Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/323830343a353964383a3a2f33322d3332203d3e20323638373239.roa
File:                     323830343a353964383a3a2f33322d3332203d3e20323638373239.roa (raw, json)
Hash identifier:          fcn6OOSRC6zMKoJZYGCA1KkpK3uMP8FDZq4AmyRqR/M=
Subject key identifier:   5B:2C:C1:4E:AA:8E:CB:E9:70:A1:C0:88:82:30:9D:10:26:42:25:18
Certificate issuer:       /CN=8881C2C20AAAF7924613B94374865D8C137EAD42
Certificate serial:       755E4B727B3933E57AB5712FC2FD99D310F2232B
Authority key identifier: 88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/323830343a353964383a3a2f33322d3332203d3e20323638373239.roa
Signing time:             Thu 04 Apr 2024 07:56:17 +0000
ROA not before:           Thu 04 Apr 2024 07:51:17 +0000
ROA not after:            Thu 03 Apr 2025 07:56:17 +0000
asID:                     268729
IP address blocks:        2804:59d8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5e:4b:72:7b:39:33:e5:7a:b5:71:2f:c2:fd:99:d3:10:f2:23:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8881C2C20AAAF7924613B94374865D8C137EAD42
        Validity
            Not Before: Apr  4 07:51:17 2024 GMT
            Not After : Apr  3 07:56:17 2025 GMT
        Subject: CN=5B2CC14EAA8ECBE970A1C08882309D1026422518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:e4:7a:5a:69:61:06:bb:cd:11:86:ce:e9:
                    d2:e9:4e:85:7e:4f:6a:67:31:a2:22:a1:e9:df:8c:
                    8f:1c:71:a5:87:14:bb:42:c1:8c:56:fd:f6:06:47:
                    6b:2e:4d:29:3a:3f:e7:9d:23:48:a6:d4:2e:2e:4c:
                    53:64:f5:bc:44:29:73:0f:6a:cc:94:e3:2f:0b:bb:
                    2f:5e:64:a1:3d:4b:10:05:ba:df:d2:9e:14:3f:ea:
                    61:18:b9:6e:98:96:46:34:3a:a3:83:5f:8d:d9:3c:
                    30:5c:a7:3b:e8:8f:67:b5:e2:ae:b1:11:38:08:c4:
                    c2:50:74:0c:cc:44:1b:30:36:22:8b:af:40:c2:0b:
                    36:a9:a7:cc:1a:69:d4:dd:69:f3:71:9c:cd:2c:44:
                    da:a5:90:0e:2e:67:17:e4:a4:45:34:93:d2:10:5e:
                    e6:ca:e6:87:6e:32:bd:1b:a8:18:45:ae:80:25:c3:
                    e3:42:5e:67:05:ba:d0:72:cf:ea:fa:4c:c3:2a:03:
                    5d:84:bd:de:1a:6e:8c:95:23:5b:3c:07:ce:03:3d:
                    af:99:25:1c:33:c2:e0:d3:59:37:ec:e0:3b:ac:d8:
                    0c:e1:19:a4:e4:27:30:de:98:34:da:c9:f0:51:1c:
                    d0:f6:47:9a:15:6b:7d:63:e2:2f:10:54:89:5c:df:
                    a3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2C:C1:4E:AA:8E:CB:E9:70:A1:C0:88:82:30:9D:10:26:42:25:18
            X509v3 Authority Key Identifier:
                keyid:88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/8881C2C20AAAF7924613B94374865D8C137EAD42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/323830343a353964383a3a2f33322d3332203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:f8:2b:f8:67:57:16:fa:2a:6e:34:5b:16:15:bb:a6:09:41:
         2f:f2:90:bb:15:33:5c:dc:23:66:4b:de:4d:e5:20:ad:11:69:
         25:7c:ff:93:0d:f4:95:9e:42:1f:9d:4e:bf:36:2c:9e:03:ed:
         84:dc:77:96:8d:69:47:2e:4c:fc:ef:ab:d3:a3:38:44:17:0a:
         d4:0f:93:8f:09:c1:85:47:02:ed:05:fa:20:78:33:f4:03:83:
         83:86:c6:b5:a2:0a:24:89:f2:6d:d5:65:7f:2d:09:48:7c:46:
         a6:b4:13:d5:13:56:d2:37:7d:9f:8b:22:e5:33:cf:11:34:eb:
         fd:44:d0:59:b4:00:dc:d5:52:9c:eb:33:51:76:e0:7a:91:b5:
         0c:9f:7d:32:b8:1f:50:a5:c1:8c:e5:fd:3a:6c:da:24:74:01:
         39:dd:11:05:c6:4b:f4:22:fd:fa:98:da:84:37:e5:ef:b4:2c:
         0c:e8:9d:ae:f4:d1:86:82:0b:36:14:6c:43:8f:c1:99:21:8e:
         69:69:8d:93:f9:2b:f4:3f:00:13:07:39:66:69:aa:3e:a6:89:
         3e:73:f9:c3:9e:9c:39:d2:2c:d0:93:72:a2:fa:6c:30:c5:49:
         01:af:2d:7a:3a:55:8c:d6:bf:bd:1e:96:6a:8b:b9:4c:00:a3:
         75:7f:b5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 14:49:05 2024 by rpki-client on console-fra.rpki-client.org