Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa
File:                     323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa (raw, json)
Hash identifier:          3VNDGnwoGB7e0Fphq827zJr9WV0BbdEL3RdipAWoPro=
Subject key identifier:   43:D5:2B:B4:6D:69:31:7A:9C:5E:30:FA:A6:46:51:29:80:DE:1C:5D
Certificate issuer:       /CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
Certificate serial:       60BE54D5B0E7AEBB8B0044CB7CF4AF8604F45E7C
Authority key identifier: 70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa
Signing time:             Fri 05 Apr 2024 01:46:33 +0000
ROA not before:           Fri 05 Apr 2024 01:41:33 +0000
ROA not after:            Fri 04 Apr 2025 01:46:33 +0000
asID:                     263907
IP address blocks:        2804:2788:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:be:54:d5:b0:e7:ae:bb:8b:00:44:cb:7c:f4:af:86:04:f4:5e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
        Validity
            Not Before: Apr  5 01:41:33 2024 GMT
            Not After : Apr  4 01:46:33 2025 GMT
        Subject: CN=43D52BB46D69317A9C5E30FAA646512980DE1C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:f2:2c:8c:ea:4a:e3:e8:20:41:6e:34:c5:
                    b0:e6:c1:4e:58:e2:d6:d8:9a:63:c6:27:ef:1f:47:
                    f9:18:df:51:2e:27:a5:2a:77:37:5f:59:6c:b7:58:
                    10:c1:b6:a7:3d:bc:d6:6c:77:43:76:8b:c0:ac:87:
                    ea:63:83:78:2e:e5:a0:b0:da:9a:df:30:66:59:e4:
                    69:cb:09:1d:8f:59:ae:17:c3:cc:db:d2:0b:92:cf:
                    ce:fd:83:89:56:37:42:45:bf:5d:aa:40:92:4d:b4:
                    95:4e:e7:7d:77:14:b9:66:01:f2:e5:e7:9a:e0:d8:
                    f6:ed:46:d6:5b:c8:0b:60:5e:f9:98:99:c3:49:71:
                    83:6c:bc:74:cf:e9:a0:a3:32:ee:35:45:a8:48:e0:
                    93:46:d2:a6:0c:19:c0:66:29:92:07:7d:35:41:29:
                    bf:aa:36:0d:f4:a6:b7:a5:99:dd:75:78:c1:46:2d:
                    ba:53:2d:dd:98:eb:af:04:e0:87:e6:14:4a:ca:01:
                    02:3f:e7:40:2b:67:72:ce:4f:5c:ec:40:a3:18:46:
                    83:fb:58:27:f2:f8:45:16:ab:ae:27:e5:40:cd:4b:
                    66:e1:93:83:93:2c:c0:4a:30:59:b6:f2:f0:71:80:
                    09:a1:10:2a:70:32:3d:8f:92:3a:74:31:12:11:00:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D5:2B:B4:6D:69:31:7A:9C:5E:30:FA:A6:46:51:29:80:DE:1C:5D
            X509v3 Authority Key Identifier:
                keyid:70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a633030303a3a2f33342d3334203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ae:ac:07:de:10:8f:50:ca:2d:aa:99:73:f5:01:f9:72:78:c4:
         bd:6a:ab:3a:f7:91:e9:d6:3e:aa:f2:c8:8b:50:f5:be:0f:20:
         f9:b7:e1:f7:ab:a3:45:d7:25:fb:d7:41:5c:91:ba:d7:69:e5:
         57:ba:59:9b:48:59:33:e8:44:ca:0e:13:bd:83:f3:bc:09:ec:
         e7:d7:05:37:7c:15:11:ed:8a:34:f1:a4:f3:c7:2c:96:0a:59:
         8a:f6:6a:83:19:da:cf:33:83:b6:d1:ba:59:09:c9:dc:8b:26:
         3e:e6:f6:74:c2:df:40:73:13:31:94:04:fb:81:4a:46:b6:dd:
         3f:f4:72:6f:d6:ca:b2:7f:a1:c4:57:fc:46:c7:58:33:f8:75:
         91:a3:19:c4:4d:b9:35:50:9e:01:5a:6d:5a:f1:fc:75:bf:af:
         ba:00:ea:ae:34:39:fd:01:29:43:93:51:12:73:10:f8:88:c6:
         39:5c:c3:3f:15:7a:03:38:cb:4a:dd:52:af:74:0b:d5:10:43:
         ba:55:19:28:fe:ef:b9:24:94:80:5f:8b:00:c2:99:53:05:c2:
         c8:df:3b:b7:57:26:a4:37:9d:b8:6b:62:14:c2:d9:20:7e:14:
         d6:13:c8:01:55:14:9a:7a:aa:ef:c1:d9:5f:5b:83:07:17:a2:
         9d:57:4f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 22:27:24 2024 by rpki-client on console-fra.rpki-client.org