Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/323830343a356538343a3a2f33332d3333203d3e20323639303338.roa
File:                     323830343a356538343a3a2f33332d3333203d3e20323639303338.roa (raw, json)
Hash identifier:          2qW+jhOfv81Ek5KUPp0R+azAp+EOJ+AmDjluNrLdamg=
Subject key identifier:   0C:62:BC:12:26:74:8E:F1:4A:23:7D:0A:32:45:79:EB:41:CF:47:10
Certificate issuer:       /CN=3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3
Certificate serial:       598B6A086E37E91F68BBC34A15A5FD03FAC6A283
Authority key identifier: 3C:75:FE:DB:0E:BE:CF:9F:9A:A9:9D:4E:23:63:D7:26:96:43:E2:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/323830343a356538343a3a2f33332d3333203d3e20323639303338.roa
Signing time:             Wed 31 Jul 2024 18:38:51 +0000
ROA not before:           Wed 31 Jul 2024 18:33:51 +0000
ROA not after:            Wed 30 Jul 2025 18:38:51 +0000
asID:                     269038
IP address blocks:        2804:5e84::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8b:6a:08:6e:37:e9:1f:68:bb:c3:4a:15:a5:fd:03:fa:c6:a2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3
        Validity
            Not Before: Jul 31 18:33:51 2024 GMT
            Not After : Jul 30 18:38:51 2025 GMT
        Subject: CN=0C62BC1226748EF14A237D0A324579EB41CF4710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3d:c3:8a:60:a4:92:88:89:83:87:47:35:81:
                    76:08:ef:47:e9:a4:d8:f3:3c:6a:87:ac:85:7a:2a:
                    6c:a9:80:85:44:0e:49:b9:d7:8f:79:24:34:0b:c3:
                    8b:98:d9:63:9e:8c:71:a2:3a:e3:5a:c7:cd:97:2a:
                    e5:e2:15:82:22:10:4e:5f:fb:2c:6a:9c:10:20:bc:
                    ff:d3:d1:75:ba:f3:1d:7d:f6:18:1e:d8:55:6e:4b:
                    37:f0:f4:a1:25:e2:11:0b:23:0b:ea:76:aa:93:9d:
                    81:06:1b:e6:68:a6:e5:26:c0:3c:1f:8f:04:a4:ed:
                    dd:ee:70:9f:1d:46:03:b9:0c:12:bd:bf:17:1d:d6:
                    12:c6:72:bb:03:4d:52:a7:f3:5b:bd:7d:df:e9:8f:
                    d7:93:bc:52:12:41:61:4f:b5:43:4d:9e:67:cb:e5:
                    a8:ba:42:e2:43:8e:bb:d7:28:62:ad:30:40:26:e0:
                    30:cb:3d:36:d8:b6:bf:b9:1e:71:1e:39:f0:00:eb:
                    b9:61:16:ee:59:6a:dc:6d:6f:ba:23:23:d4:e8:a7:
                    20:47:ef:c8:30:84:df:2f:d1:1f:4b:ed:99:27:86:
                    a1:53:ad:bf:b8:c4:b1:1d:45:b5:8f:1e:42:59:62:
                    03:af:33:28:be:a7:31:22:7c:9d:fa:3d:81:fd:ea:
                    e6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:62:BC:12:26:74:8E:F1:4A:23:7D:0A:32:45:79:EB:41:CF:47:10
            X509v3 Authority Key Identifier:
                keyid:3C:75:FE:DB:0E:BE:CF:9F:9A:A9:9D:4E:23:63:D7:26:96:43:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/323830343a356538343a3a2f33332d3333203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e84::/33

    Signature Algorithm: sha256WithRSAEncryption
         4b:be:fc:e3:25:cb:33:b9:13:fe:95:c5:b2:1e:a0:95:60:41:
         2a:5c:ad:e0:94:51:9b:a6:38:4e:e5:9f:74:02:9c:56:30:50:
         dd:94:88:80:66:9e:d7:75:92:26:0f:ed:2b:09:8c:b0:5d:4d:
         10:d2:d4:c3:b9:17:a8:9b:21:8a:b9:d1:4d:2a:48:16:7c:f7:
         a7:b3:14:52:47:51:67:a7:49:7a:b8:4d:81:8a:5c:d6:ce:ee:
         f0:2b:f3:b5:16:ed:12:df:3d:1f:b8:06:91:15:9a:7d:06:1f:
         8a:d8:2b:4b:c6:d3:a8:33:a0:1e:bf:ee:fe:8f:d5:57:4d:28:
         4b:83:0c:87:b9:6d:6a:39:c2:04:87:26:ad:46:c0:2b:ab:64:
         73:70:63:a0:08:14:f0:20:88:b7:f4:48:1e:cf:d4:e6:7a:38:
         10:70:3c:64:f7:10:11:71:46:c4:5e:39:84:95:37:a3:c8:e5:
         68:b3:c5:62:5c:25:24:e2:2f:40:05:fc:c7:67:fe:52:df:62:
         cc:9c:96:5d:7e:15:74:45:96:a2:e1:1a:1f:ed:64:d4:85:40:
         fe:fa:f0:60:d5:d7:06:c2:5f:a3:04:e4:54:8d:b5:79:76:28:
         bb:cc:99:39:3d:28:e7:2a:d6:ee:93:a8:0a:1e:bf:7b:48:b3:
         f1:9f:1c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 21:53:29 2024 by rpki-client on console-fra.rpki-client.org