Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a643030303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a643030303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          JfBfB6KrnzeH2N/N5ioBlyDXGUTNYHEqWJE/djDAhFQ=
Subject key identifier:   33:D6:EB:93:1F:74:36:34:F4:D1:71:26:B2:DB:7B:8E:34:3C:D1:30
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       05264620EB3653A7E28400936FC34AC741C4B137
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a643030303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:45 +0000
ROA not before:           Sat 13 Apr 2024 13:32:45 +0000
ROA not after:            Sat 12 Apr 2025 13:37:45 +0000
asID:                     267027
IP address blocks:        2804:4708:d000::/37 maxlen: 37

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:26:46:20:eb:36:53:a7:e2:84:00:93:6f:c3:4a:c7:41:c4:b1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:45 2024 GMT
            Not After : Apr 12 13:37:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:d3:80:95:f6:5c:a5:e6:41:5d:cc:9e:e6:
                    58:5a:f8:24:83:ce:74:23:ed:9f:f7:e5:6b:b5:a4:
                    10:8a:14:f8:6d:c3:0e:46:9b:65:25:0f:3d:66:75:
                    26:17:ad:b2:e0:cf:e5:48:00:34:2b:68:a6:2e:2e:
                    22:e5:a7:02:ee:d9:9b:35:6e:ed:d8:d9:65:ed:08:
                    bf:d4:b5:4e:75:e5:0f:79:34:f9:0d:47:03:20:d6:
                    54:e4:ec:31:8b:10:d4:f0:9c:1c:59:0b:33:18:1b:
                    1e:41:15:6b:84:94:cd:c6:2c:5f:2f:5e:43:66:7d:
                    90:99:ce:60:a9:ad:49:39:95:ed:0a:40:62:53:fa:
                    e6:1f:0e:8c:8f:1b:3e:4a:f4:ad:6e:e6:7f:19:12:
                    24:96:a2:36:4f:26:f6:a3:d7:78:56:12:c7:4b:63:
                    84:f5:7d:29:d2:73:05:21:77:d2:0f:9b:9f:ab:a5:
                    6b:47:74:a4:97:f5:87:13:24:df:66:62:56:33:30:
                    52:1c:f3:9e:15:a8:1d:90:26:4a:4d:29:ef:d6:60:
                    ed:5e:53:05:62:bb:dc:ea:4b:68:82:e4:64:59:e2:
                    82:b4:80:2b:bb:4b:d1:4d:ad:e9:dc:b2:20:48:99:
                    fa:1c:67:0a:2b:6b:8d:28:97:f2:e3:8b:61:d4:4c:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D6:EB:93:1F:74:36:34:F4:D1:71:26:B2:DB:7B:8E:34:3C:D1:30
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a643030303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:d000::/37

    Signature Algorithm: sha256WithRSAEncryption
         76:5d:b1:e3:96:90:14:75:7f:73:81:12:6c:ac:b4:f6:82:01:
         df:2a:cf:96:a9:b3:23:1a:a9:df:68:47:07:5e:42:5a:08:87:
         77:23:ca:22:d4:a6:11:c7:ee:25:a4:1c:c8:e7:2b:10:ec:41:
         a1:ad:b0:56:94:78:6e:cf:a3:b7:b9:d1:a7:5a:7c:4f:3c:ff:
         0d:d8:31:11:1f:4f:f6:20:3c:6a:e4:36:77:0c:d5:3c:7c:b7:
         cd:0a:88:0a:60:9e:92:89:78:2d:71:1e:3c:b1:72:4d:44:b4:
         56:62:32:db:23:28:36:b2:f1:74:ec:6a:d7:9c:1e:d3:76:70:
         e6:27:d3:2e:3c:5f:40:15:81:3e:32:1e:f4:29:f5:17:17:87:
         8d:d0:f4:ff:de:52:88:a8:5d:b3:ba:c1:c7:a5:08:7e:d8:d7:
         52:62:05:8b:45:25:96:7d:f6:45:4d:24:23:e2:c1:70:b7:e1:
         0c:be:88:e2:31:9d:14:9e:ba:5c:61:de:40:ee:dd:37:04:0d:
         6d:98:40:32:34:9d:f4:c0:1d:d5:8b:d2:5f:30:f8:bc:82:f5:
         3d:de:76:fe:1d:31:f9:40:97:ca:96:6c:71:de:d6:ea:24:57:
         a1:f1:16:b2:9e:a4:30:89:51:58:40:60:80:73:9e:57:5a:e9:
         80:a8:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org