Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/323830343a366235633a3a2f33322d313238203d3e20323730333935.roa
File:                     323830343a366235633a3a2f33322d313238203d3e20323730333935.roa (raw, json)
Hash identifier:          q4904deUF/MWk6ZGt/QEwgsr1D8mAFe21s57uiIFP2w=
Subject key identifier:   D0:1E:E4:0E:69:EB:9F:7A:0F:E8:F4:D5:D7:79:66:E0:19:92:2B:01
Certificate issuer:       /CN=C9B9ACD433C2198F1292465FB2268B319D884930
Certificate serial:       30101A1F0776E94600055E7926FE156A8602E61B
Authority key identifier: C9:B9:AC:D4:33:C2:19:8F:12:92:46:5F:B2:26:8B:31:9D:88:49:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B9ACD433C2198F1292465FB2268B319D884930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/323830343a366235633a3a2f33322d313238203d3e20323730333935.roa
Signing time:             Sun 21 Jul 2024 21:36:10 +0000
ROA not before:           Sun 21 Jul 2024 21:31:10 +0000
ROA not after:            Sun 20 Jul 2025 21:36:10 +0000
asID:                     270395
IP address blocks:        2804:6b5c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:10:1a:1f:07:76:e9:46:00:05:5e:79:26:fe:15:6a:86:02:e6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B9ACD433C2198F1292465FB2268B319D884930
        Validity
            Not Before: Jul 21 21:31:10 2024 GMT
            Not After : Jul 20 21:36:10 2025 GMT
        Subject: CN=D01EE40E69EB9F7A0FE8F4D5D77966E019922B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:f2:0f:06:31:09:9b:e5:37:d9:ea:a1:31:
                    2f:cc:c8:11:c0:3c:26:a0:c7:9b:36:6f:98:1d:d9:
                    df:b2:df:39:da:b7:8d:f5:3a:16:1c:ab:2f:d1:59:
                    5d:c1:07:84:fb:e8:f6:50:15:9d:70:b1:c7:54:7b:
                    87:67:bd:c0:c5:51:66:16:5b:1d:e2:d3:e7:75:29:
                    d3:9f:07:da:af:1c:ab:92:b3:e2:4d:bc:ea:f5:d6:
                    3b:a9:1f:0c:c0:8f:24:4b:d4:4c:17:3c:58:b5:c6:
                    f4:28:a4:1f:00:05:39:80:a9:c7:9b:6f:2b:3f:9f:
                    10:44:6d:ad:f9:a3:df:50:0c:2d:29:6a:ae:61:5d:
                    d5:26:30:e6:c3:68:86:74:b2:2b:b6:ea:29:7f:ef:
                    ec:89:9b:d0:37:b3:51:da:b4:ca:33:a1:ee:97:c0:
                    a5:38:4c:90:47:93:18:96:35:89:dc:35:f3:44:9d:
                    2c:ac:21:b8:1f:a8:76:fd:55:4c:8b:9e:04:90:70:
                    cc:04:e3:10:5e:26:20:af:31:d4:8f:21:e3:b4:a9:
                    35:51:0d:03:98:3d:0d:8b:f6:4b:34:19:65:1e:28:
                    b7:39:60:0d:2f:08:20:fc:92:b3:35:8d:1f:b5:4c:
                    69:33:73:e5:d9:16:b9:52:69:0a:71:5c:9e:1a:f1:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1E:E4:0E:69:EB:9F:7A:0F:E8:F4:D5:D7:79:66:E0:19:92:2B:01
            X509v3 Authority Key Identifier:
                keyid:C9:B9:AC:D4:33:C2:19:8F:12:92:46:5F:B2:26:8B:31:9D:88:49:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/C9B9ACD433C2198F1292465FB2268B319D884930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B9ACD433C2198F1292465FB2268B319D884930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/323830343a366235633a3a2f33322d313238203d3e20323730333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:24:4a:2c:63:20:8c:94:cd:7b:6b:af:cf:ba:2c:1f:8b:69:
         a2:ea:de:62:bd:29:99:82:6c:da:dc:5e:ea:a7:24:ef:ef:4c:
         ca:24:d8:39:6b:ef:d9:9c:8a:85:dd:e3:5a:1d:94:04:85:f8:
         10:2e:71:8c:54:2d:72:37:11:78:6e:02:b9:e4:c4:99:f0:66:
         ae:63:bd:50:96:51:d9:ae:70:a8:2a:60:f6:77:50:65:ec:c7:
         79:b7:39:ad:0f:e3:b5:13:41:3f:4b:5c:3c:55:9c:23:0a:37:
         f4:39:d6:a8:0e:e8:ae:b9:d3:96:c0:9d:43:70:1e:22:48:19:
         32:0d:3d:a6:d8:80:78:cb:f2:08:4c:2e:44:0d:ca:17:64:22:
         65:26:a5:6a:14:46:b9:40:64:0d:c4:b5:ea:57:80:eb:5d:1a:
         44:e3:44:2d:da:02:69:d8:0d:47:cd:3b:e4:ce:11:00:54:32:
         10:e6:28:68:f2:f3:93:85:09:32:cd:88:1f:79:6e:18:86:68:
         97:ae:39:02:60:61:35:6b:3c:b1:dc:6f:54:3c:b6:5e:c5:94:
         ec:e6:02:11:a1:ee:7c:30:0a:32:0c:23:46:2d:1a:6f:f5:4a:
         67:28:2e:d9:74:99:ee:a0:22:55:e2:df:34:48:43:0b:2c:8a:
         18:b1:e2:57
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUMBAaHwd26UYABV55Jv4VaoYC5hswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlCOUFDRDQzM0MyMTk4RjEyOTI0NjVGQjIyNjhCMzE5
RDg4NDkzMDAeFw0yNDA3MjEyMTMxMTBaFw0yNTA3MjAyMTM2MTBaMDMxMTAvBgNV
BAMTKEQwMUVFNDBFNjlFQjlGN0EwRkU4RjRENUQ3Nzk2NkUwMTk5MjJCMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6PIPBjEJm+U32eqhMS/MyBHA
PCagx5s2b5gd2d+y3znat431OhYcqy/RWV3BB4T76PZQFZ1wscdUe4dnvcDFUWYW
Wx3i0+d1KdOfB9qvHKuSs+JNvOr11jupHwzAjyRL1EwXPFi1xvQopB8ABTmAqceb
bys/nxBEba35o99QDC0paq5hXdUmMObDaIZ0siu26il/7+yJm9A3s1HatMozoe6X
wKU4TJBHkxiWNYncNfNEnSysIbgfqHb9VUyLngSQcMwE4xBeJiCvMdSPIeO0qTVR
DQOYPQ2L9ks0GWUeKLc5YA0vCCD8krM1jR+1TGkzc+XZFrlSaQpxXJ4a8co5AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU0B7kDmnrn3oP6PTV13lm4BmSKwEwHwYDVR0j
BBgwFoAUybms1DPCGY8SkkZfsiaLMZ2ISTAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkdMcHJISnlxVk5aMkV5VlkyNW1pQVFnM3hzdm8zbjRyU0FMTGtxanNN
aG4vMC9DOUI5QUNENDMzQzIxOThGMTI5MjQ2NUZCMjI2OEIzMTlEODg0OTMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QjlBQ0Q0MzNDMjE5OEYx
MjkyNDY1RkIyMjY4QjMxOUQ4ODQ5MzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJHTHBySEp5cVZOWjJFeVZZMjVtaUFRZzN4c3ZvM240clNBTExrcWpzTWhuLzAv
MzIzODMwMzQzYTM2NjIzNTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzMzM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGtcMA0GCSqGSIb3DQEBCwUAA4IBAQAlJEos
YyCMlM17a6/Puiwfi2mi6t5ivSmZgmza3F7qpyTv70zKJNg5a+/ZnIqF3eNaHZQE
hfgQLnGMVC1yNxF4bgK55MSZ8GauY71QllHZrnCoKmD2d1Bl7Md5tzmtD+O1E0E/
S1w8VZwjCjf0OdaoDuiuudOWwJ1DcB4iSBkyDT2m2IB4y/IITC5EDcoXZCJlJqVq
FEa5QGQNxLXqV4DrXRpE40Qt2gJp2A1HzTvkzhEAVDIQ5iho8vOThQkyzYgfeW4Y
hmiXrjkCYGE1azyx3G9UPLZexZTs5gIRoe58MAoyDCNGLRpv9UpnKC7ZdJnuoCJV
4t80SEMLLIoYseJX
-----END CERTIFICATE-----
Generated at Sat Aug 10 21:14:48 2024 by rpki-client on console-fra.rpki-client.org