Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31383a3a2f34382d3438203d3e20323633353431.roa
File:                     323830343a313339383a31383a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier:          +OxVUZvdBubo2Kahw0wAHJe/9U4eFFr3tR72flQ7VC8=
Subject key identifier:   FF:39:DD:63:AD:DE:5E:28:A1:93:37:06:3D:8D:46:FB:28:50:9F:80
Certificate issuer:       /CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
Certificate serial:       41D2B81A84F6F7FB6DEAC0740162C87709D71BEC
Authority key identifier: AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31383a3a2f34382d3438203d3e20323633353431.roa
Signing time:             Tue 11 Jun 2024 18:08:09 +0000
ROA not before:           Tue 11 Jun 2024 18:03:09 +0000
ROA not after:            Tue 10 Jun 2025 18:08:09 +0000
asID:                     263541
IP address blocks:        2804:1398:18::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d2:b8:1a:84:f6:f7:fb:6d:ea:c0:74:01:62:c8:77:09:d7:1b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
        Validity
            Not Before: Jun 11 18:03:09 2024 GMT
            Not After : Jun 10 18:08:09 2025 GMT
        Subject: CN=FF39DD63ADDE5E28A19337063D8D46FB28509F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:00:0c:3f:08:64:83:92:45:61:e3:26:a9:
                    14:24:de:35:c2:99:10:fd:c7:3f:af:e2:ac:5e:0c:
                    56:81:2e:2f:52:9d:04:2e:88:a0:f3:04:f9:6a:22:
                    da:02:f5:d9:e1:dc:51:0d:55:15:fd:66:25:14:a7:
                    92:3a:4b:41:e6:de:92:71:4a:51:19:5f:04:23:98:
                    29:d7:ef:96:c7:2e:ac:fe:92:25:1f:98:c7:3b:b4:
                    db:c6:8c:cd:d4:21:7e:90:78:25:8e:1f:89:dc:af:
                    ea:33:82:72:02:57:0f:96:dc:c3:37:6f:0e:d2:b2:
                    28:45:35:70:2f:d5:31:41:6f:83:a7:25:4c:a9:7a:
                    d5:71:f4:5a:65:25:9f:be:e6:79:34:75:ea:ec:57:
                    59:f3:d1:55:75:5e:72:7c:19:b4:82:7b:f7:c9:4e:
                    47:ba:a5:f9:66:e5:c4:80:13:f4:1f:7a:10:99:bb:
                    e5:3f:66:c0:5e:b1:51:c7:c4:03:8e:3c:3b:eb:07:
                    34:cf:87:a9:0c:4f:05:b2:a6:70:9a:9f:48:10:91:
                    cf:20:78:c8:2d:bf:47:63:2c:eb:ca:b7:5b:6b:44:
                    50:c8:dd:de:e9:9e:0f:58:21:cb:94:34:49:83:26:
                    40:9f:a3:cd:6a:d3:8a:e2:78:5d:01:9f:58:36:77:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:39:DD:63:AD:DE:5E:28:A1:93:37:06:3D:8D:46:FB:28:50:9F:80
            X509v3 Authority Key Identifier:
                keyid:AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31383a3a2f34382d3438203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:57:11:98:3d:72:ce:e1:02:db:cf:fa:d0:2e:8c:75:e4:ce:
         d4:1a:62:cf:1e:76:1e:46:67:7d:2a:18:38:5b:70:0e:8c:5c:
         c3:99:17:c3:18:1e:0e:a0:c1:14:1e:84:8d:f1:44:23:e6:56:
         de:10:01:18:dc:ad:78:f1:c5:14:63:4b:dd:84:1a:10:69:a6:
         57:48:92:c6:b3:dc:8b:8b:7b:e2:70:e0:9a:b0:cd:b7:6a:5e:
         9c:99:bc:27:b0:f2:05:31:c4:1b:88:4d:86:b4:1a:13:e8:83:
         95:26:a1:e1:1f:5a:c9:a8:74:6b:c5:c4:09:b7:63:e2:c4:78:
         c4:fe:75:bb:89:ac:27:d2:b6:7f:ae:41:d7:88:68:71:c5:ce:
         e4:b1:e8:8a:0c:d9:f1:57:52:f5:6e:b7:27:f4:1d:71:10:d9:
         69:4d:75:f7:36:75:c7:71:60:c3:21:8e:b1:eb:83:7d:63:31:
         bd:67:5a:e3:17:bf:7a:0a:1b:43:19:b4:13:1c:84:bf:cf:90:
         40:05:96:b0:55:62:0f:ad:00:c0:57:88:90:e8:b9:45:1e:46:
         d4:cf:2e:50:d5:ca:ea:c7:af:81:22:18:a2:d0:54:e2:b5:be:
         07:c0:e7:92:2e:21:38:89:8f:82:e1:42:5b:ea:6d:6c:ec:7f:
         fe:2a:24:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 19:38:55 2024 by rpki-client on console-fra.rpki-client.org