Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/323830343a333030383a3a2f33322d3332203d3e20323634393237.roa
File:                     323830343a333030383a3a2f33322d3332203d3e20323634393237.roa (raw, json)
Hash identifier:          d2OLolbXr+6M/Lu2YlfHeIOyj/MfqGEcB0hPISS+c84=
Subject key identifier:   F3:59:F9:46:39:F5:88:85:03:7C:9A:54:99:1B:45:AF:C3:82:1A:EC
Certificate issuer:       /CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Certificate serial:       797AA6FD613AE3C0A719F2CF45610834D0ADEEEB
Authority key identifier: 1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/323830343a333030383a3a2f33322d3332203d3e20323634393237.roa
Signing time:             Wed 23 Oct 2024 17:58:09 +0000
ROA not before:           Wed 23 Oct 2024 17:53:09 +0000
ROA not after:            Wed 22 Oct 2025 17:58:09 +0000
asID:                     264927
IP address blocks:        2804:3008::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7a:a6:fd:61:3a:e3:c0:a7:19:f2:cf:45:61:08:34:d0:ad:ee:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
        Validity
            Not Before: Oct 23 17:53:09 2024 GMT
            Not After : Oct 22 17:58:09 2025 GMT
        Subject: CN=F359F94639F58885037C9A54991B45AFC3821AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a7:3e:76:5c:9c:be:62:c0:bb:7b:fb:3a:18:
                    15:c9:52:e4:89:6b:0f:22:16:e1:ea:d8:0c:09:df:
                    06:ce:96:b8:44:14:b6:be:94:87:53:92:b9:1e:8f:
                    78:8d:a0:0b:da:48:4f:30:0e:72:db:1e:35:eb:e9:
                    7b:3e:7e:1c:ca:f4:5c:90:f0:16:0c:36:b3:90:a8:
                    84:73:ab:28:fd:74:48:80:e4:a8:c6:a9:c2:33:75:
                    16:16:03:75:29:0a:05:e0:08:53:de:cc:fe:63:d0:
                    29:e4:fb:59:a3:97:19:da:19:17:f6:f0:b5:e2:11:
                    8d:a6:86:83:5e:31:f0:62:4b:c4:a2:2c:01:19:f3:
                    d5:21:4c:21:a8:5e:5e:d4:5e:5b:4f:bc:74:19:0a:
                    8f:ce:9e:c8:a7:b3:4a:75:67:8c:b8:04:4f:44:1a:
                    3f:ed:68:3b:5a:cc:eb:13:ae:d9:a4:a7:8d:4f:7f:
                    1d:67:62:eb:c0:0a:78:d7:1e:92:cd:51:94:e0:14:
                    6b:a8:9c:6e:de:5a:ff:71:11:97:fd:9f:4e:3b:92:
                    b2:ef:48:3d:9d:85:c4:c0:92:f5:69:93:ff:b8:29:
                    87:06:ca:a4:40:10:7f:ed:4c:f8:cc:a3:36:ac:c2:
                    0e:1d:a7:40:62:24:f5:ef:9c:de:21:1f:08:35:43:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:59:F9:46:39:F5:88:85:03:7C:9A:54:99:1B:45:AF:C3:82:1A:EC
            X509v3 Authority Key Identifier:
                keyid:1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/323830343a333030383a3a2f33322d3332203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3008::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:2f:67:15:7c:04:ef:24:ca:bf:33:17:34:cd:f1:26:04:2d:
         21:d9:ab:ca:73:62:28:75:17:83:74:26:d4:34:4d:0c:ba:18:
         1f:65:3e:eb:0f:e4:4e:f1:46:15:4a:3b:82:f4:85:12:f1:e7:
         51:0d:15:d7:c3:1f:10:5d:70:01:67:df:83:d5:c8:f8:ce:12:
         65:ee:ee:ab:e8:84:4a:a8:2e:56:72:2b:b5:9c:58:f0:3b:99:
         e5:f1:c0:3b:ba:99:3a:8a:1c:2f:da:9c:f1:7b:9f:a5:1e:4d:
         b4:33:f7:b8:b1:2c:22:8c:2c:97:cb:37:b4:81:10:88:c6:6d:
         12:93:56:e0:04:83:76:27:b9:0a:a4:b3:e1:e1:2d:9b:e4:7d:
         7b:82:50:28:15:f3:a6:84:cd:ce:3b:17:4f:54:4b:fd:b1:a8:
         5b:d8:4d:c8:76:e2:64:7c:4e:c7:bc:71:c5:bc:5e:12:54:25:
         07:9e:a3:1d:c3:6a:e5:dc:8a:01:c3:7a:76:0a:99:6d:2c:c2:
         6a:f5:56:7e:60:fa:23:b5:95:74:9b:0a:8e:da:66:bc:da:e3:
         63:e1:32:88:56:fa:d2:89:3a:5e:a6:ea:44:5d:b4:c0:5c:89:
         47:0f:29:1c:fa:bc:28:6e:57:ad:f9:d0:fb:52:24:a2:0a:34:
         c2:f9:8f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 16:37:07 2024 by rpki-client on console-fra.rpki-client.org