Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/323830343a6533343a3a2f33322d313238203d3e203631383839.roa
File:                     323830343a6533343a3a2f33322d313238203d3e203631383839.roa (raw, json)
Hash identifier:          gCrmlIbAcIWtcTXAs0d70gN7eEwhO6fzXV6pweHslCc=
Subject key identifier:   AF:ED:3F:1F:7A:F3:72:5A:1A:90:DE:BA:5B:DD:7D:4D:85:FC:B8:14
Certificate issuer:       /CN=935257EB3C9C286B284FF65477D23761A683AD6E
Certificate serial:       3B44ADD1FE8A67097E6E0C35939DAD6F7D034E04
Authority key identifier: 93:52:57:EB:3C:9C:28:6B:28:4F:F6:54:77:D2:37:61:A6:83:AD:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/935257EB3C9C286B284FF65477D23761A683AD6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/323830343a6533343a3a2f33322d313238203d3e203631383839.roa
Signing time:             Mon 22 Apr 2024 18:38:14 +0000
ROA not before:           Mon 22 Apr 2024 18:33:14 +0000
ROA not after:            Mon 21 Apr 2025 18:38:14 +0000
asID:                     61889
IP address blocks:        2804:e34::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:44:ad:d1:fe:8a:67:09:7e:6e:0c:35:93:9d:ad:6f:7d:03:4e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935257EB3C9C286B284FF65477D23761A683AD6E
        Validity
            Not Before: Apr 22 18:33:14 2024 GMT
            Not After : Apr 21 18:38:14 2025 GMT
        Subject: CN=AFED3F1F7AF3725A1A90DEBA5BDD7D4D85FCB814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:79:42:aa:3a:1f:1e:a8:09:66:a9:2f:8c:
                    b2:b1:d1:08:c8:4d:9f:1d:be:6c:de:a0:8e:7e:7e:
                    2f:bb:43:07:1a:ca:45:3a:40:c2:c8:42:24:cc:dd:
                    f1:a6:bd:d0:e1:26:a2:47:db:79:dd:c0:76:a7:50:
                    d5:8a:58:7d:b2:21:fd:4e:ef:74:75:be:56:55:92:
                    eb:20:b7:2a:fc:d0:e2:b4:25:df:24:33:12:c0:1c:
                    b6:55:e1:e8:21:58:db:c7:63:50:0b:6f:b2:3e:9b:
                    6d:2e:b9:9f:b5:e4:67:85:ae:fc:44:20:0b:3d:c5:
                    7c:28:21:c9:df:28:3e:49:d8:1a:14:c4:6e:28:c5:
                    50:ea:d2:9e:04:fe:c9:f6:95:83:cb:93:f3:2d:8b:
                    0b:0e:d0:17:26:2a:6e:de:db:35:7a:fc:97:29:75:
                    4b:45:8b:0b:79:10:1c:22:3e:e6:43:3b:65:ea:fc:
                    a9:93:e0:fd:ab:15:ba:95:8b:3d:0c:f7:b0:14:53:
                    bc:f0:f9:90:b7:14:c4:8a:47:c1:1c:08:9d:09:09:
                    ce:82:9b:c5:06:43:09:98:66:e8:1e:86:79:cc:d1:
                    0e:07:a3:98:aa:9c:94:f9:fd:15:eb:e8:fa:20:e6:
                    f2:d8:fc:ad:42:34:e1:b8:dc:b2:da:8d:e3:d8:b5:
                    84:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:ED:3F:1F:7A:F3:72:5A:1A:90:DE:BA:5B:DD:7D:4D:85:FC:B8:14
            X509v3 Authority Key Identifier:
                keyid:93:52:57:EB:3C:9C:28:6B:28:4F:F6:54:77:D2:37:61:A6:83:AD:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/935257EB3C9C286B284FF65477D23761A683AD6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/935257EB3C9C286B284FF65477D23761A683AD6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/323830343a6533343a3a2f33322d313238203d3e203631383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e34::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:8b:aa:87:2b:b1:bf:75:8e:bb:99:78:ae:e3:2a:b9:e6:6f:
         86:92:25:d2:e4:e0:34:86:99:e8:c3:55:59:ac:e1:3c:bf:13:
         90:0d:19:c2:b4:8b:f4:77:99:72:1e:db:d1:74:e3:12:47:cd:
         6b:9c:b5:67:07:6f:45:a1:b2:b8:ad:67:9f:d0:25:9d:08:7c:
         94:0b:93:06:b0:8c:f4:ae:16:9c:3e:88:e1:f9:22:b5:c3:83:
         63:f9:a1:6e:f7:a1:5c:34:58:6d:f0:ea:a8:f6:bb:37:b8:2d:
         f7:17:54:0b:b1:9c:e9:47:fb:cd:40:55:68:a2:93:02:fc:11:
         7f:6f:1f:48:94:66:c7:1d:5b:77:94:5b:5b:95:4a:4d:9e:0b:
         44:db:17:ab:a6:37:99:6a:82:d3:00:49:18:77:87:95:fa:b7:
         f1:b2:51:a9:ec:cd:1b:96:d4:0d:5f:4d:4e:f5:79:b4:7e:d4:
         67:7d:f9:5e:d6:3c:d9:78:15:92:4b:80:42:33:71:36:80:7a:
         26:4a:c5:27:e5:e0:54:a0:23:81:75:c7:fb:49:3c:4c:fd:b6:
         c3:7b:78:b1:dd:1e:b3:6c:16:a3:d1:57:77:ee:3f:21:48:1e:
         ee:b6:55:12:8c:6c:2c:ee:b2:55:1b:e1:18:7c:7f:11:25:b9:
         fe:b6:1e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:23:38 2024 by rpki-client on console-fra.rpki-client.org