Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa
File:                     323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa (raw, json)
Hash identifier:          9BSH2PqLMf2Syt/HvzseXL0BJSisrNdN8n4VUvWUcCA=
Subject key identifier:   EA:13:F9:1B:76:DE:D8:66:1F:24:69:03:ED:64:92:B6:07:13:D3:1E
Certificate issuer:       /CN=E46E993C4F612FBD69E525931CC4402187BA41CF
Certificate serial:       489CA3AEE83533C53492EC7E1692D0EA36F4C2C2
Authority key identifier: E4:6E:99:3C:4F:61:2F:BD:69:E5:25:93:1C:C4:40:21:87:BA:41:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E46E993C4F612FBD69E525931CC4402187BA41CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa
Signing time:             Tue 11 Jun 2024 17:33:54 +0000
ROA not before:           Tue 11 Jun 2024 17:28:54 +0000
ROA not after:            Tue 10 Jun 2025 17:33:54 +0000
asID:                     265282
IP address blocks:        2804:2d70:80::/41 maxlen: 41

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9c:a3:ae:e8:35:33:c5:34:92:ec:7e:16:92:d0:ea:36:f4:c2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E46E993C4F612FBD69E525931CC4402187BA41CF
        Validity
            Not Before: Jun 11 17:28:54 2024 GMT
            Not After : Jun 10 17:33:54 2025 GMT
        Subject: CN=EA13F91B76DED8661F246903ED6492B60713D31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:19:37:78:c9:a8:6d:0f:8f:7d:19:2a:fe:
                    9a:58:1f:b2:52:31:34:87:cf:bb:22:79:93:4c:91:
                    d4:cb:43:24:3e:33:03:53:e7:38:3d:b3:e0:e3:5d:
                    9f:ce:ed:99:dc:35:37:65:3c:b9:5e:0e:12:3f:b9:
                    ed:0f:1f:b2:f0:02:98:a3:b5:c7:e7:ec:42:74:eb:
                    df:3d:de:2b:0a:1e:ce:a8:20:6c:e5:12:ef:5b:02:
                    f8:62:42:d2:c5:65:af:eb:d9:64:6b:3f:e8:a8:55:
                    2c:c0:1e:34:9f:97:a0:39:88:4d:42:9d:f1:d0:ca:
                    e2:ef:4b:b4:1e:cf:91:e2:e2:a3:96:91:ba:36:2a:
                    66:47:cc:a4:db:5a:71:7b:a3:26:36:93:d6:64:db:
                    ec:94:23:c6:ed:ec:6d:93:80:2c:51:0b:8e:4d:50:
                    4d:f7:43:bd:c4:84:50:4d:c7:b5:5c:46:63:72:a0:
                    8a:18:b0:28:c7:23:ab:e4:b5:ae:29:72:39:cc:ce:
                    35:96:4a:69:03:8b:83:17:b2:fa:b8:00:42:2e:e4:
                    6c:72:b5:d4:d1:22:54:a5:78:de:9c:30:ce:3c:b6:
                    1d:4f:7e:5c:fd:c2:9a:a4:a2:74:bb:82:86:ae:0f:
                    34:33:94:59:a6:a1:8e:21:dd:b0:9e:76:8f:c2:08:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:13:F9:1B:76:DE:D8:66:1F:24:69:03:ED:64:92:B6:07:13:D3:1E
            X509v3 Authority Key Identifier:
                keyid:E4:6E:99:3C:4F:61:2F:BD:69:E5:25:93:1C:C4:40:21:87:BA:41:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/E46E993C4F612FBD69E525931CC4402187BA41CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E46E993C4F612FBD69E525931CC4402187BA41CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d70:80::/41

    Signature Algorithm: sha256WithRSAEncryption
         a9:76:3c:bd:0c:d6:ff:7a:b9:51:79:b5:bc:06:ba:77:9f:c2:
         36:5d:5e:7d:75:77:21:ac:66:fe:ef:93:fb:10:97:93:29:ee:
         8d:30:46:ad:49:04:51:e2:1f:f1:35:aa:d3:9b:34:c1:21:a2:
         f8:42:13:ff:09:57:ed:1e:3c:40:bb:91:f2:f4:59:92:2b:59:
         d4:72:e2:ed:a5:fe:68:34:24:01:08:c1:e5:aa:ea:0d:67:e2:
         8f:5f:01:74:fa:ee:60:93:41:b9:4e:2d:62:2a:31:f7:71:94:
         bb:19:76:66:51:56:cd:31:45:58:85:dd:b0:80:ea:56:d9:92:
         e9:35:a1:95:86:03:1f:1c:45:c8:f0:87:88:46:4b:b6:28:b3:
         93:84:f5:bf:82:96:4c:3d:ba:8b:f5:6a:9b:d6:79:45:18:ee:
         ec:c3:5d:89:12:50:1d:0a:54:16:eb:25:37:32:d8:14:0e:e2:
         c0:e8:e3:65:94:dd:7b:a6:f5:68:cf:fc:55:42:c4:18:e7:4f:
         30:ef:ae:f8:87:57:79:35:b5:9b:78:12:d9:37:ea:54:21:2e:
         6f:79:8f:cd:51:90:42:73:89:cc:0a:43:fa:73:0f:8b:41:f2:
         3f:85:2f:89:30:3a:95:45:24:1c:91:0b:99:07:e5:19:dc:3f:
         43:14:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 18:28:15 2024 by rpki-client on console-fra.rpki-client.org