Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/1/323830343a373136343a3a2f33322d3332203d3e20323730373836.roa
File:                     323830343a373136343a3a2f33322d3332203d3e20323730373836.roa (raw, json)
Hash identifier:          CfVtmQ7ymOR1QmLDAaudSoXekkLTygl7u/xN0pARlvU=
Subject key identifier:   A8:D7:19:ED:98:21:83:E8:4C:67:A5:D6:90:3E:A4:8C:77:98:BA:67
Certificate issuer:       /CN=B027EFA588C207B1131C1CBB733E2F759EDFBFE9
Certificate serial:       127FACD3D334656A839FE6B790F070572910A657
Authority key identifier: B0:27:EF:A5:88:C2:07:B1:13:1C:1C:BB:73:3E:2F:75:9E:DF:BF:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B027EFA588C207B1131C1CBB733E2F759EDFBFE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/1/323830343a373136343a3a2f33322d3332203d3e20323730373836.roa
Signing time:             Wed 03 Apr 2024 20:28:07 +0000
ROA not before:           Wed 03 Apr 2024 20:23:07 +0000
ROA not after:            Wed 02 Apr 2025 20:28:07 +0000
asID:                     270786
IP address blocks:        2804:7164::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7f:ac:d3:d3:34:65:6a:83:9f:e6:b7:90:f0:70:57:29:10:a6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B027EFA588C207B1131C1CBB733E2F759EDFBFE9
        Validity
            Not Before: Apr  3 20:23:07 2024 GMT
            Not After : Apr  2 20:28:07 2025 GMT
        Subject: CN=A8D719ED982183E84C67A5D6903EA48C7798BA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:49:b0:a1:32:0a:90:51:c8:6e:d1:6b:44:
                    7c:7d:b8:d7:04:36:90:b8:69:8c:cd:af:50:f6:07:
                    a8:ea:dd:f3:01:fe:27:0a:07:d7:b7:c8:97:c1:21:
                    d7:87:ec:a9:66:cd:74:c7:36:03:b2:85:c2:55:67:
                    b9:05:b2:78:16:35:6e:8f:7c:aa:67:a5:39:4f:e2:
                    c5:a2:60:0f:11:9a:39:00:d8:c4:9e:38:b7:85:a0:
                    88:e0:21:66:b5:4e:04:b2:55:0b:00:48:fb:38:b1:
                    08:8a:53:ee:9d:9b:b7:ed:e1:32:ef:00:b4:c1:f7:
                    75:99:e9:80:5e:0d:43:e6:30:3c:d7:3f:28:e9:e5:
                    14:17:e7:6a:55:02:a7:f7:0e:e8:cf:41:63:7a:6f:
                    91:06:fe:b4:ef:34:97:80:f7:41:fd:d3:e1:27:a1:
                    1e:47:26:7f:db:d2:6b:28:6f:60:93:8d:1e:5d:49:
                    57:23:6f:05:7c:08:41:e7:e1:06:0f:73:bc:92:9d:
                    6c:d2:f7:45:96:b9:67:1c:3e:fd:5a:31:a5:33:cc:
                    3d:bc:48:70:79:69:8a:a2:57:50:14:bd:73:4b:8e:
                    b2:66:9f:42:a9:c5:95:c1:fc:1a:16:25:9d:fc:21:
                    f6:20:02:98:df:fb:2c:99:10:c9:a3:65:be:2f:ba:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D7:19:ED:98:21:83:E8:4C:67:A5:D6:90:3E:A4:8C:77:98:BA:67
            X509v3 Authority Key Identifier:
                keyid:B0:27:EF:A5:88:C2:07:B1:13:1C:1C:BB:73:3E:2F:75:9E:DF:BF:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/1/B027EFA588C207B1131C1CBB733E2F759EDFBFE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B027EFA588C207B1131C1CBB733E2F759EDFBFE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/1/323830343a373136343a3a2f33322d3332203d3e20323730373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7164::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:27:9f:2a:25:79:6a:99:a5:23:d7:7b:39:a4:18:9a:15:83:
         a2:68:8e:5c:34:cd:69:ac:6a:fa:e1:11:9e:7e:ed:79:5a:94:
         2c:17:02:bf:d0:e5:67:a6:dc:0d:65:2b:5f:a3:c6:6d:7d:60:
         59:df:d2:dd:f4:c6:cd:f9:bb:c4:74:b3:e0:ca:b9:b3:8b:8e:
         5e:ab:56:3b:b1:ab:0e:36:48:3d:3f:0d:04:10:96:95:30:b8:
         48:bc:92:da:5b:ed:e5:1d:d4:74:ba:3f:79:a1:5b:48:60:51:
         47:26:40:5c:b1:3d:7c:4e:6f:7b:30:d9:4a:1a:74:c4:5d:0a:
         c5:2f:75:44:2a:55:2e:5e:fc:84:7d:11:bb:fd:ed:88:eb:41:
         f9:2e:07:48:14:12:9b:4a:04:48:59:47:11:2b:dd:8a:32:dd:
         4e:27:b3:c9:8e:08:e7:71:ce:51:2e:65:43:23:38:c5:bf:a9:
         c0:05:bc:d8:33:e2:09:78:3a:05:d3:4a:60:95:d2:ff:95:22:
         2f:f2:7e:ed:21:8e:b6:bd:71:1b:b4:43:98:02:36:64:72:bc:
         fb:3c:4b:07:5e:54:55:7e:3e:fe:44:5b:b6:b7:49:4c:d8:00:
         c8:10:64:22:47:e9:70:fd:49:71:79:8e:fa:36:d5:ae:d6:d1:
         7b:c7:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 09:42:23 2024 by rpki-client on console-fra.rpki-client.org