Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a353030303a3a2f33362d3336203d3e20323633343536.roa
File:                     323830343a313231383a353030303a3a2f33362d3336203d3e20323633343536.roa (raw, json)
Hash identifier:          za1Uhdr5I4GARn4RWBg8PAzkv5FCwQcYHGKiD6gHGok=
Subject key identifier:   34:B4:6A:95:F7:2E:B2:60:50:D8:37:32:7B:B3:66:95:43:F7:6A:59
Certificate issuer:       /CN=01D49D08A0B6576FA14AD618E6273454526E7BC9
Certificate serial:       1B7DF50C00A01D63FC3CCB6ABB779D7192B04DD1
Authority key identifier: 01:D4:9D:08:A0:B6:57:6F:A1:4A:D6:18:E6:27:34:54:52:6E:7B:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D49D08A0B6576FA14AD618E6273454526E7BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a353030303a3a2f33362d3336203d3e20323633343536.roa
Signing time:             Tue 28 May 2024 12:18:14 +0000
ROA not before:           Tue 28 May 2024 12:13:14 +0000
ROA not after:            Tue 27 May 2025 12:18:14 +0000
asID:                     263456
IP address blocks:        2804:1218:5000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7d:f5:0c:00:a0:1d:63:fc:3c:cb:6a:bb:77:9d:71:92:b0:4d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01D49D08A0B6576FA14AD618E6273454526E7BC9
        Validity
            Not Before: May 28 12:13:14 2024 GMT
            Not After : May 27 12:18:14 2025 GMT
        Subject: CN=34B46A95F72EB26050D837327BB3669543F76A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:dc:60:a7:34:68:ef:8f:48:cc:64:41:83:
                    3e:d6:a3:23:fb:82:a3:19:20:8f:98:d6:82:b5:66:
                    63:99:d0:0b:ec:68:60:d3:1a:bf:ae:34:27:a1:b8:
                    20:75:e4:a4:fc:cf:76:d2:b8:db:59:b4:6a:2e:12:
                    0c:7e:54:21:72:68:9a:d6:ce:c6:6d:64:61:dd:2b:
                    fb:0e:29:ef:de:3d:5e:e4:4c:6e:e6:63:b3:13:8a:
                    ef:f8:12:10:cc:64:c6:80:bd:5b:58:3e:5a:f3:51:
                    46:17:e9:19:eb:87:a4:40:7f:ea:ac:05:19:c5:62:
                    70:67:ae:d6:ce:2e:c0:11:b2:e5:ba:1d:34:eb:e7:
                    a8:03:32:0e:6f:11:10:07:c1:08:b3:c0:94:81:84:
                    6a:52:26:4b:0f:71:56:93:33:be:19:37:c0:c5:d2:
                    a7:02:97:bc:a8:a2:5f:cf:f0:7b:8e:c3:58:cf:77:
                    18:9c:8d:41:a6:2d:e4:09:26:0f:7f:20:34:7d:6d:
                    6f:61:88:89:7b:0d:3a:d9:65:ed:07:c6:c5:ae:57:
                    17:d1:d2:5f:ae:9a:0d:57:f8:73:97:d5:46:24:6a:
                    34:3a:6c:c3:8f:00:64:6c:78:d5:87:30:58:10:42:
                    82:89:2c:22:07:be:4d:2f:bc:3c:15:62:e5:16:68:
                    fe:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B4:6A:95:F7:2E:B2:60:50:D8:37:32:7B:B3:66:95:43:F7:6A:59
            X509v3 Authority Key Identifier:
                keyid:01:D4:9D:08:A0:B6:57:6F:A1:4A:D6:18:E6:27:34:54:52:6E:7B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/01D49D08A0B6576FA14AD618E6273454526E7BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D49D08A0B6576FA14AD618E6273454526E7BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a353030303a3a2f33362d3336203d3e20323633343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1218:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         41:28:e0:c6:96:70:74:c5:90:58:a0:e7:31:a5:c6:a4:b5:1f:
         40:14:92:65:27:b6:44:3f:f6:1a:7c:f2:02:c6:98:34:58:d1:
         bb:59:6d:0f:b9:fe:d8:05:60:a4:9b:cd:d2:d3:b3:f6:a3:1f:
         2a:99:3f:d4:db:c9:3f:3c:33:f0:76:ee:3a:22:90:dc:55:2d:
         da:61:6e:c9:a2:72:9e:5b:11:33:37:d5:bb:44:83:e1:09:16:
         18:06:56:cd:e9:96:48:08:7d:53:65:85:32:26:0f:bc:3a:44:
         ce:fa:15:cb:1a:e0:b4:29:af:26:02:59:e5:f4:97:84:86:6c:
         22:86:76:f2:81:91:c0:3a:1d:d9:fd:17:02:ba:1a:c0:5c:34:
         2b:0a:52:f5:c1:24:96:aa:90:c5:d6:0a:1d:48:b6:fa:eb:27:
         7c:51:0a:3f:b4:7a:2e:cf:06:e4:cc:fc:56:f3:72:ea:37:36:
         ef:0d:f6:ce:12:30:5b:03:36:de:27:85:4f:7e:dc:b9:dc:09:
         01:a1:cb:c3:8c:c0:f4:ff:a1:4e:0c:85:aa:df:40:3e:cf:ab:
         b0:e5:9c:50:a5:45:cd:ee:1e:87:2a:71:04:f9:69:4c:e4:54:
         57:a2:62:44:fb:9e:33:c4:f9:78:10:38:33:ca:02:fc:a5:21:
         ff:6e:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 18:30:11 2024 by rpki-client on console-fra.rpki-client.org