Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a363030333a3a2f34382d3438203d3e20323731373233.roa
File:                     323830343a383030303a363030333a3a2f34382d3438203d3e20323731373233.roa (raw, json)
Hash identifier:          lHHsO0U5Vnb5aSAKmVu1jPMgVqBPVpPVlbHfmtnpa1c=
Subject key identifier:   F5:FA:E5:77:69:42:84:5F:C8:DF:67:6E:7C:5D:29:80:1D:89:7D:21
Certificate issuer:       /CN=00329BFCE59988BC06ECC86EE26ADD745B04C576
Certificate serial:       3C89ECEF62BC488F7EB993F7D5E2E90D6C43DF25
Authority key identifier: 00:32:9B:FC:E5:99:88:BC:06:EC:C8:6E:E2:6A:DD:74:5B:04:C5:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00329BFCE59988BC06ECC86EE26ADD745B04C576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a363030333a3a2f34382d3438203d3e20323731373233.roa
Signing time:             Thu 25 Apr 2024 13:59:58 +0000
ROA not before:           Thu 25 Apr 2024 13:54:58 +0000
ROA not after:            Thu 24 Apr 2025 13:59:58 +0000
asID:                     271723
IP address blocks:        2804:8000:6003::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:89:ec:ef:62:bc:48:8f:7e:b9:93:f7:d5:e2:e9:0d:6c:43:df:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00329BFCE59988BC06ECC86EE26ADD745B04C576
        Validity
            Not Before: Apr 25 13:54:58 2024 GMT
            Not After : Apr 24 13:59:58 2025 GMT
        Subject: CN=F5FAE5776942845FC8DF676E7C5D29801D897D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:c9:10:6a:8d:26:b1:a8:d3:4c:2d:d9:52:
                    0d:b4:ce:7d:97:c8:27:35:54:f7:43:6a:0a:ed:2e:
                    86:2d:a2:0a:38:c8:64:bd:12:ca:c4:7f:c1:ea:2e:
                    8d:2c:1d:1f:a5:b2:65:f6:cd:1e:91:d7:00:f4:f3:
                    78:3e:5f:56:35:f9:8c:f1:84:d4:d7:91:b2:aa:23:
                    20:9b:8b:8e:67:9a:4e:77:e0:8b:c9:11:36:bb:56:
                    5d:96:50:47:10:f2:46:51:19:9b:8e:d5:2e:e1:95:
                    e6:c3:ff:3e:57:fd:d7:ae:73:5a:be:3e:99:0a:5a:
                    91:95:f0:e5:58:2a:54:b6:62:a2:76:45:b3:a0:1b:
                    41:52:da:b5:af:c6:6e:e6:32:4e:e7:0b:c0:fe:28:
                    9b:56:ca:55:20:dc:95:11:64:f2:36:d8:82:5d:77:
                    79:25:53:d8:5d:0a:f5:8a:af:fa:65:e1:70:db:4b:
                    86:8b:bf:58:60:fc:35:5e:34:9e:9c:51:db:92:b7:
                    f3:c2:bf:d9:e8:76:5f:f0:37:42:0b:ef:f4:2a:d5:
                    e2:f7:d1:b7:49:5e:85:9f:b6:30:e4:13:ef:bd:d9:
                    56:ed:50:49:5a:e3:f1:55:58:34:e0:ec:b2:e5:78:
                    b6:27:8f:92:35:cc:e3:83:42:1b:4a:3f:76:5b:a8:
                    35:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FA:E5:77:69:42:84:5F:C8:DF:67:6E:7C:5D:29:80:1D:89:7D:21
            X509v3 Authority Key Identifier:
                keyid:00:32:9B:FC:E5:99:88:BC:06:EC:C8:6E:E2:6A:DD:74:5B:04:C5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/00329BFCE59988BC06ECC86EE26ADD745B04C576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00329BFCE59988BC06ECC86EE26ADD745B04C576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a363030333a3a2f34382d3438203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:6003::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:82:5f:e4:22:80:03:67:a8:15:92:c5:45:f7:df:af:0f:82:
         50:de:2a:db:da:03:ac:75:a8:de:75:8b:50:9f:9a:fd:1e:dc:
         32:61:2e:da:66:cf:d3:d9:8a:bc:dc:9b:91:68:44:3a:13:a7:
         03:08:8a:f3:ae:92:ba:de:dd:27:d2:89:93:8b:98:41:7f:b8:
         98:1b:c3:8c:ef:85:db:75:56:56:0d:6a:84:f1:de:69:7a:01:
         5f:16:3d:37:3d:9a:a9:96:71:57:a3:8c:97:6f:9c:7b:36:6a:
         b0:24:30:a3:3e:c4:ef:48:ec:33:8f:40:fb:ab:56:d7:bf:c0:
         10:42:8c:70:94:f5:67:db:a0:58:a0:5e:97:b7:b6:b3:c7:07:
         b7:ff:68:6e:ae:8d:8e:46:fc:f0:ed:ba:ee:c5:47:47:7a:76:
         10:9e:12:eb:c7:3d:8e:2c:da:82:8d:ef:50:8b:79:e9:89:73:
         cd:d6:65:36:b8:5a:af:44:6c:39:03:1c:ca:5d:5f:a9:a3:bc:
         b5:16:17:c9:22:e3:11:fa:86:43:79:b8:bc:18:bf:99:92:60:
         7a:1e:db:06:bd:a3:70:d9:4b:c2:9b:9b:f4:f4:c8:71:92:b2:
         fc:5f:c5:4c:c7:21:b2:b6:9a:4a:b6:b1:58:0f:16:e1:77:00:
         28:8b:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 00:23:35 2024 by rpki-client on console-fra.rpki-client.org