Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/323830343a373938303a3a2f33332d3333203d3e20323731333039.roa
File:                     323830343a373938303a3a2f33332d3333203d3e20323731333039.roa (raw, json)
Hash identifier:          gWClYuH7RSNTRa3U0Mhuc88374dGMBUeptsS1UC3VI8=
Subject key identifier:   F0:87:B2:F2:55:1E:46:40:95:1C:F4:2B:A9:82:E7:79:A9:97:ED:BF
Certificate issuer:       /CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
Certificate serial:       27136CF4201D5F7C8E454448CF1E612B9E37714D
Authority key identifier: 93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/323830343a373938303a3a2f33332d3333203d3e20323731333039.roa
Signing time:             Thu 04 Apr 2024 08:15:34 +0000
ROA not before:           Thu 04 Apr 2024 08:10:34 +0000
ROA not after:            Thu 03 Apr 2025 08:15:34 +0000
asID:                     271309
IP address blocks:        2804:7980::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:13:6c:f4:20:1d:5f:7c:8e:45:44:48:cf:1e:61:2b:9e:37:71:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
        Validity
            Not Before: Apr  4 08:10:34 2024 GMT
            Not After : Apr  3 08:15:34 2025 GMT
        Subject: CN=F087B2F2551E4640951CF42BA982E779A997EDBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:60:9a:75:66:32:1c:f3:bb:8b:1d:8c:30:
                    24:59:ff:dc:07:8c:e0:f9:1a:7d:c2:29:54:2a:53:
                    99:13:a9:e2:55:64:5d:09:5b:0b:2e:71:5d:1b:c5:
                    1b:89:9c:ed:a9:17:35:50:f9:45:32:5d:9b:4e:1f:
                    b7:a0:a5:55:c6:6f:19:38:5c:e8:74:88:3a:85:e2:
                    85:d4:76:1c:09:93:26:0c:16:27:61:0a:cc:96:71:
                    ed:fe:ee:68:b0:13:d2:b7:d6:52:8f:99:92:9f:e0:
                    cc:86:fd:53:e7:71:0a:76:2f:83:8f:f5:f7:a5:1d:
                    62:08:a6:2d:5f:f2:e1:18:4e:83:a8:e2:bb:62:10:
                    4e:ba:af:01:30:5a:56:11:3d:67:87:c0:65:c1:eb:
                    4f:20:07:3c:06:86:80:da:79:63:13:b8:49:ac:60:
                    f0:8d:6b:d8:3f:37:3e:da:f4:26:be:e8:1f:c9:cb:
                    14:f1:49:87:5c:f1:8f:69:64:15:2e:d4:58:a1:a1:
                    9e:ad:60:03:b8:61:92:08:2d:fb:29:f5:73:1b:cb:
                    4a:a5:56:3a:39:cf:5e:55:4b:a0:85:45:2c:16:c1:
                    39:ec:96:8f:5b:d1:71:e5:73:53:30:c7:28:aa:99:
                    27:58:7d:fe:c5:99:e1:a8:17:bf:ed:ec:8e:17:2c:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:87:B2:F2:55:1E:46:40:95:1C:F4:2B:A9:82:E7:79:A9:97:ED:BF
            X509v3 Authority Key Identifier:
                keyid:93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/323830343a373938303a3a2f33332d3333203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7980::/33

    Signature Algorithm: sha256WithRSAEncryption
         a5:d0:26:2d:51:ce:7c:bf:5a:54:6d:9b:23:98:40:19:52:f3:
         51:3f:2f:ff:83:2b:d6:67:cb:5c:cb:10:80:f7:01:20:04:7d:
         57:e8:c8:4f:e3:6a:84:25:93:94:25:d4:88:21:09:34:3e:9c:
         0a:8f:56:c5:af:32:d1:42:72:27:28:29:24:4e:5e:24:d3:aa:
         d5:fd:b7:68:63:55:c7:87:be:f2:fe:e3:06:be:9b:2b:27:fb:
         61:ac:b1:8c:97:f0:74:78:75:99:21:b4:ff:34:35:61:ac:12:
         32:48:99:2e:63:90:db:92:a8:06:ae:d9:c1:e9:6c:29:01:34:
         1a:4e:5e:80:a6:55:cb:1a:23:00:98:b0:92:e4:b8:5f:62:a9:
         ff:51:99:dd:75:0f:5b:f0:ea:c3:7d:ea:d0:e3:88:6a:91:63:
         71:5b:0e:5d:cf:e1:fe:55:ec:bd:ae:49:c4:e1:28:f5:e8:f1:
         7b:42:e6:92:83:f6:e4:fc:60:9f:8b:f2:37:bc:ee:a9:70:2b:
         c4:bd:53:b5:24:4d:a7:41:2a:85:a3:70:08:b3:85:cc:2f:ac:
         2a:85:89:8c:c8:fb:c3:7d:48:a2:51:59:e3:9a:74:90:fd:54:
         fb:02:a5:eb:37:8b:e0:87:38:a9:6e:f1:c1:04:fd:c2:1f:10:
         1e:c2:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 02:07:11 2024 by rpki-client on console-fra.rpki-client.org