Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/323830343a346336383a3a2f33322d3332203d3e20323637333639.roa
File:                     323830343a346336383a3a2f33322d3332203d3e20323637333639.roa (raw, json)
Hash identifier:          RZtKl7PVYMMNJnpQoLiB5OumDrGpU8wIRsDODl2OgXs=
Subject key identifier:   FE:74:A3:F0:76:CB:D7:D8:66:FE:64:CC:17:A0:E4:83:D9:E1:F2:A1
Certificate issuer:       /CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
Certificate serial:       203D5B608E852B329F567112CF16F1509DA3E3EB
Authority key identifier: CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/323830343a346336383a3a2f33322d3332203d3e20323637333639.roa
Signing time:             Thu 04 Apr 2024 15:26:06 +0000
ROA not before:           Thu 04 Apr 2024 15:21:06 +0000
ROA not after:            Thu 03 Apr 2025 15:26:06 +0000
asID:                     267369
IP address blocks:        2804:4c68::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3d:5b:60:8e:85:2b:32:9f:56:71:12:cf:16:f1:50:9d:a3:e3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
        Validity
            Not Before: Apr  4 15:21:06 2024 GMT
            Not After : Apr  3 15:26:06 2025 GMT
        Subject: CN=FE74A3F076CBD7D866FE64CC17A0E483D9E1F2A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:58:59:14:e2:39:fd:4d:9b:2a:fc:60:7c:43:
                    55:33:eb:34:38:f1:4e:42:5d:d6:1f:ce:98:12:86:
                    3b:28:c1:0a:88:23:67:f2:91:58:6b:62:02:a6:d5:
                    90:41:8b:f2:f8:80:46:c7:16:ca:8e:df:71:8b:ae:
                    ab:33:f5:02:60:8c:68:08:c5:42:3a:c2:41:20:72:
                    ed:e6:99:26:03:3e:aa:4d:c8:f9:ab:a7:cf:eb:d0:
                    98:4e:f6:ca:b1:0c:a0:fb:a0:d1:3b:5f:f9:97:8e:
                    2b:e6:87:14:f2:08:ae:a4:dc:29:2c:4b:fa:91:59:
                    8b:3e:1c:a7:76:84:47:ed:55:bd:a0:d0:9c:d6:09:
                    15:b5:ac:1a:85:2c:92:e5:79:9e:41:c2:65:21:1a:
                    f6:32:31:b6:7f:64:52:a7:ab:55:cc:6d:70:da:83:
                    13:64:b5:e0:c4:e6:79:30:a3:4f:5e:5f:73:d9:f6:
                    fd:28:57:e2:a2:87:b5:1d:78:03:69:a3:2f:37:bc:
                    16:6e:95:40:1a:08:7d:71:84:cd:ad:b5:45:9e:33:
                    dd:e7:15:0d:c1:cb:4b:f0:70:70:d5:74:92:f2:a1:
                    c2:d2:68:3b:88:5b:48:71:6c:65:15:e4:b8:24:15:
                    52:0d:93:de:3f:68:95:9f:93:c9:53:2b:9c:0f:2e:
                    dd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:74:A3:F0:76:CB:D7:D8:66:FE:64:CC:17:A0:E4:83:D9:E1:F2:A1
            X509v3 Authority Key Identifier:
                keyid:CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/323830343a346336383a3a2f33322d3332203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c68::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:3a:31:10:03:28:b9:7e:a0:45:a4:7c:a3:88:1a:40:54:88:
         11:e3:8f:7f:37:b7:63:78:fa:90:ba:8d:99:43:ec:71:c5:63:
         37:48:37:f2:01:8f:74:f9:af:ff:56:3f:be:f6:f4:b1:e4:0e:
         98:da:d9:8a:78:f2:b3:8c:4c:40:1f:54:4f:ba:e4:aa:20:d4:
         1c:90:14:2d:d1:22:2f:7c:6b:77:53:91:f0:7b:38:7f:08:9c:
         60:ea:4d:c9:9a:d4:c7:e8:07:b6:35:1f:43:f4:fe:fa:ac:8d:
         dc:a0:0a:5c:40:8e:f2:35:7c:56:24:9c:16:61:b1:41:19:c0:
         a9:79:19:9a:fc:af:33:b7:09:dd:bf:38:07:bb:10:db:7c:77:
         d5:77:06:0e:48:59:18:d6:50:6d:90:5b:18:b9:12:37:2e:37:
         4a:d1:29:5b:42:cc:52:5a:51:48:8e:c1:7e:0a:d3:a4:7a:2c:
         fe:7d:b5:75:31:f8:4a:2d:6c:23:b5:d3:15:90:20:45:c1:cb:
         8f:b9:2c:9b:6f:28:d2:fa:16:7a:39:15:a6:7f:ea:9d:f7:71:
         ac:1b:72:68:56:13:83:76:c5:2a:7a:67:8d:f9:59:dd:a0:a8:
         65:09:37:71:63:d9:6b:91:25:86:35:88:c4:dd:7b:9b:aa:eb:
         53:d7:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:58:43 2024 by rpki-client on console-ams.rpki-client.org