Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/323830343a356636343a3a2f33322d3332203d3e20323639303936.roa
File:                     323830343a356636343a3a2f33322d3332203d3e20323639303936.roa (raw, json)
Hash identifier:          7m2BRpBkymQxLY//5NDHn9lOrj8hrG8QcIoJBZjZY/U=
Subject key identifier:   DF:3D:46:FB:15:7A:38:0E:2B:4B:09:D6:39:1A:B5:FB:4A:C9:90:E4
Certificate issuer:       /CN=D6A968B39492328F164F1853391297FB9752272A
Certificate serial:       2E86D9D4771C5C1619C3A1F9A09917A236F49F64
Authority key identifier: D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/323830343a356636343a3a2f33322d3332203d3e20323639303936.roa
Signing time:             Mon 29 Jul 2024 15:52:42 +0000
ROA not before:           Mon 29 Jul 2024 15:47:42 +0000
ROA not after:            Mon 28 Jul 2025 15:52:42 +0000
asID:                     269096
IP address blocks:        2804:5f64::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:86:d9:d4:77:1c:5c:16:19:c3:a1:f9:a0:99:17:a2:36:f4:9f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A968B39492328F164F1853391297FB9752272A
        Validity
            Not Before: Jul 29 15:47:42 2024 GMT
            Not After : Jul 28 15:52:42 2025 GMT
        Subject: CN=DF3D46FB157A380E2B4B09D6391AB5FB4AC990E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8f:16:39:90:24:79:92:19:2a:d9:8d:e5:7b:
                    d3:c8:44:30:6e:f2:12:55:f6:f5:ec:88:d9:77:bf:
                    8a:d9:02:ac:66:16:14:8c:fe:ae:1f:12:03:d2:1f:
                    9e:b7:d7:32:aa:4d:f7:93:c7:e9:a0:36:6f:5a:3d:
                    0b:6e:01:95:f0:9b:59:c4:f4:a2:6c:46:c5:37:e7:
                    c8:c2:2f:87:e8:ff:57:53:ef:c6:8e:77:cb:82:e0:
                    2f:95:25:b3:c9:03:02:d4:9e:a5:0e:19:f7:cb:50:
                    62:2c:6e:c5:fa:90:06:8f:93:88:a8:a0:09:f5:e7:
                    d3:24:e1:44:71:c4:07:4a:ef:0e:2e:7b:19:60:95:
                    28:f3:5c:57:af:4b:0e:ac:f2:fa:d8:2b:01:f5:ce:
                    d8:9b:26:df:b8:b1:0a:41:6f:88:ac:e6:c1:ef:06:
                    86:b8:e5:43:05:bb:92:ef:51:ef:47:f8:a8:e1:ed:
                    73:d0:94:f7:5e:f5:49:4c:c2:a8:1b:f8:ef:8c:5b:
                    04:ab:a7:b6:98:3b:0d:4d:04:9a:9f:cd:d7:0d:8d:
                    e8:00:c0:c1:0d:fb:c0:5a:ee:15:b3:9e:98:3c:48:
                    c4:db:48:7c:05:73:63:a8:30:f8:56:5e:25:b1:30:
                    64:dd:bd:3c:3c:cf:d7:ba:1e:c1:b5:e0:c4:42:22:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3D:46:FB:15:7A:38:0E:2B:4B:09:D6:39:1A:B5:FB:4A:C9:90:E4
            X509v3 Authority Key Identifier:
                keyid:D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/D6A968B39492328F164F1853391297FB9752272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/323830343a356636343a3a2f33322d3332203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f64::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:b7:19:41:ca:45:76:27:4b:c2:3f:04:64:43:b1:d2:84:06:
         d2:f3:be:ba:3e:52:d2:5d:1f:2f:95:e4:e4:d3:52:5b:63:12:
         91:52:0d:9a:61:8e:27:20:92:d5:fd:ef:a8:87:26:2e:3a:f1:
         f0:d3:e2:74:fa:f8:1a:7b:04:c7:24:99:13:5d:27:1e:49:0d:
         54:76:7d:50:4b:7c:fc:b6:4a:70:70:28:c0:a5:10:4a:32:a9:
         24:cf:b8:ab:4b:a5:91:26:18:00:25:14:7a:04:86:2c:6b:ac:
         fa:01:19:68:0f:31:0c:c2:fd:10:31:3e:01:03:f3:ae:aa:50:
         6c:a1:e7:6e:79:55:25:15:6a:7c:42:96:27:b9:3a:09:da:7d:
         19:93:7d:e5:64:bd:94:39:e4:cb:29:bc:ac:5f:71:18:0f:02:
         d0:ab:e5:37:57:79:ba:a9:30:21:30:e7:ed:ff:69:ff:1f:ec:
         25:e6:62:c4:19:cc:57:54:47:3c:76:37:fd:e2:65:c6:b5:b8:
         76:68:76:29:dd:c2:1f:95:e8:d8:8c:d2:86:bc:b8:1e:31:c6:
         4b:18:2e:6c:56:9e:b9:84:65:bf:53:38:f5:8d:aa:47:98:72:
         20:7e:60:ef:f0:80:b7:4c:3e:90:4f:f1:65:0e:6e:0c:5a:f3:
         ec:08:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 16:28:12 2024 by rpki-client on console-fra.rpki-client.org