Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a383030303a3a2f33342d3334203d3e20323637303237.roa
File:                     323830343a343730383a383030303a3a2f33342d3334203d3e20323637303237.roa (raw, json)
Hash identifier:          5TscxxMHTnXpd3EFsSWJbH75d+qOsA/KrneFPc4OtlU=
Subject key identifier:   E0:78:13:E0:AD:81:DA:FB:EB:3F:79:55:F7:D7:88:AF:D6:52:6F:AD
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       5407AA2C2321D4280BAB558AFD17A65A48666B38
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a383030303a3a2f33342d3334203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:46 +0000
ROA not before:           Sat 13 Apr 2024 13:32:46 +0000
ROA not after:            Sat 12 Apr 2025 13:37:46 +0000
asID:                     267027
IP address blocks:        2804:4708:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:07:aa:2c:23:21:d4:28:0b:ab:55:8a:fd:17:a6:5a:48:66:6b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:46 2024 GMT
            Not After : Apr 12 13:37:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:db:3e:65:43:9f:54:2a:f5:7f:97:56:79:
                    8e:5f:62:21:8e:61:e9:8c:bb:80:ae:7d:d5:04:4f:
                    64:d7:c6:7a:8e:b7:b4:c6:b6:be:bd:19:c5:e7:f0:
                    7a:c6:56:ee:bb:ee:cc:a7:17:a0:12:1d:4f:05:83:
                    0d:86:46:11:30:32:cf:c8:74:01:50:17:f1:be:69:
                    81:d4:50:94:3e:1a:54:9b:ba:1a:5f:1e:25:2a:0f:
                    1b:23:19:8e:c9:91:63:6c:f5:87:50:75:55:4e:fc:
                    c6:8f:2a:c7:3e:d6:49:b7:ac:ca:39:7a:a6:b8:8d:
                    d4:62:92:eb:f3:a4:7e:89:d8:e4:7a:d6:0c:5f:77:
                    86:e5:56:b6:47:74:98:05:6a:c3:72:5f:7c:9a:89:
                    86:32:52:2f:9b:aa:7a:fe:0b:5a:44:bd:b1:73:36:
                    d3:5c:dd:ae:d6:10:ce:c8:1a:35:2b:df:c6:0d:0d:
                    47:12:4e:d5:a6:96:17:c7:79:a5:f3:fa:4c:b1:b7:
                    8e:93:50:f5:68:7f:69:6b:13:2d:a6:88:a3:4a:90:
                    2d:13:29:97:78:a0:e3:71:bb:aa:a6:ac:d1:dd:3d:
                    b6:d7:7d:76:df:e0:fb:6f:16:a4:04:b1:b0:09:06:
                    ba:81:39:3a:89:3d:d4:6d:7f:be:f6:b8:fd:bb:5c:
                    cc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:78:13:E0:AD:81:DA:FB:EB:3F:79:55:F7:D7:88:AF:D6:52:6F:AD
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a383030303a3a2f33342d3334203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         46:6a:01:58:9c:26:66:16:fa:3e:c9:2f:d7:42:8b:19:51:a2:
         e1:15:84:4b:b7:90:a8:94:95:b9:e2:0a:88:5c:03:9b:35:85:
         f4:83:89:b6:0b:4b:ed:d0:b3:92:90:2c:e7:95:1f:d4:da:79:
         c0:73:77:f3:95:0d:53:1a:d8:f9:57:76:8b:0b:5c:b8:be:38:
         f5:7f:be:a4:38:c6:66:d6:a6:61:69:b7:7c:5d:17:18:0e:81:
         7d:73:2a:27:24:1a:e3:d5:12:9d:2d:d6:4e:2d:e3:f0:07:5e:
         be:c5:98:f0:a3:a2:81:46:52:7d:f0:33:01:8b:8e:ed:be:40:
         b8:4e:04:59:0d:96:b4:45:2b:f0:ee:d9:8e:3a:85:6d:ce:07:
         42:f9:91:9d:6d:d5:98:f3:d0:91:1d:61:b5:6e:e3:b1:37:c1:
         5b:98:c3:18:94:d0:ec:f2:ba:ff:9e:81:ac:e6:44:3b:bd:c6:
         7e:0c:e6:4f:81:be:53:60:d9:3f:49:f1:a3:c7:e4:e5:a5:30:
         bb:9e:66:ba:0d:87:39:3e:03:77:46:81:d8:95:aa:16:6d:ad:
         20:4f:d8:de:6a:26:6c:65:77:b4:64:4e:56:89:c9:12:19:79:
         bb:17:14:a2:58:3b:dc:c1:db:b8:92:04:97:14:c9:a3:0c:57:
         c2:77:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 14:44:28 2024 by rpki-client on console-fra.rpki-client.org