Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a323030303a3a2f33352d3335203d3e20323634353030.roa
File:                     323830343a323039383a323030303a3a2f33352d3335203d3e20323634353030.roa (raw, json)
Hash identifier:          zpyLWAxtuwu67Bjyfwk4qio7PDfjCFQUjnDeDSa53gw=
Subject key identifier:   D0:6F:F3:55:C6:3D:4A:1E:F8:FF:C2:24:45:86:16:E1:34:10:A7:20
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       458D5812B897B6BE0B35529E5ECA84B70BC209E5
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a323030303a3a2f33352d3335203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:48:49 +0000
ROA not before:           Tue 30 Jul 2024 17:43:49 +0000
ROA not after:            Tue 29 Jul 2025 17:48:49 +0000
asID:                     264500
IP address blocks:        2804:2098:2000::/35 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8d:58:12:b8:97:b6:be:0b:35:52:9e:5e:ca:84:b7:0b:c2:09:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:43:49 2024 GMT
            Not After : Jul 29 17:48:49 2025 GMT
        Subject: CN=D06FF355C63D4A1EF8FFC224458616E13410A720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:e8:00:2d:4f:e4:8a:f3:77:d5:7c:fe:20:
                    4e:83:3f:c4:d4:26:d8:82:3a:d3:45:92:ce:8a:d8:
                    1c:05:8c:6c:57:80:30:a6:bd:58:26:18:2a:88:28:
                    5b:17:20:2d:61:3c:ce:64:a4:71:5f:f5:c0:47:92:
                    53:19:ec:23:ba:b1:e3:28:4c:42:42:dd:0d:6a:36:
                    ca:db:7c:fd:9d:c2:6f:cf:b5:61:4f:cb:16:95:55:
                    3a:37:52:0a:27:4a:dd:cc:34:b6:ba:02:47:6a:d2:
                    fb:d6:c9:e4:3e:8e:62:d7:1b:c2:9c:6c:58:39:0a:
                    52:4d:23:57:86:d9:2b:6a:fc:a5:0c:8e:a1:4f:ce:
                    0c:bb:f7:e9:e4:c7:8d:2d:fa:f4:18:25:17:be:51:
                    a0:17:9e:b7:79:b2:d4:63:a0:b1:58:9b:90:9b:3f:
                    3d:88:d2:8e:9e:eb:5c:42:d7:65:58:59:23:8f:7d:
                    9e:e8:26:1c:8e:c7:3a:02:1f:22:04:08:1a:99:db:
                    ae:b7:bc:a1:db:8a:c1:21:83:c0:37:b8:95:61:56:
                    99:13:ad:90:0d:36:6f:4f:07:0e:cd:07:2f:f4:fb:
                    6b:a9:03:75:9c:bf:d0:07:88:8d:9f:97:1e:82:e8:
                    21:ea:f4:d4:d5:f3:00:c7:67:6d:d1:bd:d1:f6:f8:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6F:F3:55:C6:3D:4A:1E:F8:FF:C2:24:45:86:16:E1:34:10:A7:20
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a323030303a3a2f33352d3335203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5a:4a:6f:c4:b7:55:94:02:22:31:23:48:97:14:53:bc:68:ed:
         7f:e6:88:cb:d0:97:2a:bd:9f:0f:35:44:13:16:1e:8b:5c:5c:
         b6:31:06:93:10:de:fc:8b:89:c7:11:39:84:05:7c:ca:85:64:
         22:b6:3f:fa:cb:87:32:2d:86:3f:d4:b8:d9:e2:ae:f3:32:eb:
         74:16:e5:d8:60:f2:97:39:19:b6:92:8c:d4:b0:47:71:01:fe:
         dd:bb:1c:31:df:11:f4:88:2e:77:37:70:60:56:4b:99:5b:95:
         29:82:2a:43:dd:ca:00:26:2a:f6:82:d0:eb:76:68:81:00:71:
         4a:0d:00:ad:ea:0e:22:cc:b5:d8:12:db:4e:ae:50:d0:42:2f:
         d0:e7:e6:bf:2a:45:77:70:60:69:9a:c6:1e:4d:70:a6:c3:ed:
         67:65:75:80:62:0a:18:b4:0e:e4:1b:10:96:e4:88:65:fb:ab:
         6e:e7:53:67:98:4c:8d:ce:98:0d:5f:b8:cd:67:3d:14:de:d5:
         4a:18:3b:4c:a8:03:f1:61:91:e7:d4:45:76:85:51:de:3b:a7:
         f9:74:ec:90:9b:e0:d8:5d:2e:18:4e:a7:ab:56:a4:a6:bb:f2:
         3a:b3:f6:cc:5c:d8:cb:0b:bc:4f:77:48:28:d1:6c:f5:83:7e:
         90:7d:fa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 23:53:52 2024 by rpki-client on console-fra.rpki-client.org