Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32313a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a32313a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          xCBnOEdeoeDeL2CiceJiPb6qlbEfU/BUrzstLKJA670=
Subject key identifier:   69:DE:39:F4:36:16:7D:59:EE:1B:9D:F3:75:B2:E5:1B:52:85:2D:1B
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       5DA5B5A01A693EE936C0A1E6F55D0F8F737A2A94
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32313a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:48 +0000
ROA not before:           Thu 05 Oct 2023 17:46:48 +0000
ROA not after:            Thu 03 Oct 2024 17:51:48 +0000
asID:                     61832
IP address blocks:        2804:1a04:21::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a5:b5:a0:1a:69:3e:e9:36:c0:a1:e6:f5:5d:0f:8f:73:7a:2a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:48 2023 GMT
            Not After : Oct  3 17:51:48 2024 GMT
        Subject: CN=69DE39F436167D59EE1B9DF375B2E51B52852D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:09:17:53:62:9f:5f:d8:97:d3:f7:8d:fd:6a:
                    d7:5e:4b:05:37:bd:dc:07:f5:5b:65:c7:05:d0:8e:
                    04:8b:b7:57:f0:57:62:95:ce:e2:18:76:33:ac:12:
                    ad:9e:93:87:8e:0b:d2:f0:63:6a:43:39:6a:1d:63:
                    c0:d6:25:b1:86:65:df:ae:ce:e5:52:1b:0a:b3:2b:
                    40:be:f5:d6:98:b1:31:00:8b:aa:b7:03:e1:b7:c9:
                    fa:62:c0:6f:5a:1c:e7:86:20:7f:92:5b:8a:da:6a:
                    36:51:f7:7f:10:54:14:3e:62:d6:10:c8:dd:4a:a6:
                    71:ae:a3:24:fc:3d:38:af:1c:85:2a:81:dd:b4:d8:
                    48:d9:29:ea:91:e5:1f:e3:97:60:2e:11:6e:b3:d2:
                    b5:1d:ff:8d:ec:33:af:d0:2c:d8:be:e0:9e:e8:70:
                    30:d8:5e:90:b1:15:da:12:03:fd:75:14:84:f2:69:
                    5a:ad:91:54:5d:b1:ba:95:50:2f:b5:f1:69:b9:9d:
                    40:71:6f:81:42:92:cf:4d:b8:1e:b3:94:91:8c:85:
                    37:cd:b1:07:91:9a:28:82:b7:70:7f:c3:e5:d9:8c:
                    6f:9c:fe:62:7e:86:ae:e5:46:fe:e3:92:47:f0:2f:
                    6e:3a:1e:9a:0f:ce:22:6d:f3:b6:4c:16:ba:b4:f8:
                    a1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DE:39:F4:36:16:7D:59:EE:1B:9D:F3:75:B2:E5:1B:52:85:2D:1B
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32313a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:21::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:7d:e9:00:c5:f9:d6:b8:3c:9d:e8:06:39:57:21:a7:a4:f2:
         d3:b0:a9:9d:3e:29:22:91:cd:a4:e1:5e:7f:a1:74:47:60:4a:
         b7:03:aa:cc:bb:5d:96:54:4b:53:3a:f7:c6:7b:5c:bc:2e:e5:
         35:a5:87:03:4b:bf:4f:d3:e3:4c:62:29:19:a5:9e:97:dc:ed:
         ba:3b:a6:63:df:03:9f:b2:92:39:31:35:2c:fb:ea:8b:52:89:
         25:19:d8:87:6e:72:e7:bd:a5:34:c2:31:88:00:16:60:ac:8b:
         e7:86:d6:d6:70:6b:e7:0c:db:fa:d5:30:2d:3a:ef:4f:fb:49:
         eb:17:ae:a6:e0:47:0b:17:43:47:13:9a:f1:03:56:c8:09:cb:
         1b:31:79:e7:82:5e:25:82:a7:88:ba:75:dd:74:dc:23:b8:13:
         f8:e6:d5:c1:5f:a0:9a:bf:46:83:4d:f9:a8:f7:fc:15:ac:36:
         02:71:b9:31:61:29:c8:7d:6c:65:ce:91:da:3f:87:70:75:fa:
         7a:59:13:bf:5e:59:e5:7f:66:47:d3:9e:61:6d:a3:41:39:04:
         b6:b7:d7:01:18:f7:8f:56:23:60:bf:84:70:15:b7:dd:25:b3:
         ae:f6:73:6c:4c:cf:9c:f2:b7:3e:01:09:fe:72:f0:c6:0e:75:
         77:34:63:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:17 2024 by rpki-client on console-fra.rpki-client.org