Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a353030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a353030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          GXdQu+a3C1WkVsnlQo71T+xJBtAAtMw1L3jhdAw7MqM=
Subject key identifier:   17:14:19:12:7D:37:01:AE:56:D8:85:4F:88:79:31:92:3A:67:DB:F7
Certificate issuer:       /CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Certificate serial:       404711BC5F6BE2201466E1DED940F27246D91F4F
Authority key identifier: 85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a353030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Thu 04 Apr 2024 00:08:29 +0000
ROA not before:           Thu 04 Apr 2024 00:03:29 +0000
ROA not after:            Thu 03 Apr 2025 00:08:29 +0000
asID:                     267942
IP address blocks:        2804:5590:5000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:47:11:bc:5f:6b:e2:20:14:66:e1:de:d9:40:f2:72:46:d9:1f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
        Validity
            Not Before: Apr  4 00:03:29 2024 GMT
            Not After : Apr  3 00:08:29 2025 GMT
        Subject: CN=171419127D3701AE56D8854F887931923A67DBF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:c3:e2:e6:53:dd:24:9d:9a:1e:7b:59:67:
                    f3:2a:c9:36:59:1a:d7:a0:e5:3b:9b:d3:74:db:30:
                    92:25:88:24:a7:06:68:e5:f9:ce:39:35:b0:57:a3:
                    45:fc:a3:d9:84:a7:5d:2a:1f:07:7c:06:17:99:ee:
                    0e:3f:a5:9b:8f:57:fd:81:f1:33:5b:41:54:43:ff:
                    8c:eb:51:f4:52:15:99:0e:85:69:9d:74:4e:a4:fa:
                    fb:cc:a7:d3:33:d4:13:bb:ea:d5:42:4b:34:25:d8:
                    bd:6e:8f:46:6a:06:e2:9f:f6:a3:0d:2b:5f:d0:c9:
                    12:e2:fb:6f:bb:91:90:d2:0e:e5:d6:d1:b0:22:e7:
                    0b:63:ed:ff:33:c4:14:ec:10:4a:b1:d4:48:ab:dc:
                    be:6a:f5:4a:40:ed:c8:bf:68:54:9d:98:d4:a9:8c:
                    83:27:d4:3d:28:76:04:1a:a2:d6:cd:ac:2f:a3:f7:
                    97:cb:04:71:0c:e0:48:d2:81:e4:42:b5:92:4c:8c:
                    4a:43:94:da:ec:ad:fa:a8:e5:76:a0:4b:ca:d3:54:
                    9b:29:b8:c4:8f:a6:02:2f:55:7f:2a:8f:34:32:cb:
                    77:b6:5b:2c:58:db:bc:8a:30:d0:f0:da:62:92:0f:
                    75:bf:d2:8d:66:7b:fd:80:a9:c2:f0:63:c6:67:ee:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:14:19:12:7D:37:01:AE:56:D8:85:4F:88:79:31:92:3A:67:DB:F7
            X509v3 Authority Key Identifier:
                keyid:85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a353030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ab:71:61:f3:6f:36:65:77:19:13:8d:35:b0:6a:e0:5d:82:12:
         f8:ae:d1:8f:b7:b4:bf:db:3a:a7:90:41:c5:c9:8d:cb:95:f1:
         a4:1f:b3:9e:f3:7f:5b:53:88:5b:a9:27:73:ac:19:c2:a0:29:
         d7:bb:87:bc:2e:6d:f4:63:4c:a4:1c:7f:0a:1a:43:cb:85:d5:
         0d:c0:0f:13:4c:72:4a:63:6c:9c:f5:1a:be:67:38:84:70:e6:
         4a:f2:bb:1c:cd:ea:35:bd:58:d4:f5:c7:7d:0f:9c:c1:88:0c:
         be:0b:4c:07:17:3b:b5:7f:b0:ea:bb:27:00:f6:33:c1:3b:9f:
         26:5c:a3:27:1f:2a:52:9c:90:79:5a:4b:b5:18:c8:94:5a:7a:
         26:25:39:83:38:3d:c4:4d:6a:f5:83:52:47:e5:e2:1a:16:8c:
         c4:d3:6f:a6:95:14:35:5e:3f:8c:7d:da:61:11:97:3f:90:ef:
         97:53:e1:52:69:a4:fe:12:f4:5c:4d:ae:cf:33:cd:a7:1d:4c:
         06:a8:3c:56:dc:5b:5c:a4:a1:53:57:60:c1:28:c8:0e:ef:7a:
         44:57:35:94:59:d4:b6:17:7d:51:9f:4c:71:5d:26:75:1d:9b:
         4b:5a:bb:19:b3:e9:50:6f:e8:35:f1:24:e6:52:af:b2:bf:88:
         7c:46:6f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org