Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/323830343a333066343a3a2f33322d3438203d3e20323634393833.roa
File:                     323830343a333066343a3a2f33322d3438203d3e20323634393833.roa (raw, json)
Hash identifier:          kSFvFu8OEE2XeN5HqA/lcQoxnQVNVgBbc58eQeZBjkc=
Subject key identifier:   F3:95:63:15:F9:9D:1F:6F:15:EC:04:59:00:8A:FE:5D:8B:02:FA:C4
Certificate issuer:       /CN=8353A54CD0F063F40A00ECF155063FC7DAB8DF64
Certificate serial:       5C416BF2D89B2D0B6ED23EBBF8E9D7A5EE3C187D
Authority key identifier: 83:53:A5:4C:D0:F0:63:F4:0A:00:EC:F1:55:06:3F:C7:DA:B8:DF:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8353A54CD0F063F40A00ECF155063FC7DAB8DF64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/323830343a333066343a3a2f33322d3438203d3e20323634393833.roa
Signing time:             Mon 15 Jul 2024 15:09:25 +0000
ROA not before:           Mon 15 Jul 2024 15:04:25 +0000
ROA not after:            Mon 14 Jul 2025 15:09:25 +0000
asID:                     264983
IP address blocks:        2804:30f4::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:41:6b:f2:d8:9b:2d:0b:6e:d2:3e:bb:f8:e9:d7:a5:ee:3c:18:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353A54CD0F063F40A00ECF155063FC7DAB8DF64
        Validity
            Not Before: Jul 15 15:04:25 2024 GMT
            Not After : Jul 14 15:09:25 2025 GMT
        Subject: CN=F3956315F99D1F6F15EC0459008AFE5D8B02FAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:12:cb:55:d4:90:03:b7:7f:5b:d2:8b:13:23:
                    75:5c:a2:25:75:05:6f:46:5e:d6:f1:77:99:20:24:
                    49:d7:4f:dd:0f:22:45:df:b2:b3:9f:e9:6b:ee:a2:
                    f2:cd:55:08:7e:5e:2a:19:4e:21:d2:02:aa:a9:c8:
                    c7:e2:7f:57:9f:6c:02:fd:ee:ff:f7:df:5e:fd:a9:
                    d0:7e:5f:c6:7b:8d:bc:9f:9b:78:22:de:96:93:56:
                    b5:82:21:eb:4e:95:dc:44:6c:cd:85:5e:e7:86:a1:
                    b0:a2:9a:8d:3c:0e:aa:7f:ab:9b:51:6c:3c:d5:db:
                    f6:10:14:15:c9:39:05:12:f3:c2:d6:67:91:f3:40:
                    e4:4b:aa:2e:b0:59:56:b2:87:c4:e5:93:a4:8a:fb:
                    01:93:cd:91:d5:9a:0d:30:66:ea:86:29:64:10:53:
                    01:07:34:ff:0a:ef:02:ac:57:e6:f8:d8:67:46:28:
                    a3:34:f1:a2:51:82:2b:1d:78:8a:2a:6d:4c:5c:9e:
                    e3:68:52:c4:f6:07:ac:94:21:6a:70:5f:ad:5e:69:
                    ce:56:8b:a5:9d:6b:22:d9:db:a8:44:b1:ad:22:8d:
                    71:d2:7b:a1:f2:cc:33:25:da:c8:b3:0f:6e:1b:d8:
                    93:b1:92:a5:ce:22:98:0e:af:49:7c:9e:b9:0a:96:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:95:63:15:F9:9D:1F:6F:15:EC:04:59:00:8A:FE:5D:8B:02:FA:C4
            X509v3 Authority Key Identifier:
                keyid:83:53:A5:4C:D0:F0:63:F4:0A:00:EC:F1:55:06:3F:C7:DA:B8:DF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/8353A54CD0F063F40A00ECF155063FC7DAB8DF64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8353A54CD0F063F40A00ECF155063FC7DAB8DF64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/323830343a333066343a3a2f33322d3438203d3e20323634393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:6d:4f:1b:55:91:e5:81:70:9a:09:77:2d:a3:f8:dd:b7:65:
         11:2a:19:97:5a:ef:dd:38:b8:b7:f3:48:07:71:ab:94:d2:fe:
         f0:35:a2:36:96:56:ff:64:6f:63:28:4c:1b:73:58:ea:9d:e9:
         73:b3:ec:b8:10:ea:df:0a:0f:83:17:70:04:5e:3e:e8:9d:fb:
         28:2d:d6:b7:fc:88:35:e8:21:8a:f6:d2:01:80:07:78:5c:a3:
         89:dd:7c:ec:ff:e1:12:a1:fb:97:fd:e9:0b:d2:b1:5a:7e:14:
         71:97:6f:11:cd:f4:6a:23:42:b1:b4:2a:1c:ac:dc:78:84:86:
         ea:ed:5f:af:c9:d7:7e:10:ac:65:53:3e:ed:64:46:60:37:b7:
         5b:36:66:8b:40:00:cd:e5:98:b4:b4:43:02:2b:09:cd:41:91:
         52:e5:93:aa:08:cc:2b:e7:a5:bd:32:6e:71:b8:ad:a8:8f:8f:
         c8:8c:96:6c:dd:e2:ba:4f:7d:df:2b:39:20:92:75:5f:af:93:
         0b:9b:2e:01:68:ff:5b:b7:66:1b:e6:ce:e6:87:4e:40:9e:e6:
         7b:c5:c2:b9:8e:57:38:54:65:72:d5:64:93:a5:2a:6d:c0:fb:
         91:4e:b9:30:0a:ff:2c:23:d6:1b:0a:12:08:8f:4a:ef:38:3d:
         59:ae:85:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 09:44:09 2024 by rpki-client on console-fra.rpki-client.org