Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa
File:                     323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa (raw, json)
Hash identifier:          DdbHTyJE2JCR2e6/6nvjYTHnKJJFktNP7lrh+IlukLo=
Subject key identifier:   F2:2B:32:9D:74:F8:97:42:19:24:3B:0C:A3:3B:EE:F4:00:6B:FF:5C
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       49BA0D90C396B0D975D68AEA0255DC4EA96C24D6
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:45 +0000
ROA not before:           Sat 13 Apr 2024 13:32:45 +0000
ROA not after:            Sat 12 Apr 2025 13:37:45 +0000
asID:                     267027
IP address blocks:        2804:4708:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ba:0d:90:c3:96:b0:d9:75:d6:8a:ea:02:55:dc:4e:a9:6c:24:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:45 2024 GMT
            Not After : Apr 12 13:37:45 2025 GMT
        Subject: CN=3082010A0282010100B8C1A731C1DB8EB54D7262994B7A33604F786A22D3E5688EACD189C5F513058376E66C6289840CA69E03CB0A93BBDD86F0353C0A554048DF4EF39677015F3255D8A2052B70E83CD8A9C31F09F1E6CFF2A8AA1B409EF0CB97F7F7069773B06586D1D56153B887E0100016F66977905220A7721D286816357875F81B8C79F58D971BE041A4CDB239252CAB776980A97C75173BF9B10184FC9C2BDE46695D17D10A410828B65B03C3AF08C69C62D1FCA380B48D6F91BA1F49A997DD9FD1965A6DC4D842C04D1BFF8C20F45F35BA8DC7AEEF0F26A75F33B8109791F53FD193BA39CECD9C9F775FDECD1D3E33079831AEA44D9CBAC3585E7D599547C18BFE9D311ABB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:a7:31:c1:db:8e:b5:4d:72:62:99:4b:7a:
                    33:60:4f:78:6a:22:d3:e5:68:8e:ac:d1:89:c5:f5:
                    13:05:83:76:e6:6c:62:89:84:0c:a6:9e:03:cb:0a:
                    93:bb:dd:86:f0:35:3c:0a:55:40:48:df:4e:f3:96:
                    77:01:5f:32:55:d8:a2:05:2b:70:e8:3c:d8:a9:c3:
                    1f:09:f1:e6:cf:f2:a8:aa:1b:40:9e:f0:cb:97:f7:
                    f7:06:97:73:b0:65:86:d1:d5:61:53:b8:87:e0:10:
                    00:16:f6:69:77:90:52:20:a7:72:1d:28:68:16:35:
                    78:75:f8:1b:8c:79:f5:8d:97:1b:e0:41:a4:cd:b2:
                    39:25:2c:ab:77:69:80:a9:7c:75:17:3b:f9:b1:01:
                    84:fc:9c:2b:de:46:69:5d:17:d1:0a:41:08:28:b6:
                    5b:03:c3:af:08:c6:9c:62:d1:fc:a3:80:b4:8d:6f:
                    91:ba:1f:49:a9:97:dd:9f:d1:96:5a:6d:c4:d8:42:
                    c0:4d:1b:ff:8c:20:f4:5f:35:ba:8d:c7:ae:ef:0f:
                    26:a7:5f:33:b8:10:97:91:f5:3f:d1:93:ba:39:ce:
                    cd:9c:9f:77:5f:de:cd:1d:3e:33:07:98:31:ae:a4:
                    4d:9c:ba:c3:58:5e:7d:59:95:47:c1:8b:fe:9d:31:
                    1a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2B:32:9D:74:F8:97:42:19:24:3B:0C:A3:3B:EE:F4:00:6B:FF:5C
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c8:6e:c5:7a:85:fd:61:2f:9c:e9:4f:0d:83:18:02:b6:ba:5e:
         fc:16:d8:bc:1a:5b:a5:84:a3:8e:6d:3b:c9:21:83:ce:c5:d1:
         b5:e9:13:ed:11:3a:3c:8b:f3:84:01:53:f6:2e:bb:45:c7:9c:
         a0:e4:36:dd:00:db:0d:6f:e3:e6:bb:05:16:f0:b8:dc:6d:b3:
         34:dc:7a:e8:43:ab:59:ed:49:22:3d:d9:ff:f9:af:0f:1e:4e:
         f0:05:68:ab:a8:21:c6:35:d3:80:8a:d1:d5:8b:fc:f6:18:79:
         9f:c1:f1:b2:1c:f5:fd:37:14:07:8a:3e:9a:90:89:d1:77:db:
         03:e4:1f:1d:a9:e3:91:8e:23:68:b9:95:98:56:c2:6d:9d:bc:
         91:46:6f:92:3f:6e:8c:9d:1d:ad:91:de:c5:71:14:24:bf:b7:
         a6:85:a6:b0:81:f8:f9:42:74:27:98:38:19:87:82:35:69:d3:
         95:fb:2c:37:0a:dc:f6:d4:6d:63:d8:c7:85:0e:d5:75:59:48:
         35:98:58:16:75:2a:b9:c0:64:e2:60:b0:cd:9c:98:2b:4e:90:
         1f:9f:d5:a8:14:60:0b:11:db:dc:72:18:7e:9c:a3:76:03:9c:
         d7:40:7c:8b:0b:05:47:34:2b:e7:b0:7f:a8:8a:0a:18:12:56:
         96:a7:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org