Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/323830343a323865303a3a2f33322d3336203d3e20323632353530.roa
File:                     323830343a323865303a3a2f33322d3336203d3e20323632353530.roa (raw, json)
Hash identifier:          26u8taJ5Lj+VnQn3u4kguli0gVhDEzR9j7P4j9joTd4=
Subject key identifier:   43:9B:80:66:93:2B:2B:7C:76:75:18:27:F1:DC:6A:6D:09:7E:BE:03
Certificate issuer:       /CN=CA6EB79104876EFECBF1CFEF07ECFB3A048D0598
Certificate serial:       17FF7BD13E96EA47AC89DA78ED1642C446C1F4CB
Authority key identifier: CA:6E:B7:91:04:87:6E:FE:CB:F1:CF:EF:07:EC:FB:3A:04:8D:05:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/323830343a323865303a3a2f33322d3336203d3e20323632353530.roa
Signing time:             Thu 04 Apr 2024 09:33:09 +0000
ROA not before:           Thu 04 Apr 2024 09:28:09 +0000
ROA not after:            Thu 03 Apr 2025 09:33:09 +0000
asID:                     262550
IP address blocks:        2804:28e0::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ff:7b:d1:3e:96:ea:47:ac:89:da:78:ed:16:42:c4:46:c1:f4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6EB79104876EFECBF1CFEF07ECFB3A048D0598
        Validity
            Not Before: Apr  4 09:28:09 2024 GMT
            Not After : Apr  3 09:33:09 2025 GMT
        Subject: CN=439B8066932B2B7C76751827F1DC6A6D097EBE03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:1e:bb:d7:3a:00:8d:82:d9:dc:b4:36:46:
                    7f:ad:8f:f6:3b:29:d4:95:b2:ec:fe:c8:d5:03:3e:
                    91:16:37:ba:21:20:4f:02:83:3d:08:5a:81:8d:6f:
                    9f:69:ad:05:af:94:a5:9a:27:9c:03:6a:b9:af:76:
                    76:c6:d7:d7:d4:34:d4:58:37:9f:00:3e:83:72:a9:
                    a0:62:18:05:1c:b6:ad:ce:53:ae:34:e5:64:71:75:
                    26:49:2c:f8:26:37:cf:e8:e1:c2:3c:f9:76:c0:19:
                    1f:7f:8f:94:a6:db:13:e2:54:b4:7e:55:6c:c1:3d:
                    49:24:20:f9:38:35:a5:89:45:e3:78:e8:86:74:80:
                    2d:0d:83:d2:b1:a8:36:ba:aa:92:59:bf:e0:21:08:
                    35:be:35:e4:26:fc:fc:b8:e6:58:e4:b2:bd:08:64:
                    dc:d4:5a:b7:d6:fb:dc:0f:ce:2f:28:dc:6f:34:f3:
                    d5:73:8c:74:ec:78:7c:65:20:77:21:68:5a:e6:71:
                    a3:17:15:12:fd:aa:ec:a4:2d:65:cf:52:84:28:4f:
                    f5:9b:eb:64:4b:e0:7b:e5:62:01:fd:ee:ce:3d:90:
                    0a:51:f7:70:04:20:35:85:3f:e0:09:0d:ad:b2:dd:
                    48:95:77:ed:ab:0d:de:1f:b1:4c:69:6f:d8:46:2a:
                    9f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9B:80:66:93:2B:2B:7C:76:75:18:27:F1:DC:6A:6D:09:7E:BE:03
            X509v3 Authority Key Identifier:
                keyid:CA:6E:B7:91:04:87:6E:FE:CB:F1:CF:EF:07:EC:FB:3A:04:8D:05:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/323830343a323865303a3a2f33322d3336203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:42:60:02:63:3e:e4:2c:d4:ff:a0:6d:46:43:c7:34:f1:3b:
         bd:38:e5:e5:1d:86:7a:ba:de:5d:10:a7:c4:02:4b:89:f8:d8:
         3c:23:52:59:f2:50:87:61:57:96:3a:8a:7e:00:4f:9a:cf:cc:
         31:a5:dd:6a:0c:7a:47:a1:39:d9:70:73:b9:4f:7c:98:b8:ad:
         54:3f:83:7d:4b:33:9c:5b:b9:e9:26:42:69:5c:dd:11:b4:8f:
         63:27:99:c0:b8:7a:20:06:9b:af:04:92:ef:bf:82:f3:5f:df:
         28:8e:e9:ca:ec:d2:ed:d1:ac:38:57:c9:d1:2c:b3:14:bb:84:
         e6:21:2d:6e:5d:20:34:1c:76:cc:97:83:5b:a8:df:d6:e9:c3:
         50:de:bd:a4:7d:e3:d5:34:ff:dd:1f:91:f5:43:76:14:b7:9c:
         8c:40:88:f2:2d:d0:16:2f:2b:2c:6d:48:93:48:6f:19:45:61:
         d0:cd:58:a3:60:67:39:4e:77:c1:75:05:7c:23:e0:04:3b:07:
         e7:03:ea:dd:6e:f4:a9:4b:e5:45:2e:99:c3:61:51:ef:3c:9c:
         c1:00:80:fb:62:f3:ee:4e:f2:c7:08:b4:1b:e5:63:58:85:09:
         18:ca:42:0a:88:29:f0:96:ed:6a:b5:20:d5:ff:5d:ec:85:0a:
         62:b9:1b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 21:07:17 2024 by rpki-client on console-fra.rpki-client.org