Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/323830343a373330633a3a2f33322d3334203d3e20323730383932.roa
File:                     323830343a373330633a3a2f33322d3334203d3e20323730383932.roa (raw, json)
Hash identifier:          uc3OE1K7qudyq7iL2Wxxi5A1g7QWOWp38U/jHqSlTVQ=
Subject key identifier:   D9:7B:58:7A:5C:80:7E:6D:1F:2D:37:7E:52:4A:69:C8:88:50:1B:3B
Certificate issuer:       /CN=E496E55B2D7D83B6D801A61DD5F8AF31B0866F38
Certificate serial:       40A26D10DF1DC66898BB09AF2B55D4C8531F33E0
Authority key identifier: E4:96:E5:5B:2D:7D:83:B6:D8:01:A6:1D:D5:F8:AF:31:B0:86:6F:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E496E55B2D7D83B6D801A61DD5F8AF31B0866F38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/323830343a373330633a3a2f33322d3334203d3e20323730383932.roa
Signing time:             Sun 21 Jul 2024 14:50:33 +0000
ROA not before:           Sun 21 Jul 2024 14:45:33 +0000
ROA not after:            Sun 20 Jul 2025 14:50:33 +0000
asID:                     270892
IP address blocks:        2804:730c::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a2:6d:10:df:1d:c6:68:98:bb:09:af:2b:55:d4:c8:53:1f:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E496E55B2D7D83B6D801A61DD5F8AF31B0866F38
        Validity
            Not Before: Jul 21 14:45:33 2024 GMT
            Not After : Jul 20 14:50:33 2025 GMT
        Subject: CN=D97B587A5C807E6D1F2D377E524A69C888501B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:00:3d:de:60:5b:2e:f7:5d:4a:21:74:19:
                    dd:17:e7:c9:a8:c5:73:63:b4:1b:cb:2f:9e:14:d2:
                    f0:fe:55:ec:22:29:a9:6e:d7:87:c6:65:9a:18:1d:
                    af:e5:bc:28:17:d3:7a:77:52:e4:17:b9:fb:f9:8b:
                    bb:96:08:4b:27:04:9d:67:e4:be:59:ca:02:57:4d:
                    81:10:9a:3d:40:96:d8:6d:c7:74:ff:7f:df:41:b8:
                    4a:e5:1c:5a:74:82:43:f3:4b:2e:da:d6:21:6c:92:
                    5c:b3:e8:54:d7:0f:ef:f6:a2:50:67:02:ba:a3:2f:
                    a1:5e:9d:f7:29:04:90:89:f1:38:5c:2e:1e:ac:c2:
                    d0:a7:3f:7e:20:82:a8:93:22:33:45:be:5e:d2:03:
                    b2:00:b2:ac:57:67:17:f4:d4:35:7c:71:08:78:01:
                    d3:62:21:bc:f4:5e:90:d0:93:e7:10:b4:a1:32:f3:
                    9f:4b:1c:5b:fd:e7:39:f3:05:3f:55:06:c2:9c:40:
                    79:1d:a9:63:26:77:66:14:df:0f:fb:f1:2d:d7:69:
                    dc:54:a7:40:ee:ee:03:61:e3:ec:d3:d7:76:d8:14:
                    86:2c:bb:1d:2d:ed:b8:6d:e0:b6:f6:05:5d:da:0a:
                    4d:09:3e:4b:aa:b1:d4:dc:7f:3e:6b:5c:f2:ea:e7:
                    a0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7B:58:7A:5C:80:7E:6D:1F:2D:37:7E:52:4A:69:C8:88:50:1B:3B
            X509v3 Authority Key Identifier:
                keyid:E4:96:E5:5B:2D:7D:83:B6:D8:01:A6:1D:D5:F8:AF:31:B0:86:6F:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/E496E55B2D7D83B6D801A61DD5F8AF31B0866F38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E496E55B2D7D83B6D801A61DD5F8AF31B0866F38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/323830343a373330633a3a2f33322d3334203d3e20323730383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:730c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:0e:17:24:06:e5:54:8a:9e:fd:43:17:31:32:b8:e8:35:76:
         3c:aa:94:27:9f:27:5f:3b:20:75:aa:e0:ef:90:27:2b:23:06:
         00:bb:d8:cf:29:9d:c6:ac:41:61:f3:3d:40:22:2d:84:62:a4:
         44:f9:f4:2c:83:d0:9f:23:bd:bf:47:4a:56:fa:11:c7:0f:82:
         4d:c7:ab:4e:03:85:cd:38:4e:ff:91:73:c1:92:49:59:65:99:
         a3:be:2d:0b:00:f1:d8:5d:6d:a9:fd:fd:b4:5e:53:bc:2b:a8:
         f4:6b:cc:08:db:d3:96:a3:77:ca:b4:7e:65:e4:7b:20:3c:23:
         9d:d4:71:0a:14:18:db:19:02:39:00:00:41:c4:d3:91:eb:f7:
         9d:1e:fa:54:a5:47:20:2e:88:b3:7d:a6:6e:e9:b5:c7:b6:63:
         46:13:53:e1:ec:cf:08:6e:fe:1d:24:98:9f:0b:95:a9:13:8f:
         1a:79:17:e5:f0:9c:1c:8c:31:bb:58:d9:95:69:39:ca:92:08:
         bd:a1:ac:9b:40:5b:f8:dd:79:a3:b3:a0:af:68:d7:8f:23:a9:
         32:41:22:50:16:3b:ac:42:5b:7f:ff:4e:92:0e:29:aa:d7:1e:
         82:4f:54:a4:35:61:3f:39:d6:50:3d:e9:6c:d2:e4:a4:6f:76:
         83:0a:12:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 13:32:51 2024 by rpki-client on console-fra.rpki-client.org