Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/323830343a333631633a3a2f33322d313238203d3e20323636333237.roa
File:                     323830343a333631633a3a2f33322d313238203d3e20323636333237.roa (raw, json)
Hash identifier:          5isAh9tUZ5yCoyBlIcndteOWg7bYPkQOGf7JybRjDSc=
Subject key identifier:   3D:BA:9D:87:09:03:94:94:E4:9D:02:BC:A1:78:99:1E:E1:90:A3:02
Certificate issuer:       /CN=A06E755D1B4FBCE0A7DC01E3E4ED381AE0B2EB56
Certificate serial:       4597D73E7E253B78ABF5B28168A10A65B7C8D36F
Authority key identifier: A0:6E:75:5D:1B:4F:BC:E0:A7:DC:01:E3:E4:ED:38:1A:E0:B2:EB:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A06E755D1B4FBCE0A7DC01E3E4ED381AE0B2EB56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/323830343a333631633a3a2f33322d313238203d3e20323636333237.roa
Signing time:             Wed 24 Jul 2024 18:32:14 +0000
ROA not before:           Wed 24 Jul 2024 18:27:14 +0000
ROA not after:            Wed 23 Jul 2025 18:32:14 +0000
asID:                     266327
IP address blocks:        2804:361c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:97:d7:3e:7e:25:3b:78:ab:f5:b2:81:68:a1:0a:65:b7:c8:d3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06E755D1B4FBCE0A7DC01E3E4ED381AE0B2EB56
        Validity
            Not Before: Jul 24 18:27:14 2024 GMT
            Not After : Jul 23 18:32:14 2025 GMT
        Subject: CN=3DBA9D8709039494E49D02BCA178991EE190A302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:de:77:42:ae:f0:0c:6d:93:7d:e1:cf:a2:
                    7f:52:bb:2f:54:5e:0c:84:0f:0f:7d:63:72:94:0e:
                    e7:f5:6b:79:4e:2f:33:70:ef:fb:2f:28:8e:54:be:
                    60:59:01:87:c8:ef:0a:a3:90:cd:e7:4d:6f:96:90:
                    48:a7:99:c4:a8:97:12:88:85:3d:20:56:07:ee:d2:
                    6e:61:4b:fd:86:eb:86:e5:c4:78:e1:9a:83:98:89:
                    b6:9f:5b:11:94:a7:2a:3d:7a:2e:fc:7a:ce:c5:a8:
                    c0:2d:ea:7a:eb:89:03:ce:7f:07:3c:20:2a:88:f2:
                    06:f7:fe:03:a4:3c:7d:af:ac:37:4f:3c:35:74:00:
                    b6:5f:f5:9d:e5:a0:7a:9e:bf:08:fe:c8:ed:d1:4d:
                    33:7a:0d:57:26:cc:12:b2:be:2e:78:e2:24:73:cb:
                    aa:76:9d:f9:79:16:d7:89:48:37:ed:b4:83:7f:f9:
                    95:07:9d:7a:e9:31:cb:43:f6:40:5b:4b:32:83:d2:
                    7d:cd:87:fe:5a:17:ef:09:e2:95:38:f4:0c:5a:58:
                    03:ef:3d:18:9f:5d:6d:d7:28:e8:8b:ab:99:d2:57:
                    5a:f3:50:67:1f:4d:a9:87:86:5f:84:17:47:ab:ba:
                    99:7b:8b:c7:85:f3:a6:20:8e:c3:7a:1b:c4:bf:a5:
                    95:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BA:9D:87:09:03:94:94:E4:9D:02:BC:A1:78:99:1E:E1:90:A3:02
            X509v3 Authority Key Identifier:
                keyid:A0:6E:75:5D:1B:4F:BC:E0:A7:DC:01:E3:E4:ED:38:1A:E0:B2:EB:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/A06E755D1B4FBCE0A7DC01E3E4ED381AE0B2EB56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A06E755D1B4FBCE0A7DC01E3E4ED381AE0B2EB56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/323830343a333631633a3a2f33322d313238203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:361c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:4e:34:d3:3a:e0:23:ff:9f:04:9b:85:ee:ab:89:fc:fa:
         e3:b3:db:86:6f:48:57:60:e7:e2:83:07:a6:ec:0e:08:62:47:
         ca:66:c7:6e:ed:d1:d3:ed:8f:7c:54:26:3b:cb:58:04:b1:d1:
         84:cb:a0:38:f7:03:1b:12:58:e2:f0:2e:80:b1:e0:12:0e:9e:
         5d:d9:5d:9d:80:74:69:41:77:89:ad:78:0d:bc:92:7e:f6:e4:
         e0:34:86:f3:50:46:b7:0b:ba:45:eb:f5:c0:40:56:4e:6d:80:
         24:3e:b2:ca:de:a9:2a:79:63:86:c9:09:1a:b3:43:60:b1:2c:
         0a:47:3a:f8:06:a5:3f:31:f5:a3:40:5c:62:bd:4e:88:73:b0:
         ce:46:d2:04:70:3e:55:ba:b5:1b:42:31:71:d5:33:53:28:a6:
         fd:40:60:36:ec:33:7e:76:50:f5:eb:da:4f:ac:fc:b5:38:64:
         1f:6e:62:59:9f:1f:c2:ce:b4:70:7c:58:1b:4c:b9:b9:d3:61:
         3b:6b:8b:57:96:2d:9d:fa:21:d3:e4:36:ca:67:09:2f:ae:64:
         81:8f:d9:5d:5a:a7:94:83:57:db:92:c0:35:a8:f5:68:25:79:
         aa:ba:ef:8a:26:7a:8d:da:75:1e:db:3c:96:56:d1:26:82:ee:
         2b:20:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 18:53:55 2024 by rpki-client on console-fra.rpki-client.org