Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa
File:                     323830343a363566633a3a2f33322d3634203d3e20323639353236.roa (raw, json)
Hash identifier:          CIoPQFXXmG/PiPtNsaBAWywef/iYgPqXaJG8ooum8/E=
Subject key identifier:   41:6F:2B:5D:2F:9A:F8:5D:9E:61:8E:70:6D:82:51:45:77:91:42:C4
Certificate issuer:       /CN=0135D1CBDF850A312CEB5E320379EB8164B7FAA1
Certificate serial:       1D0C9F2B596AE16C75574BFD669B21FCC980B898
Authority key identifier: 01:35:D1:CB:DF:85:0A:31:2C:EB:5E:32:03:79:EB:81:64:B7:FA:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0135D1CBDF850A312CEB5E320379EB8164B7FAA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa
Signing time:             Thu 23 May 2024 16:16:36 +0000
ROA not before:           Thu 23 May 2024 16:11:36 +0000
ROA not after:            Thu 22 May 2025 16:16:36 +0000
asID:                     269526
IP address blocks:        2804:65fc::/32 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0c:9f:2b:59:6a:e1:6c:75:57:4b:fd:66:9b:21:fc:c9:80:b8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0135D1CBDF850A312CEB5E320379EB8164B7FAA1
        Validity
            Not Before: May 23 16:11:36 2024 GMT
            Not After : May 22 16:16:36 2025 GMT
        Subject: CN=416F2B5D2F9AF85D9E618E706D825145779142C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bf:ab:10:df:44:0f:99:10:6f:0c:54:15:c8:
                    2d:b6:ec:4a:75:b9:c6:16:aa:1f:0b:08:e6:7b:09:
                    28:9c:af:87:2b:11:d9:9d:8e:68:6c:cc:58:85:92:
                    0a:bc:72:d5:35:d0:9d:d1:a6:eb:7f:9e:24:37:a2:
                    29:7c:aa:b6:4d:2d:6e:50:6b:ad:09:2d:49:2d:f7:
                    43:8c:4f:16:b6:a0:54:8c:b3:46:b7:8b:91:03:84:
                    96:96:19:2c:9e:0e:df:4c:ff:b8:4e:cd:b9:fb:d6:
                    57:57:5c:d2:66:48:af:8c:92:36:93:8f:0d:94:20:
                    29:ff:41:24:a9:3a:61:f7:34:75:f1:2b:3b:37:9e:
                    ab:20:82:a4:b9:67:06:54:a7:09:b0:3a:50:fd:ec:
                    ea:c2:74:8f:cd:7d:66:21:45:7d:9b:07:3d:06:9e:
                    be:1a:50:76:81:a4:82:74:b8:70:e2:4f:24:76:bf:
                    fd:fa:fa:8c:2e:cc:2c:ae:3e:f3:b3:9b:02:e7:fe:
                    07:78:d5:be:e0:b8:07:9a:f4:e4:f9:4a:66:98:0c:
                    5b:20:52:12:b6:c3:e8:5a:76:67:3a:18:4c:ab:2e:
                    41:ae:79:72:78:ee:67:c5:68:87:be:67:2e:71:c5:
                    ab:2f:91:9a:49:81:54:0d:8e:3e:8f:03:cd:73:75:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6F:2B:5D:2F:9A:F8:5D:9E:61:8E:70:6D:82:51:45:77:91:42:C4
            X509v3 Authority Key Identifier:
                keyid:01:35:D1:CB:DF:85:0A:31:2C:EB:5E:32:03:79:EB:81:64:B7:FA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/0135D1CBDF850A312CEB5E320379EB8164B7FAA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0135D1CBDF850A312CEB5E320379EB8164B7FAA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:85:54:11:2e:de:ae:0a:89:47:2e:81:fc:dc:57:9b:19:83:
         f8:f9:fe:c4:bd:cb:53:e7:ce:e1:c0:02:c5:23:fa:d2:73:15:
         6b:cd:bd:7c:eb:70:4a:c5:e1:0a:14:0d:95:65:40:4a:8f:3f:
         1b:ca:d5:f2:e1:b3:c1:0e:1b:c1:e4:77:1a:2a:c5:86:79:5b:
         3f:cc:14:84:30:d4:07:59:e9:4c:ff:fc:35:d0:29:34:2b:4d:
         c0:0a:e6:24:56:b0:53:74:a0:80:7b:c1:20:7e:f4:3d:ee:a0:
         c1:41:90:56:94:83:94:f2:d3:5d:1e:fd:3a:3b:ff:c3:da:c2:
         b6:68:5f:ed:28:0a:1f:dd:10:10:52:9e:0f:3d:0d:06:eb:6c:
         df:1c:04:57:1d:34:2a:7b:0d:4a:ad:03:05:62:21:05:01:96:
         59:4d:47:cc:92:25:d6:ea:c5:29:2b:e6:8e:aa:fb:08:72:24:
         4f:52:8e:e7:d3:81:39:7e:0c:ed:89:f3:ee:ad:2c:46:16:af:
         3d:a9:8f:07:8b:86:2c:85:87:74:22:ec:98:fd:d5:53:4a:08:
         f9:d4:52:3d:c1:ce:2c:24:1f:e5:59:1f:8f:d4:b8:f0:8d:83:
         73:71:7f:73:1e:fd:62:86:5b:6c:48:38:54:71:1b:f1:7f:b3:
         e5:48:48:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 09:24:06 2024 by rpki-client on console-ams.rpki-client.org