Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a633030303a3a2f33342d3334203d3e20323730363638.roa
File:                     323830343a366638633a633030303a3a2f33342d3334203d3e20323730363638.roa (raw, json)
Hash identifier:          ZzKKgHnyB0pjsUom2mGGjWqdlBgh34krmKZuhEHbSIY=
Subject key identifier:   4B:59:35:10:7A:4D:F4:1F:D0:D7:3C:16:F2:CC:4C:88:C4:B1:8C:6F
Certificate issuer:       /CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
Certificate serial:       7AC53BA156E528C4CF0B0E4763BBF47DFE20E1F0
Authority key identifier: FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a633030303a3a2f33342d3334203d3e20323730363638.roa
Signing time:             Thu 04 Apr 2024 12:53:21 +0000
ROA not before:           Thu 04 Apr 2024 12:48:21 +0000
ROA not after:            Thu 03 Apr 2025 12:53:21 +0000
asID:                     270668
IP address blocks:        2804:6f8c:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c5:3b:a1:56:e5:28:c4:cf:0b:0e:47:63:bb:f4:7d:fe:20:e1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
        Validity
            Not Before: Apr  4 12:48:21 2024 GMT
            Not After : Apr  3 12:53:21 2025 GMT
        Subject: CN=4B5935107A4DF41FD0D73C16F2CC4C88C4B18C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:e2:10:aa:25:79:2d:a2:a1:53:65:8b:ee:
                    56:4d:df:71:8e:e7:58:7d:ef:1a:2e:82:ee:4d:1c:
                    72:67:4b:41:fa:4b:59:1e:4a:97:31:a6:ec:67:4d:
                    92:f2:e2:01:51:17:eb:fa:4f:54:b9:45:e8:11:09:
                    3e:29:98:36:9a:3e:14:01:ba:46:14:9a:99:06:f4:
                    2b:44:5b:37:72:69:c2:22:16:96:76:a1:a7:bf:78:
                    ba:b5:ae:1c:44:75:d9:d5:7e:57:70:99:80:f3:46:
                    be:f8:95:48:c3:4e:4a:37:e9:ae:e6:00:98:2a:f4:
                    f3:2c:f7:50:7e:5f:6a:63:1e:e6:29:fd:6f:e4:67:
                    48:ba:fb:10:09:72:13:56:f1:87:8b:ee:33:ec:ab:
                    57:e9:03:da:c2:1e:d8:64:62:00:16:a5:cd:10:97:
                    ef:11:0c:68:23:b0:66:ac:36:db:3a:e8:7c:9f:b2:
                    26:bf:15:53:27:1c:6b:8a:86:7a:7d:73:fe:d0:93:
                    1f:04:de:52:04:e6:43:e7:05:0d:76:2d:42:4b:da:
                    7d:7a:be:45:7d:d0:ee:4c:f4:f4:08:0b:09:ab:e4:
                    73:bb:f0:b1:d0:82:52:fb:90:e8:32:b6:9b:2a:35:
                    79:33:18:fb:d7:33:31:9d:03:d1:ef:aa:ae:6a:55:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:59:35:10:7A:4D:F4:1F:D0:D7:3C:16:F2:CC:4C:88:C4:B1:8C:6F
            X509v3 Authority Key Identifier:
                keyid:FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a633030303a3a2f33342d3334203d3e20323730363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:d1:04:e3:29:18:79:1e:4b:41:a0:cb:04:77:db:ce:6b:0d:
         38:f9:ec:90:e7:60:df:cc:25:53:02:d8:96:a3:9a:28:2d:88:
         33:fd:51:d3:d5:8d:f1:ee:e1:f8:d1:45:67:6e:2a:80:0c:d5:
         f6:25:66:2e:ae:9e:80:9d:aa:6f:dc:62:5f:68:0f:d6:4e:d7:
         42:02:b3:b5:5e:ab:6a:f8:76:7c:b9:86:56:a2:91:e8:b8:80:
         74:23:e5:23:64:73:f2:04:9d:12:1c:d2:1d:53:31:42:1c:c9:
         73:19:06:d3:27:6b:dc:c7:87:9a:d8:b4:49:ac:58:59:c6:53:
         4c:55:35:a9:eb:00:85:79:e8:d7:a5:da:19:d5:68:65:a3:a0:
         6b:df:b4:5e:07:fa:52:06:6c:69:ff:ab:c1:45:ab:d1:05:7b:
         b8:2b:e1:6d:cc:14:7f:d7:78:43:eb:87:5d:bd:1f:c1:90:c5:
         ed:7f:9b:e3:57:31:89:0a:f7:84:53:3b:82:25:80:eb:5d:b9:
         72:06:a3:73:ef:4e:e5:b1:cf:5b:ce:cb:b9:59:6b:69:49:96:
         77:b9:04:12:a1:4f:75:ca:ba:32:2c:3e:53:cb:81:ed:d4:70:
         00:84:b8:40:28:ee:8b:70:c4:da:26:c5:ce:8e:0b:4d:de:3d:
         4f:9b:3d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 11:06:33 2024 by rpki-client on console-fra.rpki-client.org