Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/323830343a346462303a3a2f33322d3332203d3e20323638323133.roa
File:                     323830343a346462303a3a2f33322d3332203d3e20323638323133.roa (raw, json)
Hash identifier:          q3dFYwpOJlOFd7sJrm/Afgd4lDVnnjK2VzWavjfAbOc=
Subject key identifier:   AE:5B:5C:EB:55:A7:65:03:64:AA:CA:41:22:C8:36:3D:0B:D7:A5:0A
Certificate issuer:       /CN=BD3C6F3B1223FA6345D28272334E1F496EA34741
Certificate serial:       56B94DD147216F20DBC926CE577E12E0E64D6A03
Authority key identifier: BD:3C:6F:3B:12:23:FA:63:45:D2:82:72:33:4E:1F:49:6E:A3:47:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3C6F3B1223FA6345D28272334E1F496EA34741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/323830343a346462303a3a2f33322d3332203d3e20323638323133.roa
Signing time:             Fri 30 Aug 2024 19:52:36 +0000
ROA not before:           Fri 30 Aug 2024 19:47:36 +0000
ROA not after:            Fri 29 Aug 2025 19:52:36 +0000
asID:                     268213
IP address blocks:        2804:4db0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b9:4d:d1:47:21:6f:20:db:c9:26:ce:57:7e:12:e0:e6:4d:6a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD3C6F3B1223FA6345D28272334E1F496EA34741
        Validity
            Not Before: Aug 30 19:47:36 2024 GMT
            Not After : Aug 29 19:52:36 2025 GMT
        Subject: CN=AE5B5CEB55A7650364AACA4122C8363D0BD7A50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:76:19:69:b6:84:48:78:97:73:da:b4:db:
                    07:bd:46:ab:50:59:8d:6b:f6:a0:8a:d1:71:f6:4c:
                    95:09:ad:29:19:af:6d:2e:d1:77:08:24:62:7f:13:
                    85:40:f0:0e:5a:d5:89:f4:ab:f1:e9:d0:30:5f:c9:
                    94:dd:db:f4:1c:08:7a:3b:1b:01:ae:8e:b9:67:08:
                    98:98:a4:99:a8:dd:16:68:da:63:06:29:5b:2a:88:
                    f8:03:49:12:1e:57:99:79:27:05:23:15:90:b0:27:
                    28:8a:32:32:ca:37:19:b8:4e:9f:5d:85:b7:6e:33:
                    f5:3f:4f:b2:ab:c8:95:ef:77:1c:03:ff:66:fc:5f:
                    c9:62:bf:5d:1a:b8:4a:f6:41:83:bc:11:09:24:9b:
                    c5:30:a8:de:88:33:c1:9b:fe:c0:21:79:75:d6:07:
                    6f:c1:f1:da:32:57:49:9c:fa:29:5a:20:bf:8b:c3:
                    a1:06:f3:cd:54:d6:54:c0:d1:61:b4:00:9f:6b:a2:
                    ae:6b:95:c8:a2:a8:65:20:95:a0:de:20:f0:ef:02:
                    f6:48:63:a0:8c:a5:8d:e3:d8:29:bf:0c:1b:06:d6:
                    2b:00:31:67:5d:ed:c9:84:f5:44:38:7b:3d:d5:d8:
                    77:fd:71:cf:cc:b7:76:99:6e:6e:03:9d:14:a0:b8:
                    ec:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5B:5C:EB:55:A7:65:03:64:AA:CA:41:22:C8:36:3D:0B:D7:A5:0A
            X509v3 Authority Key Identifier:
                keyid:BD:3C:6F:3B:12:23:FA:63:45:D2:82:72:33:4E:1F:49:6E:A3:47:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/BD3C6F3B1223FA6345D28272334E1F496EA34741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3C6F3B1223FA6345D28272334E1F496EA34741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/323830343a346462303a3a2f33322d3332203d3e20323638323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:f8:dc:9f:e6:43:d6:75:ad:09:01:2a:2f:10:d4:b2:67:0f:
         7a:56:b8:8a:82:9c:49:35:fc:e8:ac:d9:5a:60:df:b1:2d:5a:
         d4:d3:38:d2:44:b9:06:2c:0f:e0:b4:7b:b0:db:1f:4c:d9:d7:
         b9:c7:a5:47:01:19:35:e8:ca:00:2c:32:71:c1:b1:f8:81:df:
         7c:16:1c:04:af:3a:c9:93:78:c5:90:9c:30:10:24:8d:d6:27:
         51:97:f1:d8:d8:20:7b:70:9c:c7:65:98:22:89:84:0d:ac:0f:
         0a:5a:6c:5f:7d:28:8b:cd:e0:86:c0:12:52:12:96:ea:65:03:
         71:54:73:2e:a7:61:b1:57:de:2b:0d:97:06:2b:e2:79:57:0f:
         fd:2a:3b:61:76:89:0f:36:bf:67:e3:4c:e3:44:a4:c2:73:02:
         3b:02:a4:67:3a:f2:d8:9c:a4:42:9f:89:7e:ed:2c:98:b6:67:
         72:03:8d:c0:24:1e:99:b5:e2:e8:9e:82:4a:0c:60:80:4a:28:
         93:76:95:18:bd:a1:9e:f8:24:a5:9b:84:91:b5:67:7e:ee:87:
         28:cb:3b:82:ab:15:ff:d4:9b:45:bc:45:f8:b4:58:7e:d5:ca:
         42:3c:66:87:a9:eb:bb:8a:8d:05:db:d2:e8:aa:b9:ee:e5:d4:
         3f:f4:7c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 11:04:07 2024 by rpki-client on console-ams.rpki-client.org