Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653230303a3a2f34302d3430203d3e20323633363132.roa
File:                     323830343a6666633a653230303a3a2f34302d3430203d3e20323633363132.roa (raw, json)
Hash identifier:          5Xp6BJ8K1qQTapeI0IztAQPHAWLPbQ165uwD9P+/0K0=
Subject key identifier:   13:91:99:31:4A:D8:A8:E6:DD:E4:5A:27:30:67:9C:89:DF:5E:3F:DE
Certificate issuer:       /CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
Certificate serial:       24ABE8B83B50D2CD9F90E450DC185199B0AC8421
Authority key identifier: 4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653230303a3a2f34302d3430203d3e20323633363132.roa
Signing time:             Mon 01 Jan 2024 11:29:47 +0000
ROA not before:           Mon 01 Jan 2024 11:24:47 +0000
ROA not after:            Mon 30 Dec 2024 11:29:47 +0000
asID:                     263612
IP address blocks:        2804:ffc:e200::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ab:e8:b8:3b:50:d2:cd:9f:90:e4:50:dc:18:51:99:b0:ac:84:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
        Validity
            Not Before: Jan  1 11:24:47 2024 GMT
            Not After : Dec 30 11:29:47 2024 GMT
        Subject: CN=139199314AD8A8E6DDE45A2730679C89DF5E3FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:05:34:08:b3:40:01:a1:61:47:ec:f7:de:
                    3e:c5:67:54:8e:ea:3d:b4:ab:2b:90:4f:41:ec:7e:
                    3c:a7:55:07:4a:73:ec:15:78:44:08:98:bc:dc:59:
                    77:5f:c6:82:73:a8:b2:a2:36:07:33:17:26:25:61:
                    df:92:9a:2a:85:94:1d:26:42:a8:11:40:8e:92:02:
                    58:03:b6:2a:44:47:d2:7c:a4:85:4c:7f:df:80:80:
                    28:8a:ff:e0:ee:06:b3:df:2e:15:9a:02:ba:a6:8d:
                    2d:63:fe:46:30:bb:bb:71:c8:e4:ac:cc:60:73:73:
                    bf:2a:71:bb:2c:03:36:57:69:e1:97:c2:e1:dd:2e:
                    ee:9d:37:21:3a:6a:9f:05:7e:83:67:4b:14:52:66:
                    98:12:99:b8:24:d8:65:5a:7d:08:08:96:59:1a:dc:
                    67:b6:1d:21:69:98:35:0c:a9:29:5c:d1:98:67:28:
                    c0:4c:3b:c9:80:3c:31:fa:be:ca:e7:7d:11:4d:64:
                    44:77:97:f2:05:98:48:cc:89:69:23:85:19:0d:b3:
                    a6:d3:84:15:5c:a4:4c:b4:56:8e:ee:b2:fd:d7:bd:
                    10:30:3d:ae:a9:b8:15:6d:3d:e9:8b:b9:51:54:f7:
                    49:24:46:31:3a:a2:85:f4:ba:85:81:54:46:97:a1:
                    8f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:91:99:31:4A:D8:A8:E6:DD:E4:5A:27:30:67:9C:89:DF:5E:3F:DE
            X509v3 Authority Key Identifier:
                keyid:4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653230303a3a2f34302d3430203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e200::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:59:58:31:5b:da:9e:78:84:57:fc:32:76:bb:a2:60:70:bb:
         59:d8:28:cd:65:44:5b:43:32:91:49:18:3a:f9:33:3c:47:9c:
         bc:5c:17:ec:c6:58:45:17:d9:a7:24:7b:91:31:bc:f4:47:06:
         15:4d:29:c0:46:8f:b7:c9:35:5e:08:c9:0d:71:7c:35:76:6b:
         d5:ea:b4:36:ec:24:f8:98:a0:2d:ca:71:c1:3d:50:8b:e5:32:
         76:3c:2c:b2:90:05:d5:45:68:04:9c:4f:f2:eb:1d:ac:13:80:
         9f:39:09:b2:0f:6d:43:05:26:62:60:0d:77:2b:ab:fc:a9:26:
         ae:38:b0:df:f8:90:6c:c5:ee:81:c1:c4:3b:f2:e9:32:3a:20:
         16:58:b2:13:fd:b2:13:6f:3a:e5:34:5b:09:14:49:76:44:93:
         7a:b9:e0:39:13:b7:06:98:83:7b:25:d0:c8:93:73:b6:3a:db:
         be:c4:0a:33:d9:37:78:50:00:23:5d:73:87:7c:e8:d3:72:3f:
         d6:59:c1:90:51:3a:11:f0:7e:b3:27:f2:5e:9b:86:dd:24:06:
         7e:98:a7:0f:d5:cb:52:a8:b6:be:c2:ea:7e:c4:6b:52:5f:40:
         58:dd:b0:b2:da:f3:52:8e:b8:70:e9:6c:ca:5a:42:63:45:70:
         1b:4e:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 18:10:06 2024 by rpki-client on console-ams.rpki-client.org