Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/323830343a353834383a363530303a3a2f34302d3430203d3e20323638313139.roa
File:                     323830343a353834383a363530303a3a2f34302d3430203d3e20323638313139.roa (raw, json)
Hash identifier:          7KWBLps6rubkHNIlniqmNZTfDwb3/NW6Ev3FlYOXaI8=
Subject key identifier:   37:6A:7B:0A:87:7E:78:66:5E:21:AF:48:6E:4F:A5:66:01:C2:83:F5
Certificate issuer:       /CN=05F9FA82E6DC844616C6E65830AA93270618DA3A
Certificate serial:       03DBC57355B20CB449E54425C3939FE62BBCDCC6
Authority key identifier: 05:F9:FA:82:E6:DC:84:46:16:C6:E6:58:30:AA:93:27:06:18:DA:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F9FA82E6DC844616C6E65830AA93270618DA3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/323830343a353834383a363530303a3a2f34302d3430203d3e20323638313139.roa
Signing time:             Wed 29 May 2024 14:38:00 +0000
ROA not before:           Wed 29 May 2024 14:33:00 +0000
ROA not after:            Wed 28 May 2025 14:38:00 +0000
asID:                     268119
IP address blocks:        2804:5848:6500::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:db:c5:73:55:b2:0c:b4:49:e5:44:25:c3:93:9f:e6:2b:bc:dc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05F9FA82E6DC844616C6E65830AA93270618DA3A
        Validity
            Not Before: May 29 14:33:00 2024 GMT
            Not After : May 28 14:38:00 2025 GMT
        Subject: CN=376A7B0A877E78665E21AF486E4FA56601C283F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:99:3b:fc:1f:26:11:ce:fb:95:f7:41:12:
                    0b:59:53:79:0a:29:3f:0c:71:53:70:da:95:63:1d:
                    a6:97:05:83:84:1e:29:a5:c1:2c:86:67:1c:89:e4:
                    b2:bd:c3:bc:e4:7a:33:84:ef:73:c4:bf:ab:bf:02:
                    71:02:e7:d2:a0:f8:c2:ab:c7:02:e7:ad:16:1f:41:
                    80:1e:8c:5c:74:9d:da:15:9a:d5:d6:8f:a6:69:a9:
                    1c:41:15:31:96:d2:45:58:84:19:ae:b2:5b:d9:52:
                    92:f6:a2:63:3d:e8:27:07:82:63:a2:47:2d:58:23:
                    e4:10:f7:89:12:a2:d0:d8:7d:2e:cf:40:df:ab:df:
                    38:25:a1:60:71:14:ce:52:8c:15:d2:e2:b5:64:d0:
                    b7:98:1a:3f:c0:e7:52:16:2e:33:b6:69:a7:aa:c6:
                    ca:0e:2a:8a:90:76:8e:e9:43:9d:bf:83:6a:07:03:
                    c7:d8:26:47:50:04:9c:e9:04:8d:1a:86:f8:8d:67:
                    57:d0:bf:8f:9c:3a:59:bb:df:45:29:f2:22:c4:5d:
                    df:82:73:4c:67:66:ab:34:87:b2:a9:38:e5:fa:fa:
                    39:56:f4:be:8e:2e:61:83:b3:80:01:33:83:f1:30:
                    9b:1a:75:d2:3e:99:83:88:bf:15:45:29:b8:fe:3a:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6A:7B:0A:87:7E:78:66:5E:21:AF:48:6E:4F:A5:66:01:C2:83:F5
            X509v3 Authority Key Identifier:
                keyid:05:F9:FA:82:E6:DC:84:46:16:C6:E6:58:30:AA:93:27:06:18:DA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/05F9FA82E6DC844616C6E65830AA93270618DA3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F9FA82E6DC844616C6E65830AA93270618DA3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/323830343a353834383a363530303a3a2f34302d3430203d3e20323638313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5848:6500::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:da:b8:37:cb:de:9b:e6:b7:14:20:ec:6b:02:1b:0b:6c:d2:
         24:66:17:10:03:9a:b3:2a:6b:51:83:29:7b:c0:87:93:73:19:
         c6:51:2b:1a:e9:b1:f0:11:59:7d:aa:3b:17:2d:67:de:a5:18:
         31:4d:ee:d9:7e:c6:aa:67:06:2d:39:49:ec:29:ed:a8:93:c5:
         27:11:4c:8d:d9:25:83:a1:cb:f8:eb:cb:33:46:c2:9a:7d:e9:
         41:01:ee:9a:62:b1:ed:6f:79:ab:21:48:7d:07:06:a6:38:cd:
         db:81:9c:5c:3c:3b:9c:b2:3d:f0:9d:47:db:8c:9f:f2:04:2d:
         db:6e:09:0e:54:83:83:54:65:fa:0c:8e:18:98:fa:33:78:c7:
         51:fd:0d:65:f5:8d:8b:50:8d:f5:e7:6b:98:d0:1c:64:9b:da:
         4b:7d:53:35:50:78:1e:04:6f:de:73:0a:96:bf:5e:85:8c:e7:
         2e:8d:8d:a3:03:d9:a1:b4:b5:23:ad:5d:28:40:1b:48:6b:33:
         0f:bf:e8:b0:f4:31:8f:ac:9c:0b:f2:14:3f:c4:2c:d8:67:ba:
         45:89:35:ee:07:3d:e6:be:50:4c:64:70:b5:70:c0:c0:75:37:
         16:90:2b:ca:25:f9:b2:b3:8b:d3:3d:f9:01:2e:b5:39:68:ca:
         cf:f0:53:8c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUA9vFc1WyDLRJ5UQlw5Of5iu83MYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVGOUZBODJFNkRDODQ0NjE2QzZFNjU4MzBBQTkzMjcw
NjE4REEzQTAeFw0yNDA1MjkxNDMzMDBaFw0yNTA1MjgxNDM4MDBaMDMxMTAvBgNV
BAMTKDM3NkE3QjBBODc3RTc4NjY1RTIxQUY0ODZFNEZBNTY2MDFDMjgzRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeL5k7/B8mEc77lfdBEgtZU3kK
KT8McVNw2pVjHaaXBYOEHimlwSyGZxyJ5LK9w7zkejOE73PEv6u/AnEC59Kg+MKr
xwLnrRYfQYAejFx0ndoVmtXWj6ZpqRxBFTGW0kVYhBmuslvZUpL2omM96CcHgmOi
Ry1YI+QQ94kSotDYfS7PQN+r3zgloWBxFM5SjBXS4rVk0LeYGj/A51IWLjO2aaeq
xsoOKoqQdo7pQ52/g2oHA8fYJkdQBJzpBI0ahviNZ1fQv4+cOlm730Up8iLEXd+C
c0xnZqs0h7KpOOX6+jlW9L6OLmGDs4ABM4PxMJsaddI+mYOIvxVFKbj+OjavAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUN2p7Cod+eGZeIa9Ibk+lZgHCg/UwHwYDVR0j
BBgwFoAUBfn6gubchEYWxuZYMKqTJwYY2jowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWlMcWY2NGRBTTF3UTZ0RUVjUHJvUG5QS3BLODZaU3IxaWNkcUF3dVpK
YVMvMC8wNUY5RkE4MkU2REM4NDQ2MTZDNkU2NTgzMEFBOTMyNzA2MThEQTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1RjlGQTgyRTZEQzg0NDYx
NkM2RTY1ODMwQUE5MzI3MDYxOERBM0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlpTHFmNjRkQU0xd1E2dEVFY1Byb1BuUEtwSzg2WlNyMWljZHFBd3VaSmFTLzAv
MzIzODMwMzQzYTM1MzgzNDM4M2EzNjM1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzODMxMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEWEhlMA0GCSqGSIb3DQEBCwUA
A4IBAQCY2rg3y96b5rcUIOxrAhsLbNIkZhcQA5qzKmtRgyl7wIeTcxnGUSsa6bHw
EVl9qjsXLWfepRgxTe7ZfsaqZwYtOUnsKe2ok8UnEUyN2SWDocv468szRsKafelB
Ae6aYrHtb3mrIUh9BwamOM3bgZxcPDucsj3wnUfbjJ/yBC3bbgkOVIODVGX6DI4Y
mPozeMdR/Q1l9Y2LUI3152uY0Bxkm9pLfVM1UHgeBG/ecwqWv16FjOcujY2jA9mh
tLUjrV0oQBtIazMPv+iw9DGPrJwL8hQ/xCzYZ7pFiTXuBz3mvlBMZHC1cMDAdTcW
kCvKJfmys4vTPfkBLrU5aMrP8FOM
-----END CERTIFICATE-----
Generated at Sat Jun 29 05:50:12 2024 by rpki-client on console-fra.rpki-client.org