Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a613030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a613030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          fBClf8q5WC9oqe0rNa3ZIrinXVFIa/o2+2k4/YvqvjY=
Subject key identifier:   DE:69:1E:59:95:02:A1:C5:1C:2F:AA:2C:94:AC:5E:AA:20:A9:5C:0A
Certificate issuer:       /CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Certificate serial:       7AB4AA55A66D4BDE5FA900F75B67F597CCB4E6D9
Authority key identifier: 85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a613030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Thu 04 Apr 2024 00:08:30 +0000
ROA not before:           Thu 04 Apr 2024 00:03:30 +0000
ROA not after:            Thu 03 Apr 2025 00:08:30 +0000
asID:                     267942
IP address blocks:        2804:5590:a000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b4:aa:55:a6:6d:4b:de:5f:a9:00:f7:5b:67:f5:97:cc:b4:e6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
        Validity
            Not Before: Apr  4 00:03:30 2024 GMT
            Not After : Apr  3 00:08:30 2025 GMT
        Subject: CN=DE691E599502A1C51C2FAA2C94AC5EAA20A95C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:40:ca:b6:e7:59:21:f9:0e:d6:b7:21:fb:
                    8f:3c:d7:25:6f:ee:a9:31:13:69:ec:6a:b8:31:c6:
                    a1:92:96:ff:06:81:6c:fb:a8:02:74:75:aa:e2:3a:
                    d0:eb:5e:5a:bf:42:5d:a3:fd:80:58:3d:a8:d6:2e:
                    41:09:e6:ca:0b:9d:cc:9b:98:71:e3:d8:82:85:4f:
                    3b:95:67:0a:0b:f4:9c:7f:1f:40:c2:f3:eb:b6:5d:
                    75:90:ca:51:19:a9:67:5b:7f:d9:82:5e:f5:34:07:
                    9d:fc:63:3e:97:8d:75:a4:22:29:d5:a7:3e:7f:84:
                    d0:a6:4f:cf:64:b8:69:05:82:f9:fd:e6:f3:d0:7d:
                    74:b3:53:0a:9e:b1:62:7b:2b:ab:98:5f:0c:10:be:
                    de:c8:77:37:dc:5a:1b:99:14:5f:fe:e7:17:13:a2:
                    76:12:7c:0a:4d:d6:86:d4:01:d8:f7:b3:ce:2e:8a:
                    4a:b2:c0:62:16:ea:78:d1:98:03:d7:38:be:f8:ac:
                    0a:ae:a7:76:7a:2d:69:82:62:e8:88:69:74:12:10:
                    b2:29:1b:ad:27:92:ea:fa:e6:ce:30:6a:75:6f:6e:
                    48:71:f1:77:a6:7b:d1:d1:23:f4:b1:7d:d0:0e:4a:
                    23:6a:93:51:60:4a:6b:f4:cf:4d:b0:f5:8c:28:05:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:69:1E:59:95:02:A1:C5:1C:2F:AA:2C:94:AC:5E:AA:20:A9:5C:0A
            X509v3 Authority Key Identifier:
                keyid:85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a613030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:ad:b5:7a:dd:9b:ef:44:2d:09:28:58:8e:3c:f8:bf:34:
         d4:67:f1:af:7f:fb:ad:a8:d2:78:ca:6f:65:ba:5c:07:95:4c:
         53:15:42:61:91:cd:e3:92:c2:cb:81:71:26:20:fa:e4:5c:40:
         89:e8:71:da:23:56:a2:06:5f:98:f1:87:4d:eb:c1:ed:fc:88:
         48:46:c3:c3:d0:96:30:a9:f8:ff:ee:5d:36:e9:df:ea:41:70:
         0f:f9:da:e1:84:e2:13:36:ef:7b:31:9c:ad:bb:a9:61:5d:79:
         d6:59:a2:82:68:ea:df:66:64:6c:01:8d:38:79:ef:69:e7:aa:
         0f:82:c7:bf:f4:d6:87:7c:84:03:fd:14:da:bb:76:b4:8c:f9:
         3f:8d:fb:f1:72:f2:42:b0:6b:fa:16:f5:bf:bd:e4:74:83:6d:
         39:52:28:3a:6c:a3:e9:0c:11:c4:1b:55:6a:be:a4:23:70:49:
         e3:72:2d:6b:7d:5e:f6:c9:60:3b:d7:ef:d4:cd:9c:b7:36:5c:
         77:07:48:cf:45:58:04:d4:aa:d1:44:5d:30:f4:73:46:34:fb:
         de:28:e8:46:fd:e5:62:e5:24:a5:df:bd:70:b8:99:02:d3:92:
         92:f3:b6:85:72:d6:97:50:38:86:60:a9:ca:cb:ff:61:63:81:
         f6:c4:0e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 18:19:04 2024 by rpki-client on console-fra.rpki-client.org