Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/323830343a373261633a3a2f33322d3332203d3e20323730383638.roa
File:                     323830343a373261633a3a2f33322d3332203d3e20323730383638.roa (raw, json)
Hash identifier:          t/IJ5RUW3MvnhiUI8IVzKlLec2YDVUebepbxlnO/868=
Subject key identifier:   CC:31:49:A4:81:B9:62:42:B6:B2:05:17:C6:7A:77:CE:4D:25:6C:B6
Certificate issuer:       /CN=B9565814EEE07F40E147986C257744795A8CFC01
Certificate serial:       3C192A02432A784BEF6E37E4F3C7DA81F428ABDA
Authority key identifier: B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/323830343a373261633a3a2f33322d3332203d3e20323730383638.roa
Signing time:             Wed 03 Apr 2024 21:39:27 +0000
ROA not before:           Wed 03 Apr 2024 21:34:27 +0000
ROA not after:            Wed 02 Apr 2025 21:39:27 +0000
asID:                     270868
IP address blocks:        2804:72ac::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:19:2a:02:43:2a:78:4b:ef:6e:37:e4:f3:c7:da:81:f4:28:ab:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9565814EEE07F40E147986C257744795A8CFC01
        Validity
            Not Before: Apr  3 21:34:27 2024 GMT
            Not After : Apr  2 21:39:27 2025 GMT
        Subject: CN=CC3149A481B96242B6B20517C67A77CE4D256CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:dc:5a:4e:69:27:84:ee:2e:f5:d6:e5:91:
                    48:ed:ad:0d:34:19:13:e5:4a:83:18:8d:20:91:40:
                    72:20:4f:3c:63:7c:a2:9c:7d:30:d9:c1:c5:f1:89:
                    27:e4:72:ef:40:8d:f4:f4:12:06:d0:fc:03:af:5a:
                    e6:22:27:db:0e:d5:3e:f4:94:84:72:c1:38:09:4f:
                    9b:fe:15:7f:d1:40:a0:46:10:18:7f:b5:c6:92:57:
                    67:93:78:07:24:cc:d4:a9:22:0b:19:af:c1:7e:b5:
                    8c:ff:29:71:7b:30:ef:85:30:ec:a0:04:50:52:ae:
                    14:96:52:9c:a1:fd:42:ae:15:6b:a3:99:ec:12:46:
                    fd:42:ec:92:7b:d0:39:3d:61:f5:82:01:a8:08:2d:
                    99:16:d1:de:83:22:9c:dc:62:d9:b7:5a:81:b2:c4:
                    cb:d2:f0:eb:84:2d:de:eb:77:4b:6a:10:95:f5:66:
                    b8:d3:61:7c:63:6c:69:c6:57:49:b0:df:54:5c:fa:
                    3a:29:75:e5:0f:07:b0:40:34:8a:93:96:17:b6:ea:
                    13:15:64:04:ec:15:0d:77:2f:c3:7e:5d:04:b1:b7:
                    ef:42:6e:5b:0f:54:ce:9e:28:ba:5e:e1:36:b0:f2:
                    8d:8d:ee:d2:06:10:07:8b:f6:b7:4d:5e:64:d3:7e:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:31:49:A4:81:B9:62:42:B6:B2:05:17:C6:7A:77:CE:4D:25:6C:B6
            X509v3 Authority Key Identifier:
                keyid:B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/323830343a373261633a3a2f33322d3332203d3e20323730383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:2e:67:7e:96:3d:cf:f8:4a:cc:21:bf:69:17:11:6f:0c:72:
         a6:48:e0:4b:e8:db:08:1e:dd:3d:b6:af:fc:31:4c:31:2d:10:
         2d:46:fa:2e:b2:8f:92:52:67:be:bd:c8:83:77:e5:6f:3c:f5:
         38:aa:bc:12:c7:d5:b7:47:1f:73:1f:13:53:5b:c1:1b:a9:96:
         61:e6:9a:0c:50:26:c9:9d:56:de:94:54:b3:c6:3f:c3:1f:c4:
         99:95:00:d5:9a:c5:2f:f1:a4:ee:41:d7:b5:26:23:f0:10:1f:
         8e:40:bf:c3:3f:2c:51:6b:35:6c:c1:08:f6:32:d3:14:fd:72:
         64:ca:99:93:d1:a3:04:73:bf:ec:1b:d8:24:8e:59:85:90:59:
         60:a7:74:4c:27:7a:9c:e3:82:97:ff:c5:e7:92:0c:80:a2:c0:
         be:21:ff:eb:80:6a:7e:bd:91:cd:ed:38:89:1f:11:46:40:b3:
         ec:60:4f:c8:b5:eb:6c:9b:11:f2:76:a7:a6:0f:a5:e3:a0:5d:
         b9:f8:7f:f0:10:da:6b:ae:22:98:03:5d:57:f6:57:03:07:76:
         98:62:1f:e0:fd:12:34:37:87:cb:9a:69:15:39:04:92:37:8a:
         b7:b3:ba:e2:27:ba:95:1e:ef:c6:1c:d6:26:a9:fc:31:6d:e9:
         cb:91:46:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 15:10:18 2024 by rpki-client on console-ams.rpki-client.org