Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa
File:                     323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa (raw, json)
Hash identifier:          YaHuAGUXV3TbhJouoQ16eAQ0lIXTQXcuwCdpVdhrCo4=
Subject key identifier:   66:FA:08:2E:4E:AA:0A:E7:0B:A7:AB:CA:10:C6:A2:75:49:E6:04:08
Certificate issuer:       /CN=2B36FD67FD146F6ABC421C609744891EA7512F17
Certificate serial:       5FC2F65539805DF52BEF85F677B5E126B2E6032B
Authority key identifier: 2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa
Signing time:             Thu 02 May 2024 01:40:31 +0000
ROA not before:           Thu 02 May 2024 01:35:31 +0000
ROA not after:            Thu 01 May 2025 01:40:31 +0000
asID:                     265500
IP address blocks:        2804:3518:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c2:f6:55:39:80:5d:f5:2b:ef:85:f6:77:b5:e1:26:b2:e6:03:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B36FD67FD146F6ABC421C609744891EA7512F17
        Validity
            Not Before: May  2 01:35:31 2024 GMT
            Not After : May  1 01:40:31 2025 GMT
        Subject: CN=66FA082E4EAA0AE70BA7ABCA10C6A27549E60408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:15:62:c2:1c:74:e0:15:f7:c2:1d:06:aa:
                    64:da:f7:81:a3:00:5a:22:57:df:b1:62:a8:b2:4d:
                    c2:7b:66:75:4d:4b:6d:fe:b2:ef:eb:bf:04:77:bb:
                    f1:d8:82:48:df:81:cf:2e:f8:8b:57:52:7d:58:f6:
                    8e:fa:48:89:5e:2a:e4:e2:71:fa:5f:ba:6f:8e:7f:
                    1e:d4:06:8c:8b:d4:0b:fe:ce:21:a5:75:7d:04:51:
                    a5:df:6f:38:6f:ed:b9:84:1f:23:de:90:6b:e4:31:
                    42:4f:3c:7a:c6:32:01:51:81:6e:6d:13:c1:4a:06:
                    07:82:b7:6b:50:75:13:e8:6d:b3:36:24:1c:1b:8f:
                    5b:a6:ac:ac:39:fa:c0:36:22:c6:e2:71:5b:e6:ea:
                    e2:85:17:df:68:5e:f2:dd:89:f4:22:d9:be:e8:b3:
                    48:9a:9e:fa:52:de:d7:b7:47:e8:c1:4c:81:a0:f7:
                    9b:e9:8a:14:d5:5a:cb:2b:35:38:ca:e7:57:9e:3e:
                    20:07:bb:1b:06:5c:01:76:27:d3:3b:1f:74:0a:06:
                    e7:76:cf:de:cc:ca:33:a7:0a:28:ef:96:a1:ba:aa:
                    a8:8d:a6:4c:50:16:de:b7:92:b0:ce:d3:ed:06:cb:
                    54:9d:02:6e:49:18:4e:1d:dc:a7:11:ac:90:45:42:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FA:08:2E:4E:AA:0A:E7:0B:A7:AB:CA:10:C6:A2:75:49:E6:04:08
            X509v3 Authority Key Identifier:
                keyid:2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/2B36FD67FD146F6ABC421C609744891EA7512F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:9b:6b:f9:ac:94:d0:17:46:99:32:f2:98:71:7b:55:54:f7:
         1d:42:3c:51:73:03:29:4c:01:ad:68:2d:d4:b4:88:e1:c9:35:
         78:c0:0c:65:95:9a:9a:47:9d:06:81:3f:1b:25:b5:d7:9b:4b:
         f8:44:c9:dd:91:c0:71:99:07:bd:77:7f:00:0d:2f:69:69:0b:
         3a:7c:97:9f:e2:db:28:c1:31:8f:b4:ba:5a:47:00:8b:7c:5b:
         a3:7d:a5:35:6b:e4:2d:5d:96:11:f7:6d:08:ac:11:f3:fe:ac:
         85:ff:e9:b6:d3:86:da:e5:90:f9:13:9f:5e:d4:da:29:c1:cf:
         19:21:a2:24:1e:1b:c0:50:30:b0:56:a5:ef:8c:64:46:d7:87:
         be:c5:78:58:d1:02:5f:c9:86:7e:ce:6c:17:70:77:c8:de:76:
         11:5f:5b:02:e1:69:b7:22:12:38:73:7b:f0:bb:63:33:7c:ca:
         5f:99:79:ea:de:dc:39:ba:6f:39:14:e6:40:7a:2e:dc:7d:ce:
         70:19:c3:39:69:10:3f:7e:ee:a9:80:16:5d:3f:e1:c1:e5:0e:
         71:44:ea:9f:d3:99:9c:cd:0c:18:de:89:ac:3f:0f:38:56:b6:
         50:54:c2:98:ee:ff:b5:3e:2a:cd:45:3b:af:a8:11:8f:99:2a:
         7e:ec:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 00:36:47 2024 by rpki-client on console-ams.rpki-client.org