Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3a2f33332d3333203d3e20323638353936.roa
File:                     323830343a353361303a3a2f33332d3333203d3e20323638353936.roa (raw, json)
Hash identifier:          wh3ebDIlh4T76FK8NUhtoJJF9NJcb9IezFIasu3QF0Q=
Subject key identifier:   5A:67:06:68:9F:59:9A:20:88:6E:9D:10:26:82:11:42:0A:F4:BB:8C
Certificate issuer:       /CN=4D75809E071D4433F365FE41E48F4C2BED13B507
Certificate serial:       6A301F4743BA78441C74F2686D8D589CF6C1AF10
Authority key identifier: 4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3a2f33332d3333203d3e20323638353936.roa
Signing time:             Wed 14 Aug 2024 15:24:37 +0000
ROA not before:           Wed 14 Aug 2024 15:19:37 +0000
ROA not after:            Wed 13 Aug 2025 15:24:37 +0000
asID:                     268596
IP address blocks:        2804:53a0::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:30:1f:47:43:ba:78:44:1c:74:f2:68:6d:8d:58:9c:f6:c1:af:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D75809E071D4433F365FE41E48F4C2BED13B507
        Validity
            Not Before: Aug 14 15:19:37 2024 GMT
            Not After : Aug 13 15:24:37 2025 GMT
        Subject: CN=5A6706689F599A20886E9D10268211420AF4BB8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b1:06:e4:18:9b:f5:bc:10:a8:f2:c2:ec:2a:
                    3b:36:6e:8f:f1:9f:19:77:58:a5:c1:44:83:01:2c:
                    e7:ce:0d:f2:dc:9c:f2:e6:23:c6:6e:55:8b:7c:54:
                    12:db:71:8e:f7:8b:3b:fe:ca:b1:9d:c4:9c:a7:84:
                    ea:9a:4a:a2:77:4a:26:d5:ee:19:75:df:32:be:ff:
                    35:e0:14:5f:87:fe:fe:a5:08:a8:7a:be:25:6f:99:
                    0e:54:34:d4:a9:17:e8:46:df:89:b3:ed:8a:1b:bb:
                    c0:a6:3e:aa:ca:2a:5a:21:21:5b:7f:9b:c4:94:98:
                    c2:31:f9:c9:7c:a1:b4:74:4f:41:c5:5b:98:18:dc:
                    e3:98:a0:60:e3:29:ef:af:30:7e:1e:a7:b4:e2:53:
                    a0:c4:54:f1:7d:49:ef:5a:59:ae:1e:c5:29:1a:e9:
                    eb:41:6b:5e:13:1b:27:68:04:a6:d5:13:28:80:0d:
                    4b:76:d9:3c:15:a0:ec:37:8c:02:d6:90:41:40:6a:
                    18:31:9d:99:9b:48:b9:32:c3:11:ff:6b:5a:cd:1f:
                    cd:6b:0d:78:5e:9f:2d:64:b7:7f:25:24:a9:7b:51:
                    1d:a2:7f:29:bd:3a:4f:81:d5:23:18:0c:b2:70:9e:
                    7f:25:11:cd:df:8c:e9:2b:ea:6f:13:a1:df:db:b9:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:67:06:68:9F:59:9A:20:88:6E:9D:10:26:82:11:42:0A:F4:BB:8C
            X509v3 Authority Key Identifier:
                keyid:4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/4D75809E071D4433F365FE41E48F4C2BED13B507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3a2f33332d3333203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53a0::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:60:fa:41:bc:cf:8d:ac:b3:5b:44:b9:61:e6:a1:87:3a:51:
         55:57:3e:c8:16:1c:5f:75:ad:20:65:39:48:e6:2e:a0:90:e1:
         92:3e:c7:5f:5e:b0:03:3b:41:80:06:3c:ed:52:2c:5c:3e:42:
         c7:ff:ec:20:eb:bc:e5:3e:90:48:98:f4:06:b8:9d:f2:e7:ce:
         3c:29:ea:bd:c5:25:91:63:0e:5f:e3:c5:d9:1b:ce:f0:04:46:
         4b:9e:ab:74:98:65:ea:0b:81:13:41:21:38:29:a6:90:92:d8:
         e8:82:76:f4:8e:43:26:8a:c3:ff:8f:a0:86:46:ae:3d:cb:c9:
         c8:10:89:4e:24:52:78:3e:db:70:d0:ba:e2:69:34:5b:82:31:
         96:27:ed:6d:4b:27:d2:70:71:95:54:ed:2f:b5:df:b5:0b:c3:
         c4:48:5f:53:3b:41:2a:48:7d:5f:52:eb:d2:c5:f7:e2:19:4a:
         ec:af:55:3b:03:e4:7b:52:5b:e7:15:90:f3:03:ac:51:e6:cb:
         1e:de:42:af:ad:f7:45:d3:99:37:e1:44:17:ed:d4:6d:74:c7:
         a0:f6:cf:83:66:c0:68:48:e8:87:4f:06:cc:13:9c:6a:f0:77:
         ee:88:1d:49:fb:2b:95:8a:38:c3:4d:3d:64:e4:87:86:09:5f:
         99:00:1d:bb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUajAfR0O6eEQcdPJobY1YnPbBrxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ3NTgwOUUwNzFENDQzM0YzNjVGRTQxRTQ4RjRDMkJF
RDEzQjUwNzAeFw0yNDA4MTQxNTE5MzdaFw0yNTA4MTMxNTI0MzdaMDMxMTAvBgNV
BAMTKDVBNjcwNjY4OUY1OTlBMjA4ODZFOUQxMDI2ODIxMTQyMEFGNEJCOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosQbkGJv1vBCo8sLsKjs2bo/x
nxl3WKXBRIMBLOfODfLcnPLmI8ZuVYt8VBLbcY73izv+yrGdxJynhOqaSqJ3SibV
7hl13zK+/zXgFF+H/v6lCKh6viVvmQ5UNNSpF+hG34mz7Yobu8CmPqrKKlohIVt/
m8SUmMIx+cl8obR0T0HFW5gY3OOYoGDjKe+vMH4ep7TiU6DEVPF9Se9aWa4exSka
6etBa14TGydoBKbVEyiADUt22TwVoOw3jALWkEFAahgxnZmbSLkywxH/a1rNH81r
DXheny1kt38lJKl7UR2ifym9Ok+B1SMYDLJwnn8lEc3fjOkr6m8Tod/buTbfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWmcGaJ9ZmiCIbp0QJoIRQgr0u4wwHwYDVR0j
BBgwFoAUTXWAngcdRDPzZf5B5I9MK+0TtQcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtzQ1N0b3phdFlURXNNNGEzQkNGRGZnWnJZQ3o3MjFyZUt2U29CSmdl
eWsvMC80RDc1ODA5RTA3MUQ0NDMzRjM2NUZFNDFFNDhGNEMyQkVEMTNCNTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRENzU4MDlFMDcxRDQ0MzNG
MzY1RkU0MUU0OEY0QzJCRUQxM0I1MDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rrc0NTdG96YXRZVEVzTTRhM0JDRkRmZ1pyWUN6NzIxcmVLdlNvQkpnZXlrLzAv
MzIzODMwMzQzYTM1MzM2MTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARToAAwDQYJKoZIhvcNAQELBQADggEBAChg+kG8
z42ss1tEuWHmoYc6UVVXPsgWHF91rSBlOUjmLqCQ4ZI+x19esAM7QYAGPO1SLFw+
Qsf/7CDrvOU+kEiY9Aa4nfLnzjwp6r3FJZFjDl/jxdkbzvAERkueq3SYZeoLgRNB
ITgpppCS2OiCdvSOQyaKw/+PoIZGrj3LycgQiU4kUng+23DQuuJpNFuCMZYn7W1L
J9JwcZVU7S+137ULw8RIX1M7QSpIfV9S69LF9+IZSuyvVTsD5HtSW+cVkPMDrFHm
yx7eQq+t90XTmTfhRBft1G10x6D2z4NmwGhI6IdPBswTnGrwd+6IHUn7K5WKOMNN
PWTkh4YJX5kAHbs=
-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:33 2024 by rpki-client on console-fra.rpki-client.org