Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/323830343a326161343a313030303a3a2f34312d3431203d3e20323634303836.roa
File:                     323830343a326161343a313030303a3a2f34312d3431203d3e20323634303836.roa (raw, json)
Hash identifier:          /OCxL1tXdp0r/EN3HRbF6WymQ9JU19FFRbFqUFif3cU=
Subject key identifier:   9E:FE:1B:08:6F:91:E7:EE:46:45:FC:3D:74:2C:8D:71:D2:33:69:C9
Certificate issuer:       /CN=2F962990D08F38EAEAD892BB35125EE477497FD2
Certificate serial:       17C1BA570380E9435746613D86FDFE34FC39C3D7
Authority key identifier: 2F:96:29:90:D0:8F:38:EA:EA:D8:92:BB:35:12:5E:E4:77:49:7F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F962990D08F38EAEAD892BB35125EE477497FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/323830343a326161343a313030303a3a2f34312d3431203d3e20323634303836.roa
Signing time:             Thu 04 Apr 2024 01:39:40 +0000
ROA not before:           Thu 04 Apr 2024 01:34:40 +0000
ROA not after:            Thu 03 Apr 2025 01:39:40 +0000
asID:                     264086
IP address blocks:        2804:2aa4:1000::/41 maxlen: 41

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c1:ba:57:03:80:e9:43:57:46:61:3d:86:fd:fe:34:fc:39:c3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F962990D08F38EAEAD892BB35125EE477497FD2
        Validity
            Not Before: Apr  4 01:34:40 2024 GMT
            Not After : Apr  3 01:39:40 2025 GMT
        Subject: CN=9EFE1B086F91E7EE4645FC3D742C8D71D23369C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:98:cb:a9:b5:0d:43:d8:5c:79:01:7c:e1:
                    ec:31:87:d9:24:7a:33:73:95:21:23:68:07:c0:cc:
                    80:35:21:fe:d3:a6:fc:1d:b6:75:07:21:83:d8:64:
                    d9:f7:22:8c:bf:dd:3d:d5:34:e8:72:3a:ec:e5:c8:
                    e2:b3:0c:52:73:bd:a1:45:ac:6e:22:0e:cc:4d:35:
                    a2:33:8c:02:8c:93:51:4c:de:b6:eb:15:7c:b2:e0:
                    47:34:60:de:67:c7:be:47:b3:d7:b4:c6:6a:fc:c2:
                    96:6a:4f:c0:f1:a7:ca:7b:54:7e:5d:7e:a9:b0:2a:
                    ba:61:38:31:6f:9e:17:4a:20:99:08:91:31:84:13:
                    f4:dd:9f:21:da:50:07:8e:a6:53:b6:05:7e:4e:90:
                    2a:86:6e:0d:28:f7:5c:38:79:f7:f9:41:43:c9:b0:
                    95:88:a3:2b:22:aa:cd:d9:f1:32:dd:c8:5a:6a:94:
                    b8:48:6b:4e:ba:33:7f:c4:7e:1f:be:25:35:f1:60:
                    13:93:0e:d7:21:22:93:31:3b:00:38:58:60:31:32:
                    63:fa:76:16:1d:44:9f:cb:49:59:26:6e:5e:67:e1:
                    ee:36:fa:b8:42:7e:19:d3:68:39:b4:8c:ab:26:99:
                    58:bd:9c:d0:4c:05:38:82:6d:8f:63:b1:16:4b:c7:
                    13:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FE:1B:08:6F:91:E7:EE:46:45:FC:3D:74:2C:8D:71:D2:33:69:C9
            X509v3 Authority Key Identifier:
                keyid:2F:96:29:90:D0:8F:38:EA:EA:D8:92:BB:35:12:5E:E4:77:49:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/2F962990D08F38EAEAD892BB35125EE477497FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F962990D08F38EAEAD892BB35125EE477497FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/323830343a326161343a313030303a3a2f34312d3431203d3e20323634303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2aa4:1000::/41

    Signature Algorithm: sha256WithRSAEncryption
         19:ab:19:05:69:cd:6d:11:9d:66:a2:a6:08:d7:64:6f:04:1e:
         d4:ad:93:e2:b4:89:77:23:bc:a7:14:85:6f:b6:7c:85:4f:d5:
         b6:70:a3:39:f9:a1:ad:84:5b:a1:97:cf:ae:e1:5f:9e:82:5c:
         60:d1:60:7f:ac:91:dd:ba:1b:8b:81:25:cb:08:2c:3e:73:b4:
         f9:7a:83:4c:53:a8:8c:28:f6:60:75:62:b3:08:93:6d:0c:5f:
         2c:3a:ea:88:87:a5:dd:14:63:22:bb:bb:59:d6:87:e0:c3:65:
         c8:0e:1d:85:15:5c:d7:c4:60:0a:f6:3b:0f:5b:bc:fc:1b:1a:
         3d:05:03:5c:f4:55:9a:c1:68:8a:50:2c:e1:3e:fc:50:45:e7:
         c9:43:48:c0:4b:78:e9:bd:98:1f:20:fe:00:86:21:a1:ce:63:
         68:df:0e:ab:bb:84:b2:4f:0d:f3:2c:02:89:ba:83:60:49:8d:
         a9:97:a1:31:06:70:c2:07:2f:08:b0:e7:12:b2:ec:b0:9d:28:
         c7:df:bd:eb:50:84:fc:c6:ca:c5:12:36:98:dc:d4:76:bf:36:
         ae:bf:25:4e:88:b9:a6:75:8a:79:cf:35:87:04:83:de:01:8f:
         57:48:70:f5:a1:4f:c9:be:e1:d7:04:c3:71:20:ff:db:42:07:
         ac:d5:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 21:53:29 2024 by rpki-client on console-fra.rpki-client.org