Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a31643a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a31643a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          JhXIRrZtPgJN1vf5xPXV2atJCOoWsbONNdWOOM3hRjA=
Subject key identifier:   F7:0A:AA:CE:9C:68:A9:9B:0C:66:5D:28:CE:98:A1:CB:A1:8D:93:3D
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       347808994F1282B9E31863478EAFEFDCB598F9AB
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a31643a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:47 +0000
ROA not before:           Thu 05 Oct 2023 17:46:47 +0000
ROA not after:            Thu 03 Oct 2024 17:51:47 +0000
asID:                     61832
IP address blocks:        2804:1a04:1d::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:78:08:99:4f:12:82:b9:e3:18:63:47:8e:af:ef:dc:b5:98:f9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:47 2023 GMT
            Not After : Oct  3 17:51:47 2024 GMT
        Subject: CN=F70AAACE9C68A99B0C665D28CE98A1CBA18D933D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:03:40:c8:7c:fb:cd:88:69:78:a5:49:05:
                    9f:c8:81:b8:38:67:b5:a2:9c:51:04:8f:3f:03:79:
                    bb:66:16:b7:3a:af:ac:28:78:e7:4b:05:bc:a5:3a:
                    f1:01:ef:e2:78:c5:2d:35:0d:d1:d4:c3:3b:8a:1b:
                    cc:7c:93:f5:50:f0:7e:4a:19:55:26:ea:6c:ca:17:
                    15:1f:59:93:43:9e:81:f6:13:23:28:5e:15:d5:e1:
                    a3:46:b1:bc:0e:0d:b2:af:f3:58:85:8f:0f:23:04:
                    27:fa:3d:b2:68:be:70:65:e0:40:d2:d4:60:db:6c:
                    51:85:ea:11:7e:4a:80:6e:02:39:e8:cf:20:cb:81:
                    58:a3:7e:4a:9a:97:04:80:c3:d2:46:3f:a9:f9:da:
                    de:7d:9d:5c:c2:7d:24:33:1f:2d:04:e8:73:97:e8:
                    4f:ba:4a:2e:fa:b9:b2:9e:36:bb:5e:7b:f8:f5:e3:
                    6b:09:d3:5b:98:8e:23:ff:2f:57:18:7d:93:2e:cc:
                    c2:13:de:3e:2c:2c:7b:be:d8:87:43:75:8e:38:e6:
                    48:e3:fd:50:cd:fa:90:1f:26:07:f2:ff:26:57:b9:
                    f7:72:51:53:f5:05:86:27:70:bb:87:8a:99:22:fb:
                    e3:91:c5:1b:09:6f:69:56:3d:e7:d3:43:e0:c9:bf:
                    72:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0A:AA:CE:9C:68:A9:9B:0C:66:5D:28:CE:98:A1:CB:A1:8D:93:3D
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a31643a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:9e:c7:bd:37:4c:36:4a:19:14:c5:c5:0b:af:46:3d:4f:4b:
         f7:8a:b1:bc:1d:60:96:e0:8f:d4:bd:cc:24:17:cb:10:19:cc:
         cf:bd:8f:aa:e5:4b:27:3d:b5:31:04:35:f1:4e:87:7d:d6:7d:
         ec:4a:8d:1c:34:ec:b3:2f:99:f4:e2:e4:7e:4b:f4:26:4b:25:
         68:9b:1f:d1:79:dd:e7:bd:65:0a:f4:a7:a2:b1:b4:66:a6:4e:
         7e:fb:e9:14:8c:4a:1e:5d:ab:9d:3a:ce:c4:7f:83:4c:0d:4a:
         56:36:2c:cf:6a:fc:97:cd:62:3f:67:ef:db:c4:be:8b:f5:6a:
         6a:41:77:a4:5a:37:40:dc:60:b7:64:79:b4:be:99:40:af:ec:
         01:64:be:31:41:c2:4f:fc:a2:91:1a:b0:bf:56:35:6a:9a:ae:
         00:b0:22:5c:cf:58:e4:23:c1:21:84:12:af:b4:3f:4d:d9:25:
         b9:af:1f:89:1a:db:a9:89:26:4e:6a:ad:de:64:6d:08:66:1b:
         c4:fd:53:dd:f9:e2:42:2b:a4:f7:f3:4a:bf:a3:e9:11:b1:ca:
         86:ba:92:2e:f8:5a:35:36:27:ba:d5:4b:a1:83:74:45:d4:92:
         22:00:13:09:07:7b:5f:cc:3c:e5:1d:bc:0e:e2:60:3c:10:19:
         73:29:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 19:05:31 2024 by rpki-client on console-ams.rpki-client.org