Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a3a2f33342d3334203d3e20323730363638.roa
File:                     323830343a366638633a3a2f33342d3334203d3e20323730363638.roa (raw, json)
Hash identifier:          ndY57Py2RDfJTF+3PwqKKcbeUgCepn+M0ss8r3K8vAQ=
Subject key identifier:   00:56:E9:31:37:1F:DE:20:21:69:1F:C6:11:2A:9C:CC:E4:72:4C:42
Certificate issuer:       /CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
Certificate serial:       54D458403152302652ED600B4308A0EE79DCBD74
Authority key identifier: FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a3a2f33342d3334203d3e20323730363638.roa
Signing time:             Thu 04 Apr 2024 12:53:20 +0000
ROA not before:           Thu 04 Apr 2024 12:48:20 +0000
ROA not after:            Thu 03 Apr 2025 12:53:20 +0000
asID:                     270668
IP address blocks:        2804:6f8c::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d4:58:40:31:52:30:26:52:ed:60:0b:43:08:a0:ee:79:dc:bd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
        Validity
            Not Before: Apr  4 12:48:20 2024 GMT
            Not After : Apr  3 12:53:20 2025 GMT
        Subject: CN=0056E931371FDE2021691FC6112A9CCCE4724C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f0:96:6b:2d:e9:ec:f4:ca:72:d5:56:ef:71:
                    ca:d7:b2:b6:12:02:81:2c:5a:52:c7:9a:54:42:9c:
                    c6:fa:3d:f4:59:40:4b:03:a1:28:93:27:6c:83:80:
                    7e:8e:e8:19:18:dd:12:4d:5e:24:76:f3:03:fe:37:
                    c2:0b:91:c3:65:06:64:98:1e:3f:30:d9:ef:73:40:
                    1b:c5:9b:6e:9d:b8:1e:38:d2:14:49:c5:cf:7c:7b:
                    4a:18:2e:00:bc:ab:47:e5:bf:1b:db:36:e0:24:4c:
                    1a:54:4c:d5:02:85:f9:65:61:c2:90:ad:f0:9e:5a:
                    0e:31:9e:a2:38:af:14:c5:41:f4:7b:d4:52:cb:fe:
                    33:fd:79:9f:fb:5c:02:02:d6:b5:de:b0:a6:a8:75:
                    8c:38:8f:77:58:4e:aa:3c:ef:fd:24:58:9f:7c:d8:
                    07:35:ef:40:fb:3a:5b:91:dd:0f:6d:d8:0c:f4:75:
                    a0:b3:68:0f:13:69:cf:21:0c:bb:2c:03:e7:a8:69:
                    11:3f:d1:2f:f3:83:7b:4b:27:e4:07:d5:f1:30:83:
                    5a:f7:6d:1c:09:28:fe:da:2e:0e:99:e1:20:5e:a5:
                    13:f5:8a:a1:e4:ce:c6:23:50:fa:fd:b8:1c:2a:c3:
                    82:13:35:b8:97:46:ea:9e:e7:6c:42:3a:48:b2:bf:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:56:E9:31:37:1F:DE:20:21:69:1F:C6:11:2A:9C:CC:E4:72:4C:42
            X509v3 Authority Key Identifier:
                keyid:FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a3a2f33342d3334203d3e20323730363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8c::/34

    Signature Algorithm: sha256WithRSAEncryption
         7f:9d:10:0b:2c:7d:5b:34:f2:51:b3:d9:24:3b:60:18:80:13:
         57:d9:da:cc:a2:1c:4b:fc:c0:90:a0:09:db:d4:cf:1f:86:db:
         de:35:8d:22:a9:a1:94:93:d7:68:68:d1:23:2a:74:54:1a:00:
         39:fa:c8:91:8e:9e:a2:e5:f0:cc:fe:d3:b9:69:f4:a2:31:f9:
         3d:1d:86:9a:9a:b1:eb:a8:14:f4:29:63:cb:cf:f7:83:4d:6f:
         23:7a:40:bd:a8:2f:ed:33:cf:f6:0d:2d:ab:2d:f6:1f:19:76:
         7c:7d:97:ca:3f:21:8f:d2:78:aa:83:67:0c:0d:d5:bc:37:05:
         22:6e:a1:f9:fc:3b:e1:95:78:73:38:1a:46:b6:ca:10:0e:17:
         51:1b:ae:e1:e5:52:b0:f3:4b:61:4c:67:57:cd:ef:f2:c5:88:
         29:c8:ff:05:a9:e2:37:b1:3e:51:1d:b8:3b:7f:ef:32:3a:17:
         64:7d:fa:05:31:c6:ef:b7:7e:1d:9d:70:a3:17:10:74:85:52:
         d0:6e:ac:ae:df:ca:be:de:c9:5e:b6:38:e7:f4:42:67:d6:04:
         68:04:60:24:bc:e1:cf:d5:ad:25:2f:d6:0d:de:c5:9f:5c:e9:
         a2:47:07:d4:2d:1b:bf:8a:ab:8c:c2:ca:23:66:f9:95:f0:6e:
         fc:a9:a1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 11:06:33 2024 by rpki-client on console-fra.rpki-client.org