Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33332d3336203d3e20323637343230.roa
File:                     323830343a346433633a3a2f33332d3336203d3e20323637343230.roa (raw, json)
Hash identifier:          pfFD+1TPdDo1i9BbURO7tjSEU3HXcTud5LQlQ/79E24=
Subject key identifier:   D2:D9:60:E8:4F:CD:D6:70:E5:92:92:8E:41:FC:21:57:00:4E:CB:0C
Certificate issuer:       /CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
Certificate serial:       6D64268F23092570F1AE9DA936820E95E841E00D
Authority key identifier: EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33332d3336203d3e20323637343230.roa
Signing time:             Tue 17 Sep 2024 14:45:14 +0000
ROA not before:           Tue 17 Sep 2024 14:40:14 +0000
ROA not after:            Tue 16 Sep 2025 14:45:14 +0000
asID:                     267420
IP address blocks:        2804:4d3c::/33 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:64:26:8f:23:09:25:70:f1:ae:9d:a9:36:82:0e:95:e8:41:e0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
        Validity
            Not Before: Sep 17 14:40:14 2024 GMT
            Not After : Sep 16 14:45:14 2025 GMT
        Subject: CN=D2D960E84FCDD670E592928E41FC2157004ECB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:ec:38:c2:7e:21:97:40:43:c4:e8:52:e5:
                    44:df:3f:66:a8:90:41:23:7b:af:4e:1e:31:67:8c:
                    01:3f:98:f0:6e:cf:a6:37:49:ce:bb:11:b3:93:bd:
                    44:2b:2a:8f:0f:36:76:15:e9:04:a6:03:82:1c:bb:
                    86:f4:54:cc:c5:9f:f0:87:2e:50:b5:f9:6b:e2:9c:
                    e6:e5:a5:fd:30:85:85:49:7e:db:86:15:40:b8:2e:
                    d3:f3:6b:8d:0a:bd:52:66:5d:35:12:38:9b:7a:56:
                    93:ed:c8:88:a6:30:72:22:d5:ae:49:38:b0:e7:82:
                    4f:fa:58:53:5a:a3:26:89:3c:bc:59:20:30:22:6b:
                    6d:e6:9a:b5:dc:06:52:95:9e:17:f4:5e:90:ea:cf:
                    42:4b:4e:d6:7e:75:72:ef:57:47:cf:d7:5f:e4:d3:
                    df:74:19:4a:5a:df:fd:4a:fa:62:a6:b5:7c:ab:bc:
                    9d:4e:7f:8b:11:f5:e9:64:64:10:6f:34:56:2a:2d:
                    15:89:90:05:12:a2:32:10:31:9b:0f:40:d8:af:b9:
                    59:50:c1:03:b1:76:ef:05:33:90:08:a3:41:56:46:
                    f9:9d:bd:5c:ab:15:f2:fd:82:2d:13:91:65:65:1c:
                    cd:dc:55:41:41:e5:da:44:db:c1:7b:c2:41:f3:bd:
                    a3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D9:60:E8:4F:CD:D6:70:E5:92:92:8E:41:FC:21:57:00:4E:CB:0C
            X509v3 Authority Key Identifier:
                keyid:EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33332d3336203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c::/33

    Signature Algorithm: sha256WithRSAEncryption
         12:5c:6a:25:b6:2a:25:00:28:f3:a4:a0:91:5b:e8:9a:fd:71:
         b6:c8:3e:18:20:ff:5d:7d:69:82:4b:5a:69:67:8b:f5:0f:78:
         83:8a:cf:d1:59:c9:c8:28:c8:a4:e5:d0:84:eb:74:de:8d:d6:
         79:86:04:a6:71:d3:f6:c5:b0:af:af:a5:e6:07:a5:86:b5:42:
         8a:28:9f:2a:a0:bf:c6:25:d7:5d:b0:bb:40:ce:aa:08:b3:ad:
         05:43:d1:11:3e:7b:b7:0a:07:e3:48:43:08:1c:0e:c2:39:7a:
         ae:ce:04:3a:53:7a:99:ef:9e:07:2a:9a:69:b1:e6:b4:b2:8d:
         eb:06:15:20:fc:6f:de:61:3a:37:ad:84:64:3e:b1:4d:df:22:
         3c:da:c1:47:a0:e9:f2:29:a8:05:37:eb:9f:d3:63:f1:36:d6:
         d5:47:c3:2e:73:22:7e:77:83:ac:6d:d0:a2:4e:30:d8:f4:5c:
         0d:f5:24:5c:52:28:3f:38:8b:05:c0:d8:56:2e:b6:bf:b7:96:
         d6:84:b0:e0:66:b5:77:92:d5:60:a6:43:ff:19:76:26:d2:00:
         e5:29:91:df:60:d4:23:8c:f2:f7:5b:43:69:90:0c:7c:cd:fb:
         1b:50:84:6c:91:8b:f9:e4:69:89:9b:f1:db:e8:69:90:4f:c9:
         1a:43:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 13:33:04 2024 by rpki-client on console-fra.rpki-client.org