Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/323830343a343063303a3a2f33332d3333203d3e20323635393739.roa
File:                     323830343a343063303a3a2f33332d3333203d3e20323635393739.roa (raw, json)
Hash identifier:          7SP0J+UTowP8E9T0R/0EE7cvKE41ieZdoWSCBYF7Q1U=
Subject key identifier:   9D:D7:FD:E3:F3:B4:0C:CD:5D:C5:3B:36:8C:7C:03:CF:4B:6C:7F:CF
Certificate issuer:       /CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
Certificate serial:       6C9839EA1CECA182431891B912CC82E375DB818E
Authority key identifier: F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/323830343a343063303a3a2f33332d3333203d3e20323635393739.roa
Signing time:             Mon 06 May 2024 14:46:13 +0000
ROA not before:           Mon 06 May 2024 14:41:13 +0000
ROA not after:            Mon 05 May 2025 14:46:13 +0000
asID:                     265979
IP address blocks:        2804:40c0::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:98:39:ea:1c:ec:a1:82:43:18:91:b9:12:cc:82:e3:75:db:81:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
        Validity
            Not Before: May  6 14:41:13 2024 GMT
            Not After : May  5 14:46:13 2025 GMT
        Subject: CN=9DD7FDE3F3B40CCD5DC53B368C7C03CF4B6C7FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:ec:99:a9:d4:44:52:23:29:5e:74:de:b7:
                    03:73:20:5c:e1:e8:8a:df:3e:36:e2:7d:de:68:d8:
                    c2:c3:65:d2:99:2d:7e:2f:eb:53:d4:92:80:e8:69:
                    4a:e9:d0:68:00:0c:f6:37:f3:34:86:3f:f5:90:55:
                    df:b0:2d:fa:32:0e:57:43:dc:b0:6e:70:fd:d8:e7:
                    9d:ea:4d:c2:19:45:2f:a8:a5:38:82:9c:05:df:31:
                    bb:6f:9b:17:27:ca:97:6b:ca:bc:00:05:04:ca:12:
                    ea:d3:0a:c5:58:51:42:f3:bf:13:89:ff:8c:0a:c8:
                    05:15:1b:b6:89:3a:ec:6b:25:46:96:49:57:0c:b9:
                    58:8f:93:2e:cb:5e:29:c6:d1:5e:91:0f:9d:7f:78:
                    ac:f1:78:e1:35:30:93:c9:f7:f3:65:a6:13:65:da:
                    24:ca:16:af:cc:ef:4b:b8:2b:c1:5f:a6:a0:76:d9:
                    8a:37:f6:b1:e2:71:a3:95:ea:eb:32:4e:82:29:7b:
                    1c:60:b1:91:c4:35:ce:a4:6a:28:ab:1d:3a:bc:0e:
                    9c:e1:45:e0:9c:1d:34:55:39:04:08:39:a2:88:b3:
                    98:df:2f:e3:d2:b8:b8:e9:0d:e7:7d:f9:bd:30:fe:
                    76:29:48:6b:d3:8e:62:c4:fa:c2:b1:55:80:22:83:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D7:FD:E3:F3:B4:0C:CD:5D:C5:3B:36:8C:7C:03:CF:4B:6C:7F:CF
            X509v3 Authority Key Identifier:
                keyid:F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/323830343a343063303a3a2f33332d3333203d3e20323635393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40c0::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:e9:4c:59:ab:ab:2c:14:d3:1b:b6:57:ce:de:29:64:e6:3b:
         08:76:9f:d0:8e:80:b6:1d:7d:16:40:a3:d0:b6:72:a6:81:25:
         2b:d4:df:0a:90:c2:1e:80:74:b5:dc:73:cb:86:3d:53:12:18:
         bb:83:26:01:a2:23:cc:07:96:01:05:11:d6:4d:ef:98:4b:1c:
         de:fb:e2:b3:be:78:f1:00:e8:dd:49:d3:cd:8d:03:84:a4:3e:
         5e:b4:da:2a:c3:90:79:56:7f:3d:66:2c:e6:67:9e:2b:47:d1:
         1d:4a:a3:31:81:d7:1c:e5:35:96:bf:92:59:6b:6b:fe:67:88:
         71:24:da:ee:57:b8:b6:65:79:12:b5:d9:88:c3:22:20:89:c2:
         f4:a5:d8:c4:99:78:92:bd:f3:56:25:fd:d6:39:0f:43:9f:e5:
         ee:01:fd:26:d0:2d:50:fb:da:55:f6:59:6f:5a:2b:db:66:7d:
         b6:c8:e3:c9:90:18:33:45:36:bc:26:4e:03:f0:2b:6b:d0:cd:
         6b:b2:a1:61:d7:35:de:63:7a:5c:20:95:c8:4a:c5:05:35:57:
         30:e9:65:e9:d3:b7:88:c0:f2:c3:74:b1:b7:18:e7:f0:c0:d4:
         d2:71:98:f1:38:a0:43:50:e6:ef:d4:b2:37:c9:de:e4:6d:64:
         76:cf:c3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:32:24 2024 by rpki-client on console-fra.rpki-client.org