Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/323830343a326663303a3a2f33322d3338203d3e20323634393130.roa
File:                     323830343a326663303a3a2f33322d3338203d3e20323634393130.roa (raw, json)
Hash identifier:          O4x1LwWOa2HYE7TKlawPkLot0p7YljNHnA+V1fu0iMM=
Subject key identifier:   F8:20:1A:B9:19:38:72:99:DA:9F:4A:AD:DC:56:85:27:B7:2B:9B:AA
Certificate issuer:       /CN=FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583
Certificate serial:       7B37A17DB8CCFAAC9385029D75F237881DDBED7A
Authority key identifier: FD:1E:C9:07:2B:F5:14:B8:F7:BE:9A:8E:2C:1F:96:D0:8B:EF:F5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/323830343a326663303a3a2f33322d3338203d3e20323634393130.roa
Signing time:             Mon 01 Jul 2024 02:23:06 +0000
ROA not before:           Mon 01 Jul 2024 02:18:06 +0000
ROA not after:            Mon 30 Jun 2025 02:23:06 +0000
asID:                     264910
IP address blocks:        2804:2fc0::/32 maxlen: 38

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:37:a1:7d:b8:cc:fa:ac:93:85:02:9d:75:f2:37:88:1d:db:ed:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583
        Validity
            Not Before: Jul  1 02:18:06 2024 GMT
            Not After : Jun 30 02:23:06 2025 GMT
        Subject: CN=F8201AB919387299DA9F4AADDC568527B72B9BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:c2:ef:03:75:e9:3e:4c:28:4f:ce:16:5c:
                    ea:21:0e:eb:93:83:89:44:93:7a:6f:67:9a:20:58:
                    09:d9:3a:d1:cf:a3:7e:a9:e8:5a:37:f9:ab:aa:b6:
                    a1:af:c5:ec:11:ab:ac:f6:be:bd:ba:cb:2c:59:31:
                    81:30:a6:29:38:96:a7:39:e2:14:d3:18:6d:30:96:
                    eb:ed:e6:12:d1:8f:03:fd:c7:47:7e:f3:84:62:bc:
                    2f:aa:6b:c8:fa:a2:73:99:07:b3:6d:79:a5:85:bd:
                    94:e0:56:1d:d8:2c:e8:08:84:fd:c4:22:21:cb:bd:
                    fc:8c:85:c5:b8:4f:98:35:dd:1d:dd:62:ec:b4:b3:
                    ae:ad:5c:3f:57:dd:76:5e:3a:0a:62:59:e5:13:5a:
                    27:68:9f:dc:b9:41:f5:29:0d:f2:e7:f0:2c:fe:fc:
                    6a:d7:85:81:cf:db:ea:8e:70:3a:f7:16:b8:83:7d:
                    32:77:b8:30:b7:ab:05:e4:9a:cd:f9:45:39:4c:05:
                    03:ec:d3:38:5f:8c:8f:39:fc:64:e4:be:ef:e3:00:
                    ce:c0:22:1d:ff:a8:ab:4e:af:88:a8:b0:fc:12:e3:
                    b5:f0:00:c7:03:99:75:94:5f:37:39:fd:b4:6b:0b:
                    ec:6f:43:d9:48:d3:8e:ee:f1:84:68:27:3a:e7:03:
                    46:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:20:1A:B9:19:38:72:99:DA:9F:4A:AD:DC:56:85:27:B7:2B:9B:AA
            X509v3 Authority Key Identifier:
                keyid:FD:1E:C9:07:2B:F5:14:B8:F7:BE:9A:8E:2C:1F:96:D0:8B:EF:F5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/323830343a326663303a3a2f33322d3338203d3e20323634393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:7c:85:93:c0:a2:7a:f6:8d:7d:a0:f5:04:8a:c4:ea:d5:f0:
         f5:c8:07:00:43:8e:f0:45:1b:65:71:38:d0:61:b7:30:95:c3:
         74:f5:43:15:61:d9:5b:4e:b8:f5:04:fd:47:e3:dd:55:c2:be:
         64:19:3f:2b:84:5f:66:69:b8:87:3f:be:2b:27:31:e1:86:eb:
         21:4a:b1:e3:61:94:c5:31:d6:01:8c:f4:6f:3d:52:7c:62:c7:
         2f:b5:9b:41:fb:a2:f5:63:99:0d:f0:c4:47:50:be:95:5f:23:
         25:78:b9:82:d9:16:4c:52:c7:3b:6a:0b:44:7d:1b:81:34:37:
         56:88:bd:92:26:a4:17:c4:7c:06:59:16:c3:cb:cd:52:b9:cb:
         c4:91:c3:c6:ff:bb:17:40:0b:5c:bd:2b:e9:99:a9:c6:45:4f:
         a5:b8:41:b5:e3:38:75:0a:3f:03:9d:4f:f6:0b:d2:69:72:26:
         f7:4a:3d:21:db:4c:a0:ed:13:fb:62:97:ed:35:23:eb:fc:78:
         55:f8:d1:68:09:eb:9b:26:aa:e1:b9:55:5d:30:dc:31:c0:d2:
         6f:07:b3:03:95:d8:7e:b0:0f:91:c5:38:de:48:d5:e4:b3:e8:
         b1:8c:4e:ed:ad:ad:30:e7:96:90:79:19:cb:36:3c:d8:08:10:
         66:bf:41:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 06:07:24 2024 by rpki-client on console-fra.rpki-client.org