Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a38333a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a38333a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          g2sWNxi0CiFSIBttgzO5w26EQFP8g+ZrKCDH43wPr1E=
Subject key identifier:   98:4C:D8:87:8B:B4:9D:96:77:48:66:F9:F3:9C:AF:A8:4A:D3:D6:B1
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       703B587F950C6E92581CDADC535D5F9FA4E135D4
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a38333a3a2f34382d3438203d3e203631383332.roa
Signing time:             Wed 07 Jun 2023 16:37:42 +0000
ROA not before:           Wed 07 Jun 2023 16:32:42 +0000
ROA not after:            Wed 05 Jun 2024 16:37:42 +0000
asID:                     61832
IP address blocks:        2804:1a04:83::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3b:58:7f:95:0c:6e:92:58:1c:da:dc:53:5d:5f:9f:a4:e1:35:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Jun  7 16:32:42 2023 GMT
            Not After : Jun  5 16:37:42 2024 GMT
        Subject: CN=984CD8878BB49D96774866F9F39CAFA84AD3D6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ce:b4:bd:ea:70:4d:d2:b8:b5:4a:3a:c5:99:
                    2a:e8:27:b7:ca:52:0f:fa:33:61:b5:56:79:5a:f9:
                    dd:2b:b8:c7:33:a7:68:d9:d6:3e:e9:45:0c:fb:58:
                    e1:d2:a2:97:97:a7:78:3b:fb:e4:ec:0d:4a:bc:f6:
                    f7:44:32:5f:b9:c7:ed:38:df:52:95:76:3d:1a:4e:
                    41:24:a9:b3:ea:c2:2a:7b:0f:04:23:78:02:74:a8:
                    4e:8f:d8:52:7a:94:47:f5:ac:c2:fd:3a:2f:62:03:
                    26:fa:94:24:25:f6:c8:e7:04:c9:4c:8f:b4:bd:26:
                    48:58:a4:00:f7:fa:e3:96:0f:f7:fb:9e:1f:8d:c0:
                    b5:f8:3f:07:fa:6c:35:3f:bd:9f:b9:38:72:08:e8:
                    99:0d:5e:26:aa:ac:5e:a8:71:54:24:05:b3:95:2c:
                    0b:fb:95:d4:72:c6:93:71:21:2d:48:31:71:45:7f:
                    24:ef:66:86:d9:05:6b:62:e5:db:5c:19:87:da:82:
                    d6:44:fd:27:e6:c7:14:3c:ac:0a:17:b5:c4:95:cf:
                    c0:39:56:5e:7b:4c:97:c7:16:ad:f8:66:3c:1b:43:
                    b7:69:72:9d:27:aa:06:c5:da:14:57:89:23:c7:85:
                    96:7f:fd:32:24:d8:cf:b8:fa:9b:1b:2a:35:6b:5a:
                    57:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4C:D8:87:8B:B4:9D:96:77:48:66:F9:F3:9C:AF:A8:4A:D3:D6:B1
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a38333a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:83::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:c2:f9:af:67:fc:ae:58:06:49:73:6c:7d:4d:7d:76:ae:
         68:fa:f6:f7:ff:83:a9:f9:4c:be:d3:fa:92:05:62:e6:af:30:
         8a:35:3f:d8:de:96:9e:45:87:c5:64:75:f2:cc:b5:f0:36:db:
         87:c1:dc:28:20:11:c5:43:af:b2:9e:9d:bc:a4:86:63:fd:66:
         76:52:65:19:81:a7:6d:71:22:3d:47:68:5d:4e:7a:c0:a8:cf:
         cb:c2:62:8d:09:c2:b8:e0:23:ca:4c:91:f5:1a:a5:8c:3a:f1:
         30:f1:39:65:8a:32:86:01:26:f3:50:fe:ef:f4:7b:94:20:14:
         a5:77:21:3c:e3:81:b8:30:93:a1:87:1a:0c:62:45:ae:20:b9:
         d2:27:3d:a5:f5:d3:93:01:0a:0b:dd:ca:40:42:52:0f:be:9d:
         e1:ae:45:98:21:7a:44:db:07:43:5e:9d:c6:f9:4c:c7:65:e4:
         92:72:49:7b:32:36:ab:94:b3:01:2b:df:93:71:7e:9c:05:14:
         bb:8b:cc:cf:53:6e:d8:58:e0:28:e8:c5:71:39:3f:11:17:eb:
         03:4f:22:89:03:62:84:c3:ac:18:a3:63:0d:56:21:ba:35:06:
         35:7c:60:77:cc:e8:14:d1:26:d9:80:22:ab:cb:8f:da:52:46:
         89:55:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:17 2024 by rpki-client on console-fra.rpki-client.org