Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33342d3334203d3e20323638363932.roa
File:                     323830343a353532343a3a2f33342d3334203d3e20323638363932.roa (raw, json)
Hash identifier:          08X6k6b+12YMGp2BJz0nUMDSHuExk3738cfHdehYMFY=
Subject key identifier:   ED:AD:8E:59:54:24:6A:B2:84:23:FE:B8:D5:D1:58:78:3C:57:7D:E0
Certificate issuer:       /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial:       10489883ED79590ECBE02F1C6A53FA67DE524700
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33342d3334203d3e20323638363932.roa
Signing time:             Fri 20 Sep 2024 18:57:37 +0000
ROA not before:           Fri 20 Sep 2024 18:52:37 +0000
ROA not after:            Fri 19 Sep 2025 18:57:37 +0000
asID:                     268692
IP address blocks:        2804:5524::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:48:98:83:ed:79:59:0e:cb:e0:2f:1c:6a:53:fa:67:de:52:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
        Validity
            Not Before: Sep 20 18:52:37 2024 GMT
            Not After : Sep 19 18:57:37 2025 GMT
        Subject: CN=EDAD8E5954246AB28423FEB8D5D158783C577DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:43:6d:70:f1:04:f7:98:d7:55:0c:9c:47:
                    ea:30:f9:ba:eb:6a:7f:79:e7:ef:13:bc:3d:bb:d0:
                    8f:64:98:bd:27:4e:3f:68:36:c7:0a:d3:87:cb:77:
                    37:ad:ed:0c:0f:42:57:d2:01:4f:85:af:d8:56:21:
                    18:59:b8:da:ef:8d:f9:4b:e8:99:9d:45:90:84:08:
                    1a:4c:19:3c:2e:b7:5b:92:0c:e1:23:2e:e9:58:90:
                    c6:ac:cd:b0:9b:45:93:ad:e8:18:36:5a:ee:e0:3a:
                    18:63:67:64:35:7b:23:3b:b8:0d:65:a1:51:83:f3:
                    2f:05:81:10:12:3a:dd:fd:6f:82:09:4f:a2:51:b9:
                    6c:11:65:ad:ee:0c:69:2a:77:bd:21:38:73:63:48:
                    3b:76:2a:b5:28:9e:48:3e:9e:fa:64:57:dd:be:1a:
                    58:d4:4e:4c:57:0b:eb:4e:e2:52:d8:3e:8d:a8:c4:
                    79:9a:7c:40:94:ee:c5:b8:6a:95:64:91:64:e4:55:
                    f3:b9:ae:e1:50:52:c9:ce:17:36:04:ff:be:72:cc:
                    dc:c0:6e:60:b2:a3:fe:bf:d8:83:c6:18:5a:d5:a3:
                    b4:be:16:2d:df:6d:e0:5e:f9:94:11:75:8f:8a:c7:
                    ad:2b:aa:a8:ea:82:3f:64:84:27:83:bb:9f:67:11:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AD:8E:59:54:24:6A:B2:84:23:FE:B8:D5:D1:58:78:3C:57:7D:E0
            X509v3 Authority Key Identifier:
                keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33342d3334203d3e20323638363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5524::/34

    Signature Algorithm: sha256WithRSAEncryption
         43:70:c8:76:d4:db:4c:63:df:82:1a:2f:bb:bd:b7:5b:32:7e:
         dd:ce:29:f2:7e:81:a8:eb:50:00:53:9b:e9:ad:15:c3:15:a0:
         7b:eb:10:21:30:21:02:11:3d:12:95:69:7e:3d:44:31:08:02:
         6b:0c:a9:48:c5:71:74:b7:dd:19:8c:b3:2d:ac:ea:7b:1d:29:
         83:b0:c9:3d:e8:72:bc:e9:75:fc:75:39:c3:a3:68:08:70:26:
         3e:f4:95:8d:95:10:fe:47:95:27:ce:a3:8d:c3:a7:20:fc:9b:
         91:43:2a:90:6a:5f:33:b7:20:c9:38:72:25:17:d3:c1:45:13:
         d8:5c:47:c3:ce:d5:78:5d:e3:81:36:4f:1c:ff:87:a9:50:6b:
         fb:cc:9c:18:94:fb:69:26:49:5c:97:7f:d7:2d:87:d5:76:17:
         95:2d:8f:69:13:2b:3b:eb:d4:c5:8b:bf:7f:d4:22:38:38:e8:
         42:e9:fc:62:c3:70:8f:ef:24:4f:90:b1:4d:e9:3f:fd:26:04:
         91:ea:5d:f1:fc:17:d6:fb:81:53:b4:f5:9a:2c:9b:fa:15:c5:
         ae:26:67:33:f4:f6:dd:90:3f:69:2d:be:fc:78:e4:25:24:8a:
         e3:87:34:8a:9e:bd:d5:37:bd:c0:0a:28:76:7d:8e:a5:fc:78:
         3c:20:3d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 13:44:38 2024 by rpki-client on console-fra.rpki-client.org