Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a383030303a3a2f33342d3334203d3e20323732353636.roa
File:                     323830343a383533633a383030303a3a2f33342d3334203d3e20323732353636.roa (raw, json)
Hash identifier:          qg3sSEJfgiYfrCw6+g0kAF9GzIeyP3qgxU/NjWCBH08=
Subject key identifier:   3C:D8:99:79:43:4E:EB:E4:55:2E:23:59:13:07:C7:E0:50:A4:97:B5
Certificate issuer:       /CN=20EE33C957E1A859D49A5E411C799465085E928F
Certificate serial:       4670DAB74AE64CACD0D199EF38A295509731BD92
Authority key identifier: 20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a383030303a3a2f33342d3334203d3e20323732353636.roa
Signing time:             Tue 23 Apr 2024 22:16:33 +0000
ROA not before:           Tue 23 Apr 2024 22:11:33 +0000
ROA not after:            Tue 22 Apr 2025 22:16:33 +0000
asID:                     272566
IP address blocks:        2804:853c:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:70:da:b7:4a:e6:4c:ac:d0:d1:99:ef:38:a2:95:50:97:31:bd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EE33C957E1A859D49A5E411C799465085E928F
        Validity
            Not Before: Apr 23 22:11:33 2024 GMT
            Not After : Apr 22 22:16:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:18:83:a2:0a:ba:f1:7b:93:4a:d4:70:ec:
                    f6:3a:40:38:9f:b1:86:c1:32:f4:11:0e:f7:22:1b:
                    a8:c4:40:6a:25:f7:f0:44:72:37:08:db:79:27:1a:
                    b6:a9:d7:39:b5:c2:ee:e8:3b:eb:56:3f:af:fb:69:
                    da:17:81:4d:7b:54:6a:e0:cd:21:fa:5b:7c:da:7f:
                    1c:d7:06:24:be:f3:89:1d:9b:54:ec:b2:5c:f3:b8:
                    d5:28:77:a1:1d:3d:9d:62:29:3f:27:e3:4c:e9:fc:
                    a0:c9:83:30:a4:9a:0e:15:4a:f6:4f:07:1e:59:09:
                    1f:c4:c9:74:7c:64:18:d9:66:58:a8:e6:73:e9:2e:
                    60:07:b8:15:c9:6f:04:bf:91:dd:dc:f6:74:2e:12:
                    49:98:63:1b:4a:67:ae:4d:73:d0:84:bb:3f:de:14:
                    36:1c:83:85:b6:01:d3:ac:c8:01:c9:be:62:03:66:
                    6a:4d:9e:1b:16:df:c1:99:0c:27:09:65:b2:5b:6f:
                    db:97:62:01:9b:cc:02:d2:4e:c4:71:8a:57:e2:92:
                    97:15:ea:6a:08:d3:5d:17:4d:72:1e:ad:3a:45:2e:
                    4c:65:f9:9c:aa:3d:1e:be:5e:d2:e0:0d:04:82:d5:
                    22:f6:c3:c3:fc:19:6c:30:78:4d:05:a5:7a:fa:48:
                    bc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D8:99:79:43:4E:EB:E4:55:2E:23:59:13:07:C7:E0:50:A4:97:B5
            X509v3 Authority Key Identifier:
                keyid:20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/20EE33C957E1A859D49A5E411C799465085E928F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a383030303a3a2f33342d3334203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:fc:3b:0f:26:be:be:01:84:b0:b4:e1:2c:c5:42:a2:2f:
         3c:d2:ba:c7:79:8c:c4:a7:dc:a6:84:77:f1:e6:ba:88:53:00:
         87:3c:d8:be:46:0f:de:8c:45:d7:00:53:22:ab:0e:a4:83:4e:
         45:08:4e:09:36:84:ad:db:6b:4c:f1:e1:9a:25:f8:5c:d7:10:
         a4:70:b9:c5:52:4f:95:9e:3f:c2:55:fc:a1:88:a7:95:e2:7a:
         7b:d7:06:e0:17:3e:52:fa:47:d1:a1:80:84:ce:8a:6d:18:f6:
         a6:31:a2:53:8c:79:72:b6:86:64:fc:6c:fc:b0:e7:cf:de:81:
         da:97:1e:3f:ef:9c:31:8e:5d:b3:47:bd:9a:b6:d5:93:3a:ec:
         c2:ce:60:a0:8b:4a:25:cf:b7:47:30:58:f0:db:e9:6b:dc:de:
         e3:5b:0c:92:b6:c1:f6:7c:22:12:ed:b5:f4:23:82:c8:61:0e:
         2c:3e:78:80:23:ef:27:d6:99:bc:ae:7c:13:6b:53:ea:05:2e:
         a3:c7:73:c2:05:ee:8a:2d:4f:20:3f:f1:eb:d0:a6:86:b0:19:
         ec:d3:f9:89:9f:3c:ae:a0:8e:0d:10:f1:1d:c2:c8:03:66:e2:
         3d:39:49:1c:5c:a8:46:1d:79:f8:83:84:55:02:8f:cf:3b:c3:
         a5:1f:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:59:08 2024 by rpki-client on console-fra.rpki-client.org