Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa
File:                     323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa (raw, json)
Hash identifier:          4jCeGSprHm2GgxsC34cgaS/jTE9uirEWvNBnjzmRaAc=
Subject key identifier:   C0:3C:93:55:62:50:57:61:17:96:47:5F:FC:8C:20:1D:3F:5C:0E:61
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       0CFD618B26F008748B4BABEAE8AFA8C6773BCFAC
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:33 +0000
ROA not before:           Tue 05 Dec 2023 15:39:33 +0000
ROA not after:            Tue 03 Dec 2024 15:44:33 +0000
asID:                     263641
IP address blocks:        2804:1094:1100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fd:61:8b:26:f0:08:74:8b:4b:ab:ea:e8:af:a8:c6:77:3b:cf:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:33 2023 GMT
            Not After : Dec  3 15:44:33 2024 GMT
        Subject: CN=C03C9355625057611796475FFC8C201D3F5C0E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:f8:d2:3c:ff:11:84:b0:73:ab:f5:3d:c3:
                    2b:3b:ac:44:72:8e:d5:07:99:6d:36:c7:6c:4a:e8:
                    0a:4d:f8:5a:21:fb:5c:68:98:62:39:05:49:33:1b:
                    cd:a8:3c:46:ce:d5:72:a5:0e:b0:4b:6f:46:47:d5:
                    14:69:86:c5:5a:ac:58:9d:cd:44:37:d0:8d:a9:5e:
                    ad:bb:18:dc:fc:c6:99:08:a3:f3:de:b1:3e:8e:c0:
                    42:62:b1:72:3a:09:de:b6:17:c0:06:7a:25:f1:49:
                    20:7e:b2:d8:35:fc:20:23:36:be:8b:f1:10:a4:fc:
                    85:21:7a:fa:d4:63:23:94:77:aa:4e:11:68:07:10:
                    0a:f3:b8:45:80:a5:cc:31:4b:d4:2f:04:bf:88:a9:
                    eb:a3:92:14:49:c0:f3:a1:e5:9d:04:d0:06:28:64:
                    a0:98:f0:57:63:53:20:e8:5d:d6:f2:f3:75:46:5f:
                    d3:b8:d4:ee:29:46:9a:ba:d2:0d:f7:fe:d9:bf:cd:
                    e6:2b:13:c0:d4:a6:fb:7e:43:43:2f:6c:8e:e9:10:
                    a9:39:f4:09:88:62:62:7e:e8:37:d0:44:d1:3f:e1:
                    2d:86:80:f3:b1:3a:30:46:2e:fd:c6:b4:75:a6:e0:
                    58:d2:62:be:7d:6c:3a:da:73:3f:b0:b0:f4:81:42:
                    a7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:93:55:62:50:57:61:17:96:47:5F:FC:8C:20:1D:3F:5C:0E:61
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:76:be:86:5c:69:35:e5:82:4c:57:50:5e:a5:39:1b:8b:25:
         8e:4c:c2:b9:6f:11:ae:5c:92:64:0f:68:84:29:89:b9:b8:31:
         59:18:82:34:6e:bf:58:e8:51:71:0e:c7:b1:14:16:49:27:d2:
         f1:eb:b8:4c:38:55:00:38:63:6f:82:43:37:61:b5:da:ee:64:
         57:7b:1c:cf:83:1a:a0:43:07:12:11:bb:04:45:73:dd:bf:0c:
         51:a8:5d:fb:be:7c:5f:35:3c:52:95:96:7e:fb:6d:65:e4:00:
         a0:7f:20:17:04:f8:0b:17:2d:82:67:b8:03:f4:85:99:db:2f:
         ad:22:06:46:57:61:65:a6:ca:4c:74:89:fa:62:4e:b5:3e:91:
         f2:1c:a5:54:61:f7:d3:89:9d:8b:bc:51:61:10:57:19:66:22:
         f7:1f:04:b9:e0:ed:d5:0d:55:6e:6b:8f:11:bb:9f:e0:29:ad:
         30:75:3f:de:b1:a6:7e:cc:05:39:d6:35:25:43:0e:ed:6f:80:
         aa:01:12:bd:aa:a9:ef:f1:38:d4:c3:98:3b:7f:01:c8:89:04:
         7a:96:f1:a5:46:c4:63:64:90:44:31:2c:91:f0:49:f3:a9:8c:
         c5:20:23:36:b3:0d:4a:be:c7:ca:ff:43:61:3e:c3:57:c3:0c:
         1f:75:01:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 02:24:52 2024 by rpki-client on console-fra.rpki-client.org