Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a323230303a3a2f34302d3430203d3e20323731373434.roa
File:                     323830343a383035343a323230303a3a2f34302d3430203d3e20323731373434.roa (raw, json)
Hash identifier:          ziNIt3mLhyth7oHj2MLtobMuuEDV9w7J1xjVzew2MtY=
Subject key identifier:   22:0F:8E:DD:76:25:0C:66:8A:1E:A9:C7:E9:A8:B8:B1:A9:A0:9F:E9
Certificate issuer:       /CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
Certificate serial:       1466C7CED99193BA98F97C61098E301F1185ACB7
Authority key identifier: B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a323230303a3a2f34302d3430203d3e20323731373434.roa
Signing time:             Wed 15 May 2024 16:08:45 +0000
ROA not before:           Wed 15 May 2024 16:03:45 +0000
ROA not after:            Wed 14 May 2025 16:08:45 +0000
asID:                     271744
IP address blocks:        2804:8054:2200::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:66:c7:ce:d9:91:93:ba:98:f9:7c:61:09:8e:30:1f:11:85:ac:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
        Validity
            Not Before: May 15 16:03:45 2024 GMT
            Not After : May 14 16:08:45 2025 GMT
        Subject: CN=220F8EDD76250C668A1EA9C7E9A8B8B1A9A09FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:f0:25:cd:d6:95:af:f5:23:a0:2c:a4:c9:
                    db:3d:05:b9:57:a0:a7:71:a2:f5:3f:49:e6:b5:62:
                    cb:7f:dc:2f:5c:b3:33:53:5d:47:4f:78:93:aa:8a:
                    c3:2f:66:55:12:ab:aa:e9:22:65:4c:d0:60:b8:c9:
                    95:e1:12:77:a6:3c:1c:8b:5f:cf:ba:63:cd:53:87:
                    99:0f:c2:b2:0e:11:18:96:05:fa:b4:34:55:ed:39:
                    8e:00:1a:1d:e0:8d:a3:e8:b7:15:2e:bf:93:d7:00:
                    09:43:ae:63:5b:a2:e8:c8:de:2d:39:c3:96:fe:a3:
                    24:e9:a2:ab:ad:07:95:0c:1e:96:d5:4a:54:35:67:
                    e1:db:f4:91:3d:e5:5a:6b:02:0c:c7:87:cd:11:3f:
                    3a:7c:c3:c9:12:7a:d2:e7:d3:bd:0e:5e:cc:e6:a4:
                    f5:c2:e4:b2:5f:09:84:0c:14:5b:3b:e3:10:be:5a:
                    46:d3:e4:bb:75:4d:91:ae:d5:1d:30:4f:45:ff:8f:
                    d2:e0:37:f9:69:36:42:e5:76:ae:95:b4:c0:f6:14:
                    0a:ca:17:ed:70:51:10:1c:9b:29:be:a8:55:d4:5f:
                    71:5b:ef:ce:44:65:7a:86:05:18:95:36:9b:e7:2d:
                    75:ca:40:c5:25:90:b5:d2:1c:3b:61:97:09:cc:d6:
                    fb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0F:8E:DD:76:25:0C:66:8A:1E:A9:C7:E9:A8:B8:B1:A9:A0:9F:E9
            X509v3 Authority Key Identifier:
                keyid:B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a323230303a3a2f34302d3430203d3e20323731373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8054:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:54:f6:44:e9:10:0f:44:e9:a1:cd:09:ed:47:6d:06:f4:
         32:3e:bb:1d:9e:f4:80:1c:ff:e0:5c:d5:cb:48:0d:aa:cc:c7:
         80:2c:60:1f:b5:f2:80:6b:31:9b:51:4a:15:f2:21:90:8d:22:
         60:ce:80:db:c8:f0:73:84:d9:c7:76:a9:f7:24:ce:a9:f4:30:
         54:eb:0f:5e:df:55:ae:4b:c2:d9:91:33:62:34:21:3d:d2:21:
         6b:d2:0a:25:2f:21:6c:00:65:0f:6a:48:7c:9f:2d:87:6d:0d:
         8f:6b:7e:91:1d:19:40:5f:18:c8:2d:93:37:e6:06:30:e6:96:
         13:0a:e7:26:b9:99:e3:7a:e2:42:09:af:37:08:1d:75:57:3b:
         c1:a5:e9:c1:99:9b:6f:31:24:64:8a:d1:83:bc:f3:61:6f:0d:
         af:62:07:64:e3:cd:a8:61:86:35:a9:10:65:9b:35:b7:c9:46:
         42:f6:0d:5d:85:cb:d1:f8:b7:0e:a4:60:3d:11:05:a4:f4:aa:
         db:7c:cc:eb:40:21:2a:9b:09:79:d7:0c:38:c3:3f:f1:9d:5d:
         44:bd:cc:1b:37:6e:66:4a:25:0d:22:48:45:4a:9f:96:06:6e:
         96:83:f1:c1:9f:41:72:26:01:33:77:1d:59:0e:dc:21:db:ae:
         c1:82:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:38:11 2024 by rpki-client on console-ams.rpki-client.org