:B4:61:8A:14:33:33:F6:D0:8C:37:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EFCA001487167C1DEB4618A143333F6D08C3710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d313238203d3e20323639333539.roa
Signing time:             Thu 14 Nov 2024 15:47:39 +0000
ROA not before:           Thu 14 Nov 2024 15:42:39 +0000
ROA not after:            Thu 13 Nov 2025 15:47:39 +0000
asID:                     269359
IP address blocks:        2804:6368::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5e:5b:8a:d2:11:03:8f:6d:d1:1c:e1:1b:29:76:96:a8:6e:6f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EFCA001487167C1DEB4618A143333F6D08C3710
        Validity
            Not Before: Nov 14 15:42:39 2024 GMT
            Not After : Nov 13 15:47:39 2025 GMT
        Subject: CN=DE54831E3BAC13785844969EFDE847352FC22703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:49:28:98:78:74:cd:dd:6e:14:29:de:41:
                    be:b8:c8:e5:18:58:a3:92:bb:f3:7b:26:14:6d:0f:
                    52:21:ce:7b:6e:49:ab:58:b4:9c:a6:7e:62:32:56:
                    47:23:a8:81:31:34:f8:8e:e3:be:79:27:89:54:50:
                    48:f5:d3:33:06:c6:d3:e4:f5:7f:6c:3a:e7:ac:49:
                    70:b1:52:20:08:cd:1e:0e:52:42:ef:56:52:06:0a:
                    ed:4a:fb:c5:8e:d1:64:6f:27:c7:84:59:7c:e1:dd:
                    bf:fb:0b:24:31:2f:85:3d:61:dd:b7:12:95:25:11:
                    47:f6:29:a0:42:8e:97:35:ee:48:12:96:46:8e:d5:
                    23:8c:22:a7:ef:b8:d2:60:1f:1c:e6:14:27:fa:fc:
                    e9:c5:1b:c4:8f:72:68:42:f7:fb:c3:ee:15:5e:ca:
                    db:a6:1a:14:b8:4b:6b:f0:62:3d:d7:e2:34:1d:8e:
                    9a:02:24:b2:f8:66:86:df:53:ce:b2:3a:c9:ff:10:
                    75:01:a5:2a:0a:0d:d6:e1:84:a7:e8:4e:b0:af:5f:
                    9d:a9:4a:f0:0b:ab:a3:26:1a:d7:02:38:ab:bf:49:
                    4f:07:a8:01:4d:24:23:8b:22:62:25:ca:f9:d5:7b:
                    fa:82:86:d3:e1:86:5c:74:d0:f4:01:ed:7d:16:79:
                    40:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:54:83:1E:3B:AC:13:78:58:44:96:9E:FD:E8:47:35:2F:C2:27:03
            X509v3 Authority Key Identifier:
                keyid:6E:FC:A0:01:48:71:67:C1:DE:B4:61:8A:14:33:33:F6:D0:8C:37:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/6EFCA001487167C1DEB4618A143333F6D08C3710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EFCA001487167C1DEB4618A143333F6D08C3710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d313238203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6368::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:89:a3:36:26:94:b0:3e:85:9c:84:a9:16:6b:2c:9c:13:2b:
         c8:1c:73:3f:f0:3b:06:ac:e7:5e:83:92:fa:23:71:64:90:d3:
         67:7f:44:a3:96:a2:cc:4d:dc:54:40:18:3f:80:c0:74:74:22:
         ff:ad:85:94:53:6c:7e:60:bb:ce:4a:ea:5a:38:35:cd:5f:f3:
         ac:1f:91:71:ce:09:fb:f7:b6:22:19:29:4c:9f:a6:a5:1d:13:
         05:62:a5:fc:8b:28:2b:8c:f1:e0:fb:99:39:28:f2:a5:54:2c:
         e6:02:c7:13:4c:d0:6d:50:2d:e0:48:79:e3:a8:13:30:19:53:
         da:a5:27:e8:e8:69:f8:5e:9b:3b:a0:79:48:c7:fb:cf:46:47:
         90:a5:15:b5:3c:94:03:ff:10:2e:68:d1:26:e1:1e:56:79:54:
         e9:ef:ef:06:c7:45:67:8b:7c:44:fb:fb:c0:2a:68:77:7e:06:
         15:77:11:75:e5:ed:81:66:73:ae:da:32:4d:ab:1f:97:44:31:
         5c:af:48:93:80:40:aa:5a:05:95:d3:d1:42:70:9f:ee:21:34:
         27:6f:ed:01:9a:bc:97:bf:b5:4f:0c:20:62:20:f5:f3:05:64:
         28:7d:69:6f:5b:0b:05:11:ed:69:e4:8a:fc:ae:c4:60:b8:ee:
         ec:0a:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 11:06:25 2024 by rpki-client on console-fra.rpki-client.org