Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/3137302e38302e3230342e302f32322d3332203d3e20323633353335.roa
File:                     3137302e38302e3230342e302f32322d3332203d3e20323633353335.roa (raw, json)
Hash identifier:          XxQLqmaXGFXfakcNG7Spkdz9sD0CmBcFBSWlN61KwdU=
Subject key identifier:   6D:7B:02:7D:EE:65:A5:92:D8:CE:25:E7:39:3C:E4:D9:27:FF:A3:CA
Certificate issuer:       /CN=C6A46B556ACB74EE427EF9E13519DF5CF277DC74
Certificate serial:       73F43EA3DD506A27BF189088EB4650B752ED7A26
Authority key identifier: C6:A4:6B:55:6A:CB:74:EE:42:7E:F9:E1:35:19:DF:5C:F2:77:DC:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6A46B556ACB74EE427EF9E13519DF5CF277DC74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/3137302e38302e3230342e302f32322d3332203d3e20323633353335.roa
Signing time:             Tue 25 Jun 2024 18:18:27 +0000
ROA not before:           Tue 25 Jun 2024 18:13:27 +0000
ROA not after:            Tue 24 Jun 2025 18:18:27 +0000
asID:                     263535
IP address blocks:        170.80.204.0/22 maxlen: 32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f4:3e:a3:dd:50:6a:27:bf:18:90:88:eb:46:50:b7:52:ed:7a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A46B556ACB74EE427EF9E13519DF5CF277DC74
        Validity
            Not Before: Jun 25 18:13:27 2024 GMT
            Not After : Jun 24 18:18:27 2025 GMT
        Subject: CN=6D7B027DEE65A592D8CE25E7393CE4D927FFA3CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e4:e5:c7:ec:15:ff:d6:b5:ca:9f:2d:ee:82:
                    27:f2:c5:bf:34:57:12:af:e1:af:00:3d:06:28:5c:
                    58:6a:ff:9e:eb:94:bd:05:d3:1d:d9:57:05:da:3e:
                    9c:6e:97:d5:56:24:f2:58:b2:c7:50:c2:87:42:1f:
                    2c:a3:4a:60:8b:c6:2e:ae:9e:5e:8f:3d:f3:98:b6:
                    ce:e1:66:af:8b:27:88:35:d1:9a:3b:1b:a7:94:88:
                    ab:61:87:eb:d2:00:b3:8c:38:9a:51:29:54:f1:21:
                    97:99:4f:c9:35:69:21:f9:b2:25:4c:91:f1:54:50:
                    6f:2a:a0:f0:c8:b3:4b:62:51:d1:31:bd:14:d7:de:
                    ea:7f:5f:7c:d6:50:98:c7:9b:de:09:a3:71:ed:8d:
                    07:6c:49:20:45:a1:20:20:71:8b:f2:fb:aa:27:36:
                    91:b0:ec:68:27:8e:71:59:9d:53:46:22:9a:f2:26:
                    d3:77:59:84:58:9f:9f:f6:94:3d:52:cb:fe:6d:4f:
                    36:83:b2:be:b0:bd:6b:23:5b:48:a7:fb:0b:0d:5a:
                    cf:0c:41:c3:ea:14:39:81:50:50:1b:3e:17:88:77:
                    8a:d1:87:9a:49:79:57:da:e4:f2:5b:4f:07:54:f9:
                    8a:de:31:86:a3:0a:98:73:dd:0e:cc:9f:2c:e3:a3:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7B:02:7D:EE:65:A5:92:D8:CE:25:E7:39:3C:E4:D9:27:FF:A3:CA
            X509v3 Authority Key Identifier:
                keyid:C6:A4:6B:55:6A:CB:74:EE:42:7E:F9:E1:35:19:DF:5C:F2:77:DC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/C6A46B556ACB74EE427EF9E13519DF5CF277DC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6A46B556ACB74EE427EF9E13519DF5CF277DC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/3137302e38302e3230342e302f32322d3332203d3e20323633353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:5a:3c:33:5e:ab:ca:64:14:ba:69:58:f1:94:58:4c:02:8d:
         1c:d2:e1:23:61:41:72:3f:7d:ba:08:a7:bb:f1:1b:ee:1e:df:
         7d:c1:b2:55:21:9d:df:6d:8a:af:eb:9d:5b:11:64:8b:09:b6:
         b2:5a:20:f1:94:6b:6d:f4:5e:98:90:3f:d0:4e:5a:80:ab:5f:
         e9:1b:34:56:62:2e:56:84:97:2b:18:fd:ca:c9:38:40:86:0b:
         0b:56:1e:27:6a:30:04:59:fa:5b:a5:42:84:d9:da:10:f5:95:
         a2:05:39:44:bd:fe:40:bc:74:2f:a3:08:93:02:32:e6:e2:0e:
         b3:75:2f:37:bb:9a:06:91:ef:16:0c:9a:48:39:1f:e9:4e:50:
         7f:d2:b0:e2:8c:3d:d7:2b:10:37:b0:70:78:07:cb:9b:a9:9d:
         1c:d7:c9:fd:f0:99:af:de:b3:74:87:6c:72:20:d3:97:e1:bc:
         77:eb:18:09:91:b6:0c:46:30:de:ae:c8:9b:6c:e1:fb:7b:6d:
         f1:06:39:85:7a:9f:bf:4a:bb:36:1e:16:66:85:d5:07:59:06:
         c4:eb:c9:00:e0:62:d5:4b:ea:0c:51:a4:ac:1b:52:bf:00:cc:
         65:10:05:9f:81:e7:95:1d:68:80:df:f1:9b:13:2d:12:c7:cf:
         01:8f:89:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 13:21:07 2024 by rpki-client on console-fra.rpki-client.org