Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a633030303a3a2f33342d3334203d3e20323634353030.roa
File:                     323830343a323039383a633030303a3a2f33342d3334203d3e20323634353030.roa (raw, json)
Hash identifier:          IvvM9/guPw5A/P6J6KgiRArFsfTgQAcDW8m6GakJTTA=
Subject key identifier:   23:F6:7B:60:81:7E:31:ED:C2:C8:9B:60:74:13:C9:FD:7D:06:82:98
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       565C92E9418E01E07AC6DF10F82395D0F63BF35B
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a633030303a3a2f33342d3334203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:41:04 +0000
ROA not before:           Tue 30 Jul 2024 17:36:04 +0000
ROA not after:            Tue 29 Jul 2025 17:41:04 +0000
asID:                     264500
IP address blocks:        2804:2098:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5c:92:e9:41:8e:01:e0:7a:c6:df:10:f8:23:95:d0:f6:3b:f3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:36:04 2024 GMT
            Not After : Jul 29 17:41:04 2025 GMT
        Subject: CN=23F67B60817E31EDC2C89B607413C9FD7D068298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:fe:53:10:2d:43:b8:8c:1d:32:fb:90:16:
                    7e:59:7a:a6:cd:06:bf:70:cd:ba:4e:8c:09:d7:d1:
                    e0:b8:ce:02:cd:e1:cb:2f:b2:7c:9a:66:2a:05:51:
                    e9:c9:a5:54:45:b4:38:97:16:ae:47:64:e4:7c:49:
                    eb:7d:67:f3:91:e3:b6:f0:52:72:80:2a:e6:ff:6d:
                    1e:01:83:b1:6c:1b:26:59:11:5b:a8:63:f6:2e:b2:
                    20:eb:e9:b1:54:95:8c:8e:ba:13:70:17:59:87:73:
                    12:74:88:63:b3:ab:71:d3:c4:bc:91:82:b7:cc:0d:
                    a8:d2:42:1c:89:95:6e:2e:ac:54:b3:3d:3c:32:b4:
                    81:d1:d2:df:0a:4e:69:e6:e8:3f:64:68:41:78:b0:
                    7b:e0:e6:85:b9:7e:a7:a3:29:ec:d4:31:ab:45:28:
                    22:cb:48:1a:8a:e9:75:b6:89:f2:a5:05:b9:b0:ba:
                    57:7d:18:a8:03:f9:34:e4:d6:b0:e9:33:de:67:d8:
                    c8:d7:42:47:bc:2a:98:3e:43:40:f7:63:da:87:0e:
                    c1:e6:90:ce:60:44:9a:6b:d0:1d:76:cd:5d:f7:77:
                    5d:5f:bd:60:d6:37:9f:9e:d5:ac:4c:f1:4c:e7:3e:
                    32:40:d1:f6:6f:91:de:d8:18:77:e8:03:23:63:aa:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F6:7B:60:81:7E:31:ED:C2:C8:9B:60:74:13:C9:FD:7D:06:82:98
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a633030303a3a2f33342d3334203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:1d:3f:bb:4b:a4:62:01:d0:6a:23:b6:3c:99:23:29:14:cc:
         75:fc:ed:4f:02:58:e9:06:17:ef:0d:41:18:7c:75:e3:40:c3:
         f6:fe:39:c3:ec:93:0a:02:f1:5b:cf:b2:04:07:8c:47:1e:fd:
         e1:17:97:8f:4d:78:42:a8:46:95:ac:e5:21:68:ee:8c:d5:1e:
         64:5b:4c:cb:a3:37:c4:d9:5f:a2:de:50:ae:95:bc:fc:67:70:
         61:46:d0:13:71:22:97:42:45:86:6a:7d:45:af:7c:fc:9f:cf:
         05:75:7f:63:53:73:ff:1b:db:69:d7:fd:14:f8:14:8a:96:cf:
         cd:83:7b:d4:40:f5:c0:ca:1d:67:ca:8c:96:9d:1e:9a:42:7d:
         e7:56:61:68:72:75:5d:c9:9b:a1:ed:d4:8c:c4:d6:4f:14:d2:
         9c:57:5b:75:54:3e:79:da:7f:3d:cc:86:51:f5:25:bb:31:81:
         a5:22:04:62:c4:9f:75:99:db:55:8f:f0:6c:a2:d0:df:a8:27:
         68:f1:83:f0:98:9c:9e:1c:3c:b0:73:fb:e3:92:d0:d2:0d:87:
         76:e7:f4:ac:d2:ca:43:01:78:bd:4e:fe:c5:55:f3:d3:df:65:
         5f:37:e7:99:0e:3a:a6:b1:79:d1:9f:8d:af:6e:a2:a5:55:70:
         07:89:c1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 23:53:52 2024 by rpki-client on console-fra.rpki-client.org