Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a393030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a393030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          znxRwtj4XjHjKcMppWaWUr/JLSwdfHRjolJZw56QdPg=
Subject key identifier:   7E:10:A3:E6:ED:39:2A:06:31:B3:B9:3F:AE:89:DC:0C:F9:64:67:AB
Certificate issuer:       /CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Certificate serial:       0F6FE407E8CBDC0C46F38F92B1B7ADBCEE391986
Authority key identifier: 85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a393030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Thu 04 Apr 2024 00:08:30 +0000
ROA not before:           Thu 04 Apr 2024 00:03:30 +0000
ROA not after:            Thu 03 Apr 2025 00:08:30 +0000
asID:                     267942
IP address blocks:        2804:5590:9000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6f:e4:07:e8:cb:dc:0c:46:f3:8f:92:b1:b7:ad:bc:ee:39:19:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
        Validity
            Not Before: Apr  4 00:03:30 2024 GMT
            Not After : Apr  3 00:08:30 2025 GMT
        Subject: CN=7E10A3E6ED392A0631B3B93FAE89DC0CF96467AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:25:a8:e9:af:2d:0d:c6:ee:d1:23:f6:33:
                    d6:7e:ee:85:22:62:58:6f:42:82:dc:7d:22:12:5c:
                    9e:d4:50:1b:9d:97:96:a1:ea:28:72:6c:93:ce:4a:
                    13:dd:e3:34:3e:cf:06:3b:5e:64:f3:e6:02:f0:55:
                    1e:b8:d4:40:45:be:4a:a2:8b:49:6c:81:db:15:d5:
                    52:67:47:f8:ad:a3:84:98:11:b6:9a:71:ed:e9:14:
                    d7:af:31:5c:60:d1:0a:81:29:83:bf:c1:b5:ed:b0:
                    52:15:b1:3d:54:65:89:b4:56:8a:9c:e5:0c:f8:3f:
                    75:18:04:ad:ee:b7:f3:01:2f:01:0e:a6:9c:2f:5b:
                    e6:03:64:4c:14:ec:73:b1:60:bc:d1:47:cd:37:0f:
                    40:0c:3c:f7:83:ec:87:6a:5a:d9:83:50:7c:da:20:
                    b5:86:54:79:47:af:79:c9:14:e0:57:48:d4:ad:9a:
                    ef:9e:e5:57:e7:dd:da:f7:84:98:0e:69:fc:3a:b8:
                    cd:16:8e:50:e3:30:d2:50:4a:d4:fe:6c:aa:7f:06:
                    16:f4:ea:e3:3a:3b:4c:2a:ba:03:02:73:4e:50:f7:
                    54:d7:8e:aa:2c:f8:91:8f:d9:f3:a9:47:b3:00:ec:
                    e8:ac:ed:27:aa:1b:cd:23:1b:68:4f:28:0c:9e:36:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:10:A3:E6:ED:39:2A:06:31:B3:B9:3F:AE:89:DC:0C:F9:64:67:AB
            X509v3 Authority Key Identifier:
                keyid:85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a393030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         16:37:b1:5d:7a:9f:8d:d6:04:9a:81:a4:c1:9d:8c:a2:dd:d1:
         5a:95:c1:c8:12:0b:02:76:29:e2:b7:23:3e:21:77:65:dd:3c:
         7d:d6:e5:ca:52:87:1e:eb:3e:77:d6:27:1a:ba:53:c4:87:14:
         2b:ba:a6:9b:45:74:bc:31:c7:e8:5e:18:d4:d1:ec:0d:3d:97:
         6b:4d:e5:5a:ca:25:d5:85:e3:1e:24:86:0b:60:4e:67:d0:bf:
         91:94:17:d2:96:8d:2e:8f:45:f2:f5:2a:6d:27:0c:1f:84:bf:
         02:a7:f1:6a:fe:43:bb:f9:99:4e:0c:32:7f:b2:14:88:47:c7:
         62:b2:cd:be:f9:89:bb:b6:15:c6:fa:70:52:5a:29:f3:33:ad:
         11:22:16:43:d5:8a:33:1c:d3:a7:6a:79:55:b9:46:b0:58:d2:
         4a:8b:7f:b3:ee:e2:29:df:d5:3a:6c:0f:ad:84:cd:1e:f8:2c:
         d9:00:3c:6d:24:4c:cd:95:49:5b:75:b8:d7:84:8b:03:50:b3:
         ba:bb:c1:55:57:24:1c:25:79:82:c9:ff:28:1b:b8:17:be:ca:
         60:2a:f7:9d:7d:f3:f8:11:69:23:40:e8:55:77:82:ac:a8:f1:
         93:d6:a1:26:e0:4f:1b:78:3f:3b:47:6e:6e:7f:d4:d6:d6:d7:
         48:ff:25:1a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUD2/kB+jL3AxG84+SsbetvO45GYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVDNjZGODYyMTM5RUU5NzJCM0REODIxMTE3QjgyNERE
OEI2RjlEMDAeFw0yNDA0MDQwMDAzMzBaFw0yNTA0MDMwMDA4MzBaMDMxMTAvBgNV
BAMTKDdFMTBBM0U2RUQzOTJBMDYzMUIzQjkzRkFFODlEQzBDRjk2NDY3QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHCWo6a8tDcbu0SP2M9Z+7oUi
YlhvQoLcfSISXJ7UUBudl5ah6ihybJPOShPd4zQ+zwY7XmTz5gLwVR641EBFvkqi
i0lsgdsV1VJnR/ito4SYEbaace3pFNevMVxg0QqBKYO/wbXtsFIVsT1UZYm0Voqc
5Qz4P3UYBK3ut/MBLwEOppwvW+YDZEwU7HOxYLzRR803D0AMPPeD7IdqWtmDUHza
ILWGVHlHr3nJFOBXSNStmu+e5Vfn3dr3hJgOafw6uM0WjlDjMNJQStT+bKp/Bhb0
6uM6O0wqugMCc05Q91TXjqos+JGP2fOpR7MA7Ois7SeqG80jG2hPKAyeNtM7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUfhCj5u05KgYxs7k/roncDPlkZ6swHwYDVR0j
BBgwFoAUhcZvhiE57pcrPdghEXuCTdi2+dAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUNCbkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0
aUEvMS84NUM2NkY4NjIxMzlFRTk3MkIzREQ4MjExMTdCODI0REQ4QjZGOUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1QzY2Rjg2MjEzOUVFOTcy
QjNERDgyMTExN0I4MjRERDhCNkY5RDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDQm5GTnBja3ZQZU4xcFVwdllVN2pSNTJIcGIxWDZESDRVd3hQeXdydGlBLzEv
MzIzODMwMzQzYTM1MzUzOTMwM2EzOTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVZCQMA0GCSqGSIb3DQEBCwUA
A4IBAQAWN7Fdep+N1gSagaTBnYyi3dFalcHIEgsCdinityM+IXdl3Tx91uXKUoce
6z531icaulPEhxQruqabRXS8McfoXhjU0ewNPZdrTeVayiXVheMeJIYLYE5n0L+R
lBfSlo0uj0Xy9SptJwwfhL8Cp/Fq/kO7+ZlODDJ/shSIR8diss2++Ym7thXG+nBS
WinzM60RIhZD1YozHNOnanlVuUawWNJKi3+z7uIp39U6bA+thM0e+CzZADxtJEzN
lUlbdbjXhIsDULO6u8FVVyQcJXmCyf8oG7gXvspgKvedffP4EWkjQOhVd4KsqPGT
1qEm4E8beD87R25uf9TW1tdI/yUa
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org