Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/323830343a326664383a633030303a3a2f33342d3334203d3e20323634393135.roa
File:                     323830343a326664383a633030303a3a2f33342d3334203d3e20323634393135.roa (raw, json)
Hash identifier:          OzYy9HpHJj3NUIKHV7UGxIYwe23w2l8BZ1kJxy2Nons=
Subject key identifier:   59:C3:F8:72:40:D8:B8:C2:EE:D4:75:91:57:18:07:92:EA:7C:71:07
Certificate issuer:       /CN=998C1B9397A86CDEC286CEC4DB5E599D5429D1EF
Certificate serial:       39A6743025158F8540B09262176091FFCFFF6095
Authority key identifier: 99:8C:1B:93:97:A8:6C:DE:C2:86:CE:C4:DB:5E:59:9D:54:29:D1:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/323830343a326664383a633030303a3a2f33342d3334203d3e20323634393135.roa
Signing time:             Thu 04 Apr 2024 13:14:15 +0000
ROA not before:           Thu 04 Apr 2024 13:09:15 +0000
ROA not after:            Thu 03 Apr 2025 13:14:15 +0000
asID:                     264915
IP address blocks:        2804:2fd8:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a6:74:30:25:15:8f:85:40:b0:92:62:17:60:91:ff:cf:ff:60:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998C1B9397A86CDEC286CEC4DB5E599D5429D1EF
        Validity
            Not Before: Apr  4 13:09:15 2024 GMT
            Not After : Apr  3 13:14:15 2025 GMT
        Subject: CN=59C3F87240D8B8C2EED4759157180792EA7C7107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:62:f4:fa:ae:e8:64:f4:d0:87:45:c7:78:
                    3b:55:2f:0e:79:34:d2:a9:e6:1a:2f:60:a5:c0:31:
                    3c:71:94:c5:a3:64:12:82:94:78:a5:ed:1a:23:ed:
                    d1:97:57:95:21:85:1f:b2:18:7e:43:9a:d5:82:54:
                    c6:44:4f:b2:e1:b9:d1:bb:e4:72:ee:7d:cf:df:a0:
                    c2:75:4b:d5:35:96:c1:9a:09:ed:32:eb:08:53:99:
                    ab:37:a3:4a:47:2d:f4:ff:61:31:cf:4e:16:d8:13:
                    54:8b:17:10:f5:3a:76:34:ea:36:4c:67:6b:26:46:
                    5b:ab:1e:df:cd:ea:a1:3c:2d:71:f2:19:c2:c3:2a:
                    e0:c7:00:e9:26:10:08:7a:c1:51:11:1f:6b:95:89:
                    3c:09:68:65:d2:66:5f:04:25:c4:71:5e:44:44:59:
                    3d:52:14:46:ce:59:1e:a6:31:3e:b6:d8:5c:4c:cc:
                    7f:25:0a:86:d5:ce:25:9a:13:85:fc:67:72:1c:c0:
                    9a:4a:f2:c8:dd:20:7c:fe:d1:c9:e8:c8:ea:86:15:
                    a6:2a:e0:de:65:6b:98:bb:97:40:26:c1:a7:ff:4b:
                    87:89:23:d7:dd:0e:3f:9f:77:2b:6d:09:af:0f:65:
                    f4:97:fb:cf:af:0f:36:a7:07:d1:8b:5e:bd:4e:e0:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C3:F8:72:40:D8:B8:C2:EE:D4:75:91:57:18:07:92:EA:7C:71:07
            X509v3 Authority Key Identifier:
                keyid:99:8C:1B:93:97:A8:6C:DE:C2:86:CE:C4:DB:5E:59:9D:54:29:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/323830343a326664383a633030303a3a2f33342d3334203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         73:6e:f5:7e:c6:35:d5:36:02:86:94:48:21:36:da:34:f7:fd:
         66:94:69:0b:d0:d3:23:68:31:26:eb:4c:37:cb:d5:6b:2e:73:
         55:e2:53:2d:fa:dd:a5:bb:7e:36:7d:d9:5f:aa:21:e3:3a:50:
         19:6b:d7:6d:23:42:88:1c:82:23:2a:94:cb:73:ea:04:df:c3:
         d7:7b:85:43:00:2f:1f:f9:fd:2c:5e:e5:54:6a:08:a3:84:e6:
         b8:06:e1:43:4e:e2:4d:48:67:f2:32:f6:a2:56:90:97:6d:6a:
         78:7c:3a:bd:d5:f4:aa:68:4d:9f:7c:a2:fa:11:23:73:ad:76:
         c1:a0:69:33:7e:fa:95:93:0b:89:12:bc:51:0b:44:ff:57:72:
         22:0a:3c:10:e8:81:9a:0f:dc:a9:e6:f5:59:7c:4d:23:94:ab:
         30:b2:fe:b1:18:e4:3f:5b:63:5e:0f:55:0f:b1:86:82:94:f1:
         a8:8b:54:9a:68:e5:5c:ee:16:e2:88:ac:c2:90:ed:ba:72:ce:
         7c:8b:c1:e5:ab:46:46:39:63:7b:89:5d:f5:20:5a:7f:cf:15:
         96:e9:57:31:c1:fe:13:2b:6f:9c:81:18:c3:a3:d0:3d:20:4f:
         90:05:b9:56:9b:ac:6a:d9:db:fc:ac:82:94:60:61:2a:73:00:
         b3:de:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:17:13 2024 by rpki-client on console-fra.rpki-client.org