Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/323830343a343535633a383030303a3a2f33332d3333203d3e20323636393231.roa
File:                     323830343a343535633a383030303a3a2f33332d3333203d3e20323636393231.roa (raw, json)
Hash identifier:          sWuBCJkdCPhcXdW2z7Kik+I5mdUlYu3ViXmNa81+M/w=
Subject key identifier:   9B:88:0F:AC:0D:2B:4F:3D:A1:22:7D:E4:AF:69:EB:60:C3:AF:DB:28
Certificate issuer:       /CN=5682495E51D353D705DB42C2671D958F655DB83F
Certificate serial:       31265B86B65CC0AEB1A92974371DA66AC0F24C96
Authority key identifier: 56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/323830343a343535633a383030303a3a2f33332d3333203d3e20323636393231.roa
Signing time:             Tue 09 Jul 2024 14:15:29 +0000
ROA not before:           Tue 09 Jul 2024 14:10:29 +0000
ROA not after:            Tue 08 Jul 2025 14:15:29 +0000
asID:                     266921
IP address blocks:        2804:455c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:26:5b:86:b6:5c:c0:ae:b1:a9:29:74:37:1d:a6:6a:c0:f2:4c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682495E51D353D705DB42C2671D958F655DB83F
        Validity
            Not Before: Jul  9 14:10:29 2024 GMT
            Not After : Jul  8 14:15:29 2025 GMT
        Subject: CN=9B880FAC0D2B4F3DA1227DE4AF69EB60C3AFDB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:ba:af:dc:b7:c3:8c:40:a2:7e:db:cc:dc:
                    d5:b1:19:7d:b1:bf:05:c4:a3:6f:44:11:ea:52:cb:
                    39:99:7c:08:8e:1c:12:27:78:10:6c:d4:fd:16:ae:
                    6f:b0:b9:da:38:f4:d9:7c:9e:8e:cf:46:86:62:f3:
                    3a:73:cd:0c:14:73:1e:fb:94:80:f3:a1:c5:b6:3b:
                    ba:9a:15:15:f2:fb:b0:9f:ba:3d:2b:63:74:4e:87:
                    df:ac:7f:de:3c:00:1f:fa:63:06:3b:af:bd:54:b6:
                    94:0e:23:1e:e9:2b:3d:4e:ab:cc:d6:fe:cd:89:1c:
                    54:e8:58:d6:3c:c6:81:d5:df:b3:de:ed:aa:fb:40:
                    1d:e1:69:d6:37:ef:2b:dc:f3:bd:98:5d:17:0d:ef:
                    8e:0d:59:e8:2d:98:07:9e:80:2c:06:5c:31:56:a8:
                    3d:1b:62:97:4b:c6:14:94:1f:0a:98:58:c0:ee:5a:
                    d4:d9:ef:ff:0d:04:db:8a:fe:9a:e4:b2:61:16:8f:
                    23:cd:31:51:cf:22:79:02:e2:cd:b6:98:09:b6:e4:
                    e3:59:56:4e:9d:0b:01:7c:18:ab:37:cc:92:87:c9:
                    46:2e:58:93:1b:91:ca:cd:b5:36:a1:a0:02:6e:a4:
                    ac:28:4e:87:f8:28:01:19:02:78:7c:f1:31:b8:8b:
                    17:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:88:0F:AC:0D:2B:4F:3D:A1:22:7D:E4:AF:69:EB:60:C3:AF:DB:28
            X509v3 Authority Key Identifier:
                keyid:56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/5682495E51D353D705DB42C2671D958F655DB83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/323830343a343535633a383030303a3a2f33332d3333203d3e20323636393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:455c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6f:94:a1:38:9d:65:71:48:45:43:de:d4:61:92:e1:ae:a5:db:
         52:0d:0f:0a:e3:d5:5a:b9:2b:19:1e:b4:36:47:46:ff:a3:25:
         3a:a9:de:6b:85:6c:45:c6:af:b3:c6:fc:77:3e:d8:cc:f4:fc:
         05:f6:0e:61:f4:da:22:70:f2:33:93:1d:72:4e:3e:80:33:fc:
         dd:46:e8:c4:a4:49:a3:1b:35:2d:19:41:ae:22:4b:f4:5e:36:
         ad:58:28:02:60:e2:a9:20:44:6e:48:46:0c:7f:86:1b:8f:41:
         ce:89:f9:11:9b:e3:8d:06:f0:56:55:20:c2:2c:af:c0:c6:1a:
         f5:94:bc:02:e1:5d:29:62:b9:38:b1:9a:20:63:e6:bf:d8:12:
         bb:1c:f0:87:b0:7f:23:64:3b:9d:c8:10:99:c1:82:17:21:bb:
         82:9f:40:c1:9a:b3:96:9e:13:0d:76:3b:4f:9e:f3:d6:c7:4f:
         cd:44:77:6f:9d:64:b0:fe:ac:74:da:e7:da:b6:13:1a:ef:0c:
         c9:65:8b:f4:6c:b4:31:bf:51:ad:e9:e8:71:73:9a:60:8d:d8:
         17:ec:14:13:10:6d:02:b8:70:ae:ad:10:9f:3f:70:a9:d8:f5:
         b9:c7:a5:22:16:0a:62:36:34:13:6e:b7:d8:aa:5a:a3:fc:75:
         69:69:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 17:08:19 2024 by rpki-client on console-fra.rpki-client.org