Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a643030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a643030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          T8B6RDR4BnhcmmLjCuCvl4WAgLJtwoqD1cfKGWAQYSg=
Subject key identifier:   AD:B0:F3:72:59:FD:7B:32:50:77:3F:91:30:35:BB:E5:36:BA:98:30
Certificate issuer:       /CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Certificate serial:       7F3237AA37418D0189E96574E8B66229F53752B1
Authority key identifier: 85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a643030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Thu 04 Apr 2024 00:08:31 +0000
ROA not before:           Thu 04 Apr 2024 00:03:31 +0000
ROA not after:            Thu 03 Apr 2025 00:08:31 +0000
asID:                     267942
IP address blocks:        2804:5590:d000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:32:37:aa:37:41:8d:01:89:e9:65:74:e8:b6:62:29:f5:37:52:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
        Validity
            Not Before: Apr  4 00:03:31 2024 GMT
            Not After : Apr  3 00:08:31 2025 GMT
        Subject: CN=ADB0F37259FD7B3250773F913035BBE536BA9830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:79:c7:e0:74:2d:75:50:e6:45:ff:a6:81:eb:
                    e1:e2:12:bc:29:0a:92:a7:36:7d:75:b5:8c:c9:6c:
                    f2:c0:9c:ba:68:fa:b1:6b:a0:6c:5a:6f:80:1c:e1:
                    83:e1:f9:b9:14:d9:68:bc:f8:4a:e1:03:d9:ba:7a:
                    57:e3:c0:5e:64:dd:03:21:a3:60:9d:dc:88:9a:c0:
                    b9:ff:78:3c:a1:ab:09:e7:d4:b9:ff:1c:d1:34:e7:
                    87:58:72:96:3c:a0:5c:4c:62:04:fb:77:3b:65:52:
                    3f:22:d1:b8:e2:63:e2:47:43:c6:ea:b9:e4:4f:13:
                    5d:f4:0c:92:2f:40:b3:6e:a5:2a:9f:ba:b9:99:83:
                    04:50:3d:33:47:6f:58:56:91:08:45:59:1e:8f:4e:
                    54:db:9b:e6:01:e3:43:b1:a6:46:c0:04:72:93:02:
                    e2:db:36:8d:ae:f8:6d:a5:ce:50:a3:43:06:48:8b:
                    4e:01:cf:af:88:25:7f:b5:b4:0f:58:a4:09:00:07:
                    88:9d:27:31:12:c8:96:5d:dd:8a:f4:37:17:94:a8:
                    cf:39:84:86:a3:a6:d5:bd:76:cd:e4:cb:c9:f5:ad:
                    e2:7b:9c:5b:d6:5b:24:bb:f8:0a:ee:0f:79:f6:55:
                    12:04:c7:49:30:74:c4:90:88:ba:d5:b4:cd:c9:ca:
                    31:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B0:F3:72:59:FD:7B:32:50:77:3F:91:30:35:BB:E5:36:BA:98:30
            X509v3 Authority Key Identifier:
                keyid:85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a643030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b6:29:af:f0:79:7d:c4:86:46:39:6b:76:40:0a:c4:52:8a:89:
         ed:f9:44:ee:8c:ba:ac:71:2d:f5:82:93:4f:64:cd:0f:2a:54:
         d6:01:0d:9e:a0:b0:f1:be:96:4a:5f:6b:27:f0:92:18:64:d7:
         c5:49:7d:40:b6:26:1d:75:e4:84:a3:80:e4:1e:ba:cd:11:ae:
         06:8e:8f:1e:92:f7:4f:d9:de:d4:19:5a:d8:6d:28:28:cf:48:
         db:c6:38:3e:3c:f9:53:ee:4b:4c:65:79:70:59:37:f7:35:63:
         89:cf:8f:34:02:c0:25:d7:cb:26:78:79:bf:ae:3a:1a:16:5c:
         f9:64:88:a0:d7:5e:ea:cb:64:e7:b8:3f:a8:60:34:f0:6f:60:
         ae:81:6c:88:92:93:71:54:8e:f4:dc:7b:cf:e7:77:e9:23:2c:
         c9:dd:a3:41:92:08:75:42:33:af:2f:26:a7:0b:79:fd:c3:d9:
         1d:64:72:2c:c9:85:58:8f:b5:c1:7e:4c:c5:01:37:60:5e:cd:
         df:7a:3c:81:0e:fc:e0:4b:07:f2:b5:ac:7f:61:b4:24:cb:ee:
         5b:ff:cb:c6:23:34:fe:ac:ff:bb:bf:7d:b5:3f:c2:d0:e5:ce:
         20:d8:49:32:c1:17:5b:12:61:02:a6:e8:c4:70:d3:e6:6e:b5:
         ce:b6:0c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org