Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a313030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a313030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          +fsryvXc3ZzlcA9timAJVO8h7aU3DriKCd/gXYty8Gc=
Subject key identifier:   2B:A8:17:6D:3D:8F:3D:A8:40:BF:15:2B:E1:05:C5:F8:F2:9A:67:50
Certificate issuer:       /CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Certificate serial:       3D03C1F8769CB70041FDB15D8664957D3BAA3E30
Authority key identifier: 85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a313030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Thu 04 Apr 2024 00:08:31 +0000
ROA not before:           Thu 04 Apr 2024 00:03:31 +0000
ROA not after:            Thu 03 Apr 2025 00:08:31 +0000
asID:                     267942
IP address blocks:        2804:5590:1000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:03:c1:f8:76:9c:b7:00:41:fd:b1:5d:86:64:95:7d:3b:aa:3e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
        Validity
            Not Before: Apr  4 00:03:31 2024 GMT
            Not After : Apr  3 00:08:31 2025 GMT
        Subject: CN=2BA8176D3D8F3DA840BF152BE105C5F8F29A6750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:b6:31:9f:87:9e:0a:7c:47:05:ef:37:97:
                    a4:ad:5c:7d:0f:49:95:7e:5b:d8:48:1a:07:27:2c:
                    40:51:23:ed:6c:3d:69:42:4b:3c:76:71:4d:34:6c:
                    13:09:d0:82:29:70:de:50:4a:33:ae:12:d3:fd:28:
                    8a:35:39:86:00:d1:70:57:32:fe:4c:2f:0a:fa:ad:
                    2c:ac:0b:c9:1a:fe:5f:43:9c:05:76:45:e6:52:ab:
                    7d:f6:b6:9e:b0:93:8f:36:72:2a:0e:88:66:44:33:
                    49:9e:c2:00:8b:ad:08:64:f4:1c:bd:c0:01:cd:5e:
                    fa:39:c3:12:fc:77:0b:bd:20:53:d6:bf:bf:2a:b7:
                    fb:1f:38:35:d1:d6:02:73:67:5e:cf:96:ea:e9:d1:
                    f1:ce:fe:65:08:d9:54:2f:83:ca:22:51:63:a1:98:
                    d4:95:92:7b:38:ab:91:7a:99:b3:45:1b:6a:12:29:
                    9d:12:d7:53:ea:40:1d:a7:69:3e:3c:e9:4f:8c:93:
                    ed:83:11:5b:d0:83:82:95:ab:c1:ff:ea:64:ec:fc:
                    38:4a:2a:4f:88:f4:dc:12:5b:f0:e9:fa:d1:43:3d:
                    5a:d8:ac:4c:b1:8b:b9:9e:6e:5a:ef:1e:fa:cd:99:
                    f7:9a:f2:b7:5e:6b:d8:ce:f9:f8:e9:7b:90:f4:28:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A8:17:6D:3D:8F:3D:A8:40:BF:15:2B:E1:05:C5:F8:F2:9A:67:50
            X509v3 Authority Key Identifier:
                keyid:85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a313030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         02:13:ab:40:76:ca:fb:c6:6c:5b:e6:db:d5:1f:1e:2d:33:6a:
         e1:79:31:45:5a:64:7b:44:50:a8:2f:12:0c:e5:1c:68:ba:13:
         9b:9d:f9:51:e3:a9:09:2b:2e:e3:18:55:3f:39:0c:db:09:90:
         85:e0:20:f0:53:25:4f:78:5a:be:4a:fa:ce:2b:a5:79:dd:a5:
         70:8a:fd:79:fa:a6:57:ed:bf:b7:41:e3:b0:8e:fe:74:1c:76:
         0a:4a:a9:14:d7:bd:a8:1b:a8:85:0e:72:d3:2a:67:44:4b:4a:
         f4:f7:b5:4c:cb:44:65:6e:85:01:04:e4:cc:53:cc:e7:1a:5a:
         b5:a1:10:1e:41:6c:35:33:55:b1:cf:46:a1:7b:53:2b:a4:b3:
         f6:a5:40:f6:ff:7c:15:20:38:e2:93:f7:81:c9:89:f2:34:f3:
         97:41:2f:77:a4:fa:84:21:30:85:3d:11:ed:d5:e5:f3:f9:9c:
         4c:78:e6:19:d6:42:e9:d2:68:93:24:f4:12:c3:ca:8a:c5:87:
         84:ea:91:a7:6d:79:a0:ca:8c:2e:95:9b:f9:88:ce:13:cd:31:
         73:65:a2:1a:35:53:39:df:ca:6f:14:8c:9e:38:1e:fd:dc:53:
         f8:04:b0:43:15:75:a6:3c:8e:96:a4:0a:e6:4d:52:90:93:74:
         27:c4:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 18:19:04 2024 by rpki-client on console-fra.rpki-client.org