Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/323830343a3538383a3a2f33322d313238203d3e203533303134.roa
File:                     323830343a3538383a3a2f33322d313238203d3e203533303134.roa (raw, json)
Hash identifier:          9WlXKFK9xN+dlVpuXTdwWNwCivlhXh8HTEI0F/UakB8=
Subject key identifier:   C1:42:EF:35:0E:84:D1:5A:3B:DE:FE:AC:68:4A:06:56:2B:02:91:C4
Certificate issuer:       /CN=FEAEF81974D8C58C36C81BB87666B0C4F005AC34
Certificate serial:       0784728653C411B80C6C2B7DC35BFE0E46F5EC5B
Authority key identifier: FE:AE:F8:19:74:D8:C5:8C:36:C8:1B:B8:76:66:B0:C4:F0:05:AC:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEAEF81974D8C58C36C81BB87666B0C4F005AC34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/323830343a3538383a3a2f33322d313238203d3e203533303134.roa
Signing time:             Wed 08 May 2024 21:27:32 +0000
ROA not before:           Wed 08 May 2024 21:22:32 +0000
ROA not after:            Wed 07 May 2025 21:27:32 +0000
asID:                     53014
IP address blocks:        2804:588::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:84:72:86:53:c4:11:b8:0c:6c:2b:7d:c3:5b:fe:0e:46:f5:ec:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEAEF81974D8C58C36C81BB87666B0C4F005AC34
        Validity
            Not Before: May  8 21:22:32 2024 GMT
            Not After : May  7 21:27:32 2025 GMT
        Subject: CN=C142EF350E84D15A3BDEFEAC684A06562B0291C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:e2:26:b2:bf:0d:26:34:14:f0:d5:ff:62:
                    90:98:31:5b:af:46:c5:49:c4:d2:98:7d:e7:95:42:
                    d3:c8:90:80:49:a9:6a:54:72:ff:fe:74:6b:26:51:
                    a7:48:53:cb:de:43:04:45:fb:3f:ea:b1:8b:b3:92:
                    15:33:72:44:e8:63:57:15:b1:9d:f4:ad:55:c2:55:
                    12:8d:28:ef:b1:9c:6d:62:64:16:1b:93:0d:3a:72:
                    6b:27:d7:f3:d6:a2:a7:60:f2:da:d7:d0:d2:fc:b2:
                    8e:cc:81:f0:12:41:cc:c7:09:1a:6a:af:87:cc:d0:
                    31:33:0a:16:d4:46:5e:5d:9a:52:da:eb:50:ae:1e:
                    37:f2:12:cf:30:0a:f4:49:d6:07:21:04:8a:66:17:
                    8e:a6:8e:6a:00:64:d9:b1:f5:19:6e:71:c3:cd:1e:
                    7e:e4:a3:cc:2b:2e:93:2c:d2:ed:94:3c:43:60:7d:
                    bc:08:48:9d:76:65:6b:30:2a:3e:9b:a2:7e:ed:5c:
                    a6:85:06:48:fc:fb:bb:28:54:29:3d:7e:1a:61:0e:
                    80:7b:86:19:05:26:be:a9:29:83:5a:c0:a1:07:7e:
                    51:6d:72:86:8c:77:05:cc:45:e8:a0:83:fc:15:a4:
                    c5:d6:70:8b:db:2c:ef:54:76:9c:fb:c4:2e:46:d6:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:42:EF:35:0E:84:D1:5A:3B:DE:FE:AC:68:4A:06:56:2B:02:91:C4
            X509v3 Authority Key Identifier:
                keyid:FE:AE:F8:19:74:D8:C5:8C:36:C8:1B:B8:76:66:B0:C4:F0:05:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/FEAEF81974D8C58C36C81BB87666B0C4F005AC34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEAEF81974D8C58C36C81BB87666B0C4F005AC34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/323830343a3538383a3a2f33322d313238203d3e203533303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:588::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:80:47:64:ca:59:0a:80:cc:e6:c9:62:71:b0:a0:8c:c4:e3:
         da:47:85:58:9d:0b:79:f4:41:31:72:b1:7e:55:c8:86:b5:5f:
         f7:2b:da:6a:df:c5:ad:f0:b5:77:02:55:58:55:7c:de:b4:77:
         e2:57:f1:cd:55:22:e4:16:7f:21:46:fb:8b:7e:4c:ce:e1:3a:
         5c:17:3c:d1:4c:93:19:99:a8:2e:99:23:2b:6e:f3:b9:e9:64:
         0a:87:cc:f5:32:d7:30:f5:fb:90:ca:55:81:61:26:e6:6a:1b:
         16:8c:91:e4:d7:31:e8:0a:95:a4:76:74:da:34:cb:97:76:9e:
         70:70:3c:9d:57:45:71:75:d8:36:64:68:9d:5e:dc:46:5c:55:
         84:32:1d:60:b8:c8:a7:c5:b9:4a:d1:bd:d0:67:bc:f5:26:bd:
         77:a8:47:f5:35:97:77:61:0a:fb:d6:86:19:37:7f:5f:de:01:
         5b:2c:d7:8d:0f:7d:78:0b:7f:1c:8b:5f:2f:4f:22:63:60:6c:
         8f:5c:0b:f4:0c:da:5b:6f:4d:54:74:60:c3:f9:5e:97:9c:c9:
         e1:da:7d:8a:17:2a:ff:02:9b:ac:7a:bb:20:26:f8:c9:01:26:
         ca:5b:1d:11:31:e9:1d:63:e6:d5:72:04:24:ed:55:51:84:fb:
         a1:ec:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 00:17:54 2024 by rpki-client on console-fra.rpki-client.org