Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a633030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a633030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          P9+vlmOQOP0kpZyVQUyLkBVse+a111riFq7RdFKmL6c=
Subject key identifier:   50:7A:B1:2B:18:50:8C:73:D2:61:86:54:28:18:4B:6D:F9:E9:67:48
Certificate issuer:       /CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
Certificate serial:       63B07758AAA2A3304158074169F3BF2163EF8255
Authority key identifier: 79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a633030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Thu 16 May 2024 17:05:28 +0000
ROA not before:           Thu 16 May 2024 17:00:28 +0000
ROA not after:            Thu 15 May 2025 17:05:28 +0000
asID:                     270760
IP address blocks:        2804:70fc:c000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b0:77:58:aa:a2:a3:30:41:58:07:41:69:f3:bf:21:63:ef:82:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Validity
            Not Before: May 16 17:00:28 2024 GMT
            Not After : May 15 17:05:28 2025 GMT
        Subject: CN=507AB12B18508C73D261865428184B6DF9E96748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:92:8c:fe:2d:08:22:62:ec:74:c3:de:26:
                    69:53:aa:de:28:99:03:f4:2a:81:f7:b6:ec:b1:8a:
                    48:5b:b8:fe:be:27:7c:8d:d6:47:e6:3f:7d:e8:6d:
                    32:1d:43:33:ce:7d:f0:52:d5:f1:fa:42:a3:e0:10:
                    a7:e5:05:43:13:db:c4:4a:03:07:47:18:0a:d6:3d:
                    8a:67:2b:a8:d6:c6:4b:54:1c:f6:c0:33:a2:fc:56:
                    6f:9a:e1:1d:ca:c8:9d:49:a0:95:4b:17:61:fc:e5:
                    a5:47:24:14:39:51:14:63:d8:85:67:61:92:d2:7e:
                    03:a6:f9:c6:5e:23:48:93:24:4e:1b:32:7a:82:3a:
                    d6:71:35:b3:89:06:e5:90:4a:7c:b8:78:a3:f2:67:
                    53:4a:81:5a:58:a2:1e:46:ef:6d:11:24:b1:12:47:
                    02:23:6e:a6:a9:b9:13:82:21:c6:24:2c:67:43:24:
                    3c:f6:d6:1a:c8:07:1d:ef:f8:d2:90:a1:91:cd:54:
                    72:d0:d3:7f:20:46:ca:a3:dc:98:2e:9e:54:86:d8:
                    60:8c:dc:d9:7a:73:b5:5c:30:94:fd:d7:1e:3e:02:
                    2c:5a:d7:81:e3:79:94:6e:98:11:4d:4e:6f:db:42:
                    2e:e4:45:23:51:89:af:da:47:7c:e5:6b:df:81:93:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7A:B1:2B:18:50:8C:73:D2:61:86:54:28:18:4B:6D:F9:E9:67:48
            X509v3 Authority Key Identifier:
                keyid:79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a633030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4e:06:68:c7:ef:47:d8:54:13:e5:ce:ca:40:44:07:82:10:f5:
         97:fb:94:70:ab:ec:7c:6f:90:36:93:10:ea:cc:ca:bd:fa:91:
         a5:73:1a:c9:81:97:ac:d6:2c:4f:e6:2f:09:c3:ab:62:d7:c1:
         ea:22:8b:ea:1a:58:47:d2:c4:6e:80:7c:fc:8a:0b:f0:f5:b5:
         2b:7a:0a:e8:3f:67:cb:af:10:cb:80:03:ff:7a:82:2c:33:5a:
         da:37:bb:06:8e:0d:0d:e6:b9:a5:9b:6c:d5:03:58:4d:47:04:
         60:92:91:2c:ee:97:f0:39:8d:06:61:72:e7:9c:5c:d9:56:fb:
         3a:e8:ac:85:22:77:bb:22:53:ce:61:c3:7b:33:bc:e9:72:9d:
         27:ad:b1:11:ae:30:fc:1a:e2:1e:36:3b:1f:11:87:c2:24:a0:
         d4:9f:08:e0:fc:80:60:f9:68:16:13:1a:44:e4:83:cf:ef:3b:
         df:86:65:78:cb:66:3f:8d:f9:b5:4a:11:91:ed:32:3f:da:8c:
         b1:67:44:47:d9:22:75:44:ea:78:3c:5c:f4:e9:cf:74:35:61:
         44:4d:12:f8:98:aa:2c:da:d2:5c:b1:a5:99:db:d2:eb:17:63:
         d3:0d:96:77:a3:de:69:8c:58:28:35:14:8d:ba:72:c0:7c:c5:
         3d:fd:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 13:09:44 2024 by rpki-client on console-fra.rpki-client.org