Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/323830343a356539303a383030313a3a2f34382d3438203d3e20323639303431.roa
File:                     323830343a356539303a383030313a3a2f34382d3438203d3e20323639303431.roa (raw, json)
Hash identifier:          Nr9W/R8CLv8B1ahX8sFuYqFpxYpEuPOI0EnrKK+qxus=
Subject key identifier:   B8:D5:1F:41:97:3D:55:5A:4A:3A:CA:A2:EF:43:8A:CD:E8:EA:A0:03
Certificate issuer:       /CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
Certificate serial:       24A5D718F2057254E9B0A34C4F08FF8E4451A0E4
Authority key identifier: 14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/323830343a356539303a383030313a3a2f34382d3438203d3e20323639303431.roa
Signing time:             Mon 12 Feb 2024 12:26:44 +0000
ROA not before:           Mon 12 Feb 2024 12:21:44 +0000
ROA not after:            Mon 10 Feb 2025 12:26:44 +0000
asID:                     269041
IP address blocks:        2804:5e90:8001::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a5:d7:18:f2:05:72:54:e9:b0:a3:4c:4f:08:ff:8e:44:51:a0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
        Validity
            Not Before: Feb 12 12:21:44 2024 GMT
            Not After : Feb 10 12:26:44 2025 GMT
        Subject: CN=B8D51F41973D555A4A3ACAA2EF438ACDE8EAA003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:a5:4b:1b:74:2a:0b:02:58:1a:6f:bf:5d:
                    43:66:47:f1:e3:5f:7a:1a:53:a3:66:d9:37:94:62:
                    d4:91:7e:b8:3c:89:0c:3e:3e:1e:99:f9:a5:f3:c5:
                    22:9b:91:3d:db:94:65:86:a4:9d:eb:bb:3c:24:9d:
                    5e:ea:c4:39:26:61:2f:32:4a:f0:fc:5d:86:08:d0:
                    16:1d:51:4d:54:d8:4a:d5:d8:03:97:c6:3c:a7:68:
                    22:37:d8:f6:af:06:05:06:e1:ef:6e:ad:6f:bb:66:
                    cd:3f:db:1f:1f:ff:1e:7e:20:ae:ac:3d:25:f9:2e:
                    33:b9:4d:7b:84:c4:43:9c:29:69:c0:34:89:23:43:
                    39:d8:32:d3:df:54:ff:7a:c2:b6:88:c2:b5:da:2a:
                    73:bd:f4:d8:47:93:9f:05:3a:4c:8f:53:05:ac:05:
                    3c:71:75:4b:9c:27:68:bd:0b:c9:1e:3b:e5:d5:bd:
                    5f:84:61:fc:d0:af:8b:50:e8:b1:ae:8f:01:bc:c3:
                    6f:f6:cb:db:02:5a:5d:ce:e4:ff:57:75:fc:ba:68:
                    a1:d1:94:d1:76:13:e6:47:b1:b2:96:bc:fb:5a:92:
                    e9:73:59:c2:68:52:f4:0c:f0:7f:85:46:7c:55:ac:
                    2b:ba:5c:3a:be:95:3f:46:df:65:ee:c1:94:11:80:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D5:1F:41:97:3D:55:5A:4A:3A:CA:A2:EF:43:8A:CD:E8:EA:A0:03
            X509v3 Authority Key Identifier:
                keyid:14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/323830343a356539303a383030313a3a2f34382d3438203d3e20323639303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e90:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:d0:12:a4:34:a4:f1:0f:f3:4d:90:2e:48:33:8c:e4:69:4b:
         96:6c:c7:06:93:ad:3f:12:22:9f:34:d3:af:b6:97:bd:3b:52:
         18:d6:3a:23:be:51:ad:2d:e8:d1:4b:b3:5c:80:0b:dd:e6:fd:
         5e:e9:1f:67:c4:60:6f:5e:d5:6a:44:63:a8:be:59:6d:bf:0f:
         14:3c:eb:3c:6d:ea:60:27:ff:83:44:99:29:a2:4a:5c:15:82:
         91:96:68:72:f7:d2:05:8b:c3:97:00:ec:3f:45:a0:94:18:b4:
         3f:d9:a8:cd:8f:69:9b:b4:08:4f:f2:0d:4c:61:69:1a:c2:96:
         77:65:b9:a0:0e:fa:1e:b8:eb:41:d4:fb:b9:cf:eb:d5:38:31:
         96:00:36:03:3d:9d:5b:1f:92:5c:3f:da:41:a0:b2:4f:9d:26:
         4a:19:e3:ee:d0:a5:af:b8:a8:59:cb:0a:17:7b:08:53:8f:c7:
         c6:10:c8:21:8e:19:e7:c5:45:f9:41:0c:c3:5a:9f:b1:9e:a4:
         bf:de:51:26:d0:40:9a:44:3a:25:3a:58:96:70:22:62:55:b2:
         9a:9b:90:39:77:fc:23:2c:36:f7:0c:8b:74:87:cf:64:38:db:
         7c:be:7c:bb:fc:0c:03:98:9a:07:99:70:1f:c7:cd:fc:d0:5c:
         8a:f0:05:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 03:49:43 2024 by rpki-client on console-fra.rpki-client.org