Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/1/323830343a346530343a3a2f33322d3336203d3e20323638323334.roa
File:                     323830343a346530343a3a2f33322d3336203d3e20323638323334.roa (raw, json)
Hash identifier:          uo0dbpglGlr5G9PmuiEZt+oR8oNUv+HOu7lmoOQIViM=
Subject key identifier:   5F:21:57:1C:68:5A:2E:09:4F:1A:A3:F3:5E:48:47:BE:16:E0:60:16
Certificate issuer:       /CN=9C12188BAD93BC10E27E369B07DBA85672A99D26
Certificate serial:       1302B3449F2BA92AE0919B10F006102814A32924
Authority key identifier: 9C:12:18:8B:AD:93:BC:10:E2:7E:36:9B:07:DB:A8:56:72:A9:9D:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C12188BAD93BC10E27E369B07DBA85672A99D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/1/323830343a346530343a3a2f33322d3336203d3e20323638323334.roa
Signing time:             Wed 03 Apr 2024 21:26:12 +0000
ROA not before:           Wed 03 Apr 2024 21:21:12 +0000
ROA not after:            Wed 02 Apr 2025 21:26:12 +0000
asID:                     268234
IP address blocks:        2804:4e04::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:02:b3:44:9f:2b:a9:2a:e0:91:9b:10:f0:06:10:28:14:a3:29:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C12188BAD93BC10E27E369B07DBA85672A99D26
        Validity
            Not Before: Apr  3 21:21:12 2024 GMT
            Not After : Apr  2 21:26:12 2025 GMT
        Subject: CN=5F21571C685A2E094F1AA3F35E4847BE16E06016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e5:56:77:76:a3:0f:93:c5:76:26:c6:dd:d8:
                    41:bd:38:a0:6a:83:7a:25:73:b2:46:96:c9:2f:73:
                    32:3c:f1:b0:ed:de:e6:ca:9e:ab:06:77:f1:26:84:
                    e2:79:89:90:b9:b9:7c:38:12:a8:0b:fb:99:3e:c2:
                    f5:d4:85:ac:ed:51:3c:2a:57:5a:bf:4f:85:54:93:
                    f7:12:16:bf:02:bc:e8:a2:2a:17:a0:0f:2c:e5:a0:
                    83:65:bf:e5:c6:43:78:19:a3:a2:3e:45:34:b2:81:
                    7d:3e:65:b9:b6:18:71:27:b4:88:b1:83:cb:65:b1:
                    a4:b6:aa:a4:81:9a:58:b2:27:a5:a6:2a:25:ba:9b:
                    98:d5:7f:d5:fb:83:2a:26:cf:d1:45:ad:9a:b0:dc:
                    ff:29:5c:aa:a3:af:b0:f3:6d:21:c4:90:66:1b:b7:
                    44:41:b7:bb:be:2f:f2:dc:41:c5:1e:eb:0e:fb:02:
                    cf:0f:9b:95:3d:3f:04:f0:a3:c5:c9:67:36:e0:90:
                    55:1e:aa:c3:0e:62:73:09:0c:6f:89:ba:f3:8f:b7:
                    47:3b:cf:09:48:17:dd:51:40:0d:8b:ee:05:36:63:
                    32:00:be:41:52:ee:c7:2e:20:9f:df:4c:41:82:ea:
                    c7:18:c1:9f:0a:b7:5e:f3:d3:4b:37:e2:6e:4f:0e:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:21:57:1C:68:5A:2E:09:4F:1A:A3:F3:5E:48:47:BE:16:E0:60:16
            X509v3 Authority Key Identifier:
                keyid:9C:12:18:8B:AD:93:BC:10:E2:7E:36:9B:07:DB:A8:56:72:A9:9D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/1/9C12188BAD93BC10E27E369B07DBA85672A99D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C12188BAD93BC10E27E369B07DBA85672A99D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/1/323830343a346530343a3a2f33322d3336203d3e20323638323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e04::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:57:c4:8c:6f:35:df:1a:5b:86:34:02:48:13:49:53:c3:00:
         96:67:73:c7:f3:a3:72:0e:74:b2:db:14:07:8e:3e:50:f6:06:
         67:97:8f:e0:bc:56:da:8f:08:f0:ae:d9:47:1f:76:3a:36:dd:
         1f:68:2c:85:80:6d:6d:b0:26:34:56:a9:b7:92:d0:80:24:a0:
         70:bb:83:a0:d7:fc:00:7f:87:cc:47:ea:17:9a:d3:38:21:95:
         55:99:6e:3e:d1:13:30:de:e2:15:93:de:e4:ad:38:63:db:f7:
         e3:a6:b0:ce:cd:f2:41:b1:6e:b9:35:a4:04:26:31:76:07:ea:
         6b:76:9e:a1:cd:8f:51:ab:53:8c:54:02:fe:c0:bb:5e:60:f7:
         b1:8a:57:11:e5:91:1f:21:f4:74:d2:1f:42:67:5c:83:83:10:
         cb:72:0b:d9:94:dd:e8:0d:4a:be:e7:eb:07:8c:8e:df:f6:74:
         36:0a:bc:30:d3:32:3c:d8:a7:32:b9:bb:19:50:d6:ab:2b:0b:
         a4:0d:23:e1:6c:40:4b:1e:5b:04:d4:92:e9:86:c6:fb:a0:3f:
         67:e9:b4:aa:ab:8c:a9:f7:fc:a4:1d:94:8c:0c:13:d8:66:dc:
         44:04:b6:f9:09:bd:a6:cd:3c:fb:88:70:58:c4:35:e1:9e:e8:
         2a:58:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 17:55:48 2024 by rpki-client on console-fra.rpki-client.org