Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6135303a3a2f33342d3438203d3e203238333439.roa
File:                     323830343a6135303a3a2f33342d3438203d3e203238333439.roa (raw, json)
Hash identifier:          pASB3GzFYypQAXpk8SviNySXOtVOivNL7h5TRRNNrbI=
Subject key identifier:   20:AE:59:34:6E:D9:5D:4C:0D:C7:77:09:5A:1E:F2:F7:31:B3:5C:5A
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       5F2E0942A3D090EEFF05DF2AF5F63481D0A3DF22
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6135303a3a2f33342d3438203d3e203238333439.roa
Signing time:             Thu 04 Apr 2024 19:59:30 +0000
ROA not before:           Thu 04 Apr 2024 19:54:30 +0000
ROA not after:            Thu 03 Apr 2025 19:59:30 +0000
asID:                     28349
IP address blocks:        2804:a50::/34 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2e:09:42:a3:d0:90:ee:ff:05:df:2a:f5:f6:34:81:d0:a3:df:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:30 2024 GMT
            Not After : Apr  3 19:59:30 2025 GMT
        Subject: CN=20AE59346ED95D4C0DC777095A1EF2F731B35C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:3c:2f:65:b5:35:95:95:df:32:a0:27:b8:
                    82:9e:c8:01:e1:af:75:aa:fb:ec:42:41:77:30:4e:
                    47:c0:31:45:eb:09:09:9e:57:a6:a8:d7:77:91:18:
                    31:9f:1a:ba:6b:af:57:14:14:4e:91:a4:89:65:0f:
                    2a:9a:b2:ac:86:a9:9d:5a:47:e7:8b:7e:32:8b:98:
                    7d:a8:a6:eb:13:bb:51:d8:83:0c:fb:98:6d:a6:6b:
                    ed:70:5c:cc:ab:ba:19:98:f6:e7:15:ae:36:0b:bc:
                    58:62:f6:13:1f:51:7b:7c:9e:11:c4:61:de:86:ed:
                    a3:ec:3a:24:ba:29:a9:1c:d6:6c:cc:0d:e9:1b:12:
                    cc:dd:1d:cb:92:19:b8:ca:ee:81:0a:3e:7a:3e:cd:
                    b4:6f:3c:25:10:9f:b8:e4:f8:53:05:c4:27:44:87:
                    73:d6:25:59:8a:69:16:54:73:d0:0f:28:8b:d1:3e:
                    80:02:dc:cf:0a:74:8a:fe:28:68:3a:b4:65:2d:a3:
                    95:f7:96:3a:f8:31:ea:5b:9a:30:c3:88:48:d3:c4:
                    f2:46:6a:71:a0:99:55:90:bd:02:58:f6:38:0a:c9:
                    84:09:53:28:08:d7:31:51:51:f5:bc:14:a0:ef:14:
                    80:ef:3d:cc:27:04:1e:d6:3a:c9:c5:dc:95:51:1c:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AE:59:34:6E:D9:5D:4C:0D:C7:77:09:5A:1E:F2:F7:31:B3:5C:5A
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6135303a3a2f33342d3438203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a50::/34

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:6f:12:38:7c:be:57:8f:23:e2:3b:f6:1d:b8:c3:55:42:
         51:32:dd:0f:a2:f1:83:fd:19:58:9d:fc:12:30:88:e3:9d:38:
         96:d8:49:ed:ab:b3:21:b3:b7:40:30:93:da:89:bb:d7:f9:6f:
         99:35:67:a6:42:38:ee:90:de:9a:d0:2e:1a:3b:28:76:81:93:
         42:7e:f5:0a:a0:48:40:8a:28:4c:58:23:96:76:c9:e4:65:fb:
         43:b0:a7:a4:f1:0f:c3:88:93:f8:e8:05:60:78:4f:15:4d:96:
         67:48:97:d3:dd:f5:23:ff:14:a5:a1:e3:f8:bb:71:d2:a9:2a:
         8d:31:d9:6d:54:a2:13:ec:73:cf:72:10:59:7e:55:1b:2f:09:
         32:fd:24:84:d4:e1:4b:e6:42:58:30:39:75:98:bd:a6:14:fe:
         a8:18:c3:72:65:3e:0e:54:91:34:4d:f4:4c:65:98:a1:6e:2d:
         77:37:df:6a:d8:5d:de:20:16:54:a8:a2:45:2a:ee:ec:79:2e:
         18:0b:eb:5d:2b:9f:c9:4b:a2:26:91:34:ce:a3:ce:73:5e:6a:
         77:ae:40:e7:30:7a:10:35:65:04:32:a3:f1:fe:59:e2:7a:ec:
         4b:42:f8:f2:cf:fb:e7:2c:10:22:f2:cf:ae:70:08:ee:31:b5:
         83:4b:65:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org