Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/323830343a373261633a633030303a3a2f33342d3334203d3e20323730383638.roa
File:                     323830343a373261633a633030303a3a2f33342d3334203d3e20323730383638.roa (raw, json)
Hash identifier:          /r19s+IcNIO/GVnW3SFavupuK0NHvOI7MuVdF6t5NRw=
Subject key identifier:   9B:49:7F:7C:78:B4:35:23:1A:26:1B:60:38:80:04:E4:C6:48:24:F2
Certificate issuer:       /CN=B9565814EEE07F40E147986C257744795A8CFC01
Certificate serial:       5FD03241AD4E91BB558D7D7A81562B41A9602A9C
Authority key identifier: B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/323830343a373261633a633030303a3a2f33342d3334203d3e20323730383638.roa
Signing time:             Wed 03 Apr 2024 21:39:27 +0000
ROA not before:           Wed 03 Apr 2024 21:34:27 +0000
ROA not after:            Wed 02 Apr 2025 21:39:27 +0000
asID:                     270868
IP address blocks:        2804:72ac:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d0:32:41:ad:4e:91:bb:55:8d:7d:7a:81:56:2b:41:a9:60:2a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9565814EEE07F40E147986C257744795A8CFC01
        Validity
            Not Before: Apr  3 21:34:27 2024 GMT
            Not After : Apr  2 21:39:27 2025 GMT
        Subject: CN=9B497F7C78B435231A261B60388004E4C64824F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:cc:11:93:4a:36:bc:c2:ac:9b:e4:91:48:
                    c3:3b:f1:e4:aa:1a:f3:a6:ca:d4:b3:a6:17:19:2a:
                    29:62:93:a2:1f:2e:50:2e:4a:52:b8:fb:aa:33:03:
                    16:29:72:97:43:89:55:99:9e:0f:09:90:8f:22:57:
                    7e:c3:49:06:ad:4b:ad:b9:46:79:a1:4c:b2:87:5f:
                    13:42:19:bf:65:a8:34:8a:a9:20:b8:71:0b:ac:f9:
                    fd:1f:91:90:77:f3:5f:69:38:c0:78:7a:3f:57:a1:
                    31:01:aa:08:77:43:d5:1b:b5:37:82:d4:b7:89:b1:
                    4a:9e:a8:dc:c6:3b:7d:b4:af:a8:df:16:6d:de:e3:
                    98:38:84:ac:5c:c5:7c:ae:c0:ae:9b:89:6b:bd:a6:
                    c6:4e:f9:56:28:a8:73:a0:fe:b8:ed:fc:af:df:87:
                    b3:62:8b:d5:20:ed:40:de:76:c1:12:da:6d:2d:72:
                    ef:e2:7a:1f:84:59:8e:20:34:b5:15:5e:2e:c7:39:
                    eb:01:15:8f:ad:cf:96:c9:b7:fa:e5:b6:54:67:06:
                    ff:99:38:63:a9:54:e1:47:0f:f1:72:20:a8:1a:cd:
                    84:a8:62:63:8a:a1:75:b9:3d:bf:fb:d3:bf:29:2b:
                    99:35:75:10:04:db:68:8e:89:35:77:1b:12:92:92:
                    ef:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:7F:7C:78:B4:35:23:1A:26:1B:60:38:80:04:E4:C6:48:24:F2
            X509v3 Authority Key Identifier:
                keyid:B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/323830343a373261633a633030303a3a2f33342d3334203d3e20323730383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72ac:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:f3:4f:db:8e:23:f3:b2:68:4f:73:77:ad:a7:4c:d5:37:df:
         8c:61:39:30:93:5d:2c:b5:f4:01:7a:69:85:56:c5:84:b3:c8:
         59:2c:e1:0c:fa:ae:4d:5d:28:23:b6:21:77:20:e7:4e:31:2e:
         8b:85:30:36:b3:2e:e0:0e:6e:9a:43:78:4b:d9:af:07:12:6a:
         12:31:2c:2b:63:bf:0a:e7:a2:e9:6e:06:1b:7d:97:ed:10:59:
         06:66:f4:e0:46:b2:9e:de:4c:01:67:00:7f:97:cf:bd:4b:a5:
         dd:2d:15:d9:8e:85:24:62:7c:50:54:60:ec:d0:e1:fe:76:40:
         a8:4c:8f:8d:7b:76:04:77:73:0c:b3:bf:1c:90:cc:bb:99:b8:
         8b:48:7e:d7:8c:67:1f:eb:f9:88:bb:e4:09:5f:00:5f:63:a1:
         54:b4:ba:59:77:9a:30:7e:52:9b:ea:33:ad:43:5b:6a:cf:3c:
         51:c1:a5:57:69:94:38:77:82:95:09:74:a9:df:33:73:8a:e2:
         d6:c3:d8:2e:d5:46:7a:c5:af:3f:5a:22:95:64:cc:b9:02:d9:
         23:3a:44:1e:1c:ab:e2:d3:cb:ec:c1:bc:b9:fe:ff:a0:10:14:
         01:24:8d:0b:7a:aa:4c:46:8a:83:47:3d:10:1e:0c:42:1e:7c:
         77:bf:ce:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:03:13 2024 by rpki-client on console-fra.rpki-client.org