Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/323830343a356231383a31663a3a2f34382d3438203d3e20323638383138.roa
File:                     323830343a356231383a31663a3a2f34382d3438203d3e20323638383138.roa (raw, json)
Hash identifier:          ah26xXCBjd1w45OiK+fiHSxs6KHUwLgRj2p9+I86p2g=
Subject key identifier:   58:7E:98:43:F8:5F:6D:CA:A9:BE:67:DA:15:5D:AC:65:FF:23:40:D9
Certificate issuer:       /CN=9B4C5E90E0F22697DDBD9AE097C5654B92C7FCC7
Certificate serial:       0FFB8B26653B01C5CA8932BE95F917D84BAF203D
Authority key identifier: 9B:4C:5E:90:E0:F2:26:97:DD:BD:9A:E0:97:C5:65:4B:92:C7:FC:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B4C5E90E0F22697DDBD9AE097C5654B92C7FCC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/323830343a356231383a31663a3a2f34382d3438203d3e20323638383138.roa
Signing time:             Tue 20 Aug 2024 13:03:03 +0000
ROA not before:           Tue 20 Aug 2024 12:58:03 +0000
ROA not after:            Tue 19 Aug 2025 13:03:03 +0000
asID:                     268818
IP address blocks:        2804:5b18:1f::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fb:8b:26:65:3b:01:c5:ca:89:32:be:95:f9:17:d8:4b:af:20:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B4C5E90E0F22697DDBD9AE097C5654B92C7FCC7
        Validity
            Not Before: Aug 20 12:58:03 2024 GMT
            Not After : Aug 19 13:03:03 2025 GMT
        Subject: CN=587E9843F85F6DCAA9BE67DA155DAC65FF2340D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:ce:45:e7:43:74:ac:ba:bc:91:0c:60:f3:
                    1d:27:17:48:41:42:32:b8:59:7c:c9:9e:f3:26:b3:
                    b4:64:ce:aa:e3:9e:1c:46:10:8e:7d:ce:36:ad:7d:
                    18:f6:ef:29:ae:a1:53:74:a0:97:ad:44:9f:55:da:
                    00:d1:f8:0f:d8:4d:25:c8:5b:4e:93:46:b1:54:ae:
                    e1:52:b8:80:6d:21:f0:6d:02:e1:36:ac:73:81:76:
                    5f:74:e5:e5:ac:83:4a:91:19:89:6c:1e:5a:9d:ad:
                    72:92:17:98:22:d3:3a:c4:8d:3a:2d:19:91:89:59:
                    a5:04:9d:4b:91:d1:ec:14:aa:e6:93:fd:ba:86:c4:
                    43:8a:29:57:ad:e5:9c:d6:7d:11:c4:a9:e3:e4:73:
                    c9:71:30:27:fa:99:9c:15:23:f2:ba:39:f9:0b:e4:
                    4f:67:6a:4b:1d:b6:f6:58:7c:4d:94:61:d9:9b:8c:
                    7e:4a:32:e2:da:4e:d5:16:72:68:38:af:0c:39:a4:
                    d1:60:c9:17:0a:17:e4:e1:23:55:65:1f:f2:4e:4b:
                    5a:29:2b:3e:80:88:2b:08:0f:20:71:28:ad:d0:22:
                    32:ff:3f:c4:f7:f6:61:b2:fe:fb:95:23:ee:77:ef:
                    1a:af:cc:cc:9f:c7:4f:d4:b9:84:ff:4a:83:76:c8:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7E:98:43:F8:5F:6D:CA:A9:BE:67:DA:15:5D:AC:65:FF:23:40:D9
            X509v3 Authority Key Identifier:
                keyid:9B:4C:5E:90:E0:F2:26:97:DD:BD:9A:E0:97:C5:65:4B:92:C7:FC:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/9B4C5E90E0F22697DDBD9AE097C5654B92C7FCC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B4C5E90E0F22697DDBD9AE097C5654B92C7FCC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/323830343a356231383a31663a3a2f34382d3438203d3e20323638383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b18:1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:c1:dc:e0:45:bf:5c:a1:81:a1:c6:10:d2:4c:3b:c9:98:
         34:8c:e6:49:e2:99:a6:a4:51:4f:a8:01:c6:c1:43:3f:a1:c8:
         76:26:c0:f8:1a:44:5d:e1:e4:9e:2a:42:54:79:2e:70:79:2b:
         93:dd:fe:58:a6:15:c5:06:24:26:0b:e4:5f:0f:cc:d6:c2:75:
         71:6f:cd:bb:50:5d:13:66:80:a7:e5:93:a8:93:fc:5b:fc:fe:
         7d:6d:c3:11:f7:91:9a:75:6e:5d:85:5a:e4:7a:30:bb:e9:6c:
         61:d2:73:a3:b3:34:82:95:d4:33:0c:19:c9:e8:a2:91:15:98:
         ea:52:e7:55:d4:de:a1:90:fc:3b:8a:0b:24:1c:6f:a8:1e:2f:
         1a:01:6a:6e:b4:7b:4e:36:f8:14:a5:d2:07:01:c2:fd:27:1e:
         ae:7a:10:5b:2c:e6:16:54:21:3e:03:1c:75:84:fa:91:78:84:
         21:1d:c3:a0:93:97:2c:6b:d2:9a:80:7f:f3:3d:0f:70:43:a8:
         3b:c0:1c:2c:50:87:6e:8e:94:f3:9f:08:bb:80:ec:75:4e:49:
         3a:f8:4c:07:a3:79:ed:52:ba:a4:05:2e:45:ec:b4:f6:23:df:
         13:ac:36:0d:5f:fe:b9:04:30:8f:82:17:0b:f8:9e:4b:c7:34:
         f3:d3:e6:93
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUD/uLJmU7AcXKiTK+lfkX2EuvID0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI0QzVFOTBFMEYyMjY5N0REQkQ5QUUwOTdDNTY1NEI5
MkM3RkNDNzAeFw0yNDA4MjAxMjU4MDNaFw0yNTA4MTkxMzAzMDNaMDMxMTAvBgNV
BAMTKDU4N0U5ODQzRjg1RjZEQ0FBOUJFNjdEQTE1NURBQzY1RkYyMzQwRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxM5F50N0rLq8kQxg8x0nF0hB
QjK4WXzJnvMms7RkzqrjnhxGEI59zjatfRj27ymuoVN0oJetRJ9V2gDR+A/YTSXI
W06TRrFUruFSuIBtIfBtAuE2rHOBdl905eWsg0qRGYlsHlqdrXKSF5gi0zrEjTot
GZGJWaUEnUuR0ewUquaT/bqGxEOKKVet5ZzWfRHEqePkc8lxMCf6mZwVI/K6OfkL
5E9naksdtvZYfE2UYdmbjH5KMuLaTtUWcmg4rww5pNFgyRcKF+ThI1VlH/JOS1op
Kz6AiCsIDyBxKK3QIjL/P8T39mGy/vuVI+537xqvzMyfx0/UuYT/SoN2yJjtAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUWH6YQ/hfbcqpvmfaFV2sZf8jQNkwHwYDVR0j
BBgwFoAUm0xekODyJpfdvZrgl8VlS5LH/McwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNEMjVCaTJRcjFWbTFNWDU0MkdCdGVnTHFLYTZTNktNaFdSU1E5dHNo
ZGQvMC85QjRDNUU5MEUwRjIyNjk3RERCRDlBRTA5N0M1NjU0QjkyQzdGQ0M3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNEM1RTkwRTBGMjI2OTdE
REJEOUFFMDk3QzU2NTRCOTJDN0ZDQzcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzRDI1QmkyUXIxVm0xTVg1NDJHQnRlZ0xxS2E2UzZLTWhXUlNROXRzaGRkLzAv
MzIzODMwMzQzYTM1NjIzMTM4M2EzMTY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjM4MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKARbGAAfMA0GCSqGSIb3DQEBCwUAA4IB
AQCgycHc4EW/XKGBocYQ0kw7yZg0jOZJ4pmmpFFPqAHGwUM/och2JsD4GkRd4eSe
KkJUeS5weSuT3f5YphXFBiQmC+RfD8zWwnVxb827UF0TZoCn5ZOok/xb/P59bcMR
95GadW5dhVrkejC76Wxh0nOjszSCldQzDBnJ6KKRFZjqUudV1N6hkPw7igskHG+o
Hi8aAWputHtONvgUpdIHAcL9Jx6uehBbLOYWVCE+Axx1hPqReIQhHcOgk5csa9Ka
gH/zPQ9wQ6g7wBwsUIdujpTznwi7gOx1Tkk6+EwHo3ntUrqkBS5F7LT2I98TrDYN
X/65BDCPghcL+J5LxzTz0+aT
-----END CERTIFICATE-----
Generated at Sun Sep 1 16:40:28 2024 by rpki-client on console-fra.rpki-client.org