Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/323830343a353937383a3a2f33322d3332203d3e20323638373034.roa
File:                     323830343a353937383a3a2f33322d3332203d3e20323638373034.roa (raw, json)
Hash identifier:          sG/SandeLHJ6Th/TLfiOW3J8jfJHDPGZ9q6/QAy7Z7o=
Subject key identifier:   02:67:05:77:94:6A:35:E8:37:42:5E:6C:66:C6:F1:22:D2:46:AA:06
Certificate issuer:       /CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
Certificate serial:       150DE45B70A01B8A42CA93014519AA3B9473F33B
Authority key identifier: 96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/323830343a353937383a3a2f33322d3332203d3e20323638373034.roa
Signing time:             Mon 05 Aug 2024 03:41:41 +0000
ROA not before:           Mon 05 Aug 2024 03:36:41 +0000
ROA not after:            Mon 04 Aug 2025 03:41:41 +0000
asID:                     268704
IP address blocks:        2804:5978::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0d:e4:5b:70:a0:1b:8a:42:ca:93:01:45:19:aa:3b:94:73:f3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
        Validity
            Not Before: Aug  5 03:36:41 2024 GMT
            Not After : Aug  4 03:41:41 2025 GMT
        Subject: CN=02670577946A35E837425E6C66C6F122D246AA06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:28:87:96:67:f7:97:e2:92:05:01:b2:d1:
                    45:67:c1:b0:46:25:cc:fd:45:50:c5:0e:08:85:e6:
                    bd:0a:69:bf:1b:97:69:d3:33:8b:5a:6b:8a:d5:dd:
                    97:80:30:79:b6:f6:28:31:19:b3:d2:f4:af:35:30:
                    5a:a0:97:c5:a7:72:f3:9c:54:ea:46:33:56:f8:67:
                    4f:76:54:58:44:d9:57:8f:5d:d5:cb:c4:11:fb:38:
                    31:87:a4:40:ed:cd:02:b4:22:26:1d:49:d6:ae:42:
                    b2:8c:dd:fa:7e:69:3a:ba:3f:bd:f0:25:7f:96:cb:
                    de:5d:7c:4e:f4:68:26:ec:da:ca:a4:38:58:f4:d7:
                    54:43:5f:cb:4f:6c:73:ab:af:20:48:34:79:72:f8:
                    8f:8e:bf:4c:ec:47:e0:ad:52:4b:4b:3f:4a:49:30:
                    b1:74:f4:f1:3d:83:03:31:25:e7:69:e9:42:0b:87:
                    69:38:67:21:1d:dc:d4:55:c4:ce:e4:ee:1c:6f:99:
                    3b:18:68:c5:53:cc:e1:8a:19:c0:49:c8:86:98:2a:
                    a0:d1:99:6d:98:03:e5:5f:c2:fc:25:68:9c:73:65:
                    90:48:eb:ef:53:dd:a6:df:d9:77:5d:27:56:e3:78:
                    c9:d6:1c:56:42:72:8c:bd:3e:8e:75:9b:17:66:20:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:67:05:77:94:6A:35:E8:37:42:5E:6C:66:C6:F1:22:D2:46:AA:06
            X509v3 Authority Key Identifier:
                keyid:96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/96A28B7606385C538AB85121C62CC8D2D1FFF64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/323830343a353937383a3a2f33322d3332203d3e20323638373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5978::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:d7:00:12:4f:de:f3:d7:0b:ee:c6:c8:7b:ff:07:05:16:3f:
         78:c2:54:e1:69:fd:c1:b4:14:9b:14:26:61:30:67:39:a7:1c:
         75:d9:ae:20:16:0d:60:16:62:65:0f:de:3a:cb:01:fc:df:7c:
         48:a7:52:ee:71:ac:90:b4:42:87:03:6d:e8:22:b2:a8:0f:50:
         63:07:ef:d0:8b:a8:d1:07:bb:03:43:27:26:a6:99:b2:f2:2a:
         3c:78:60:ad:91:39:69:2c:d4:39:34:0d:ca:c8:18:48:1a:75:
         a4:d0:98:06:1b:c7:54:81:fb:ed:e7:15:1f:2f:f7:3b:bd:2d:
         8e:17:29:5d:97:70:8f:98:c6:41:fa:16:e7:c8:02:23:1f:d0:
         ef:e0:7c:f5:5e:3f:61:86:5e:0b:e2:25:54:ac:8c:c8:e7:f5:
         62:6e:3b:56:76:df:0d:a9:43:b6:e0:93:d7:cb:27:82:1a:3e:
         82:f6:58:18:7d:25:80:15:82:c1:34:0a:c9:be:aa:cc:92:45:
         d1:82:b0:ad:e2:31:93:4c:ca:4e:f6:3c:f6:49:88:85:0a:d5:
         4e:7f:cd:a7:d9:4d:e9:ba:7b:da:22:31:85:18:cf:12:6d:17:
         0a:91:04:57:7d:b1:09:52:88:39:c9:8a:ea:a3:47:17:86:73:
         63:e4:ff:46
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFQ3kW3CgG4pCypMBRRmqO5Rz8zswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZBMjhCNzYwNjM4NUM1MzhBQjg1MTIxQzYyQ0M4RDJE
MUZGRjY0RjAeFw0yNDA4MDUwMzM2NDFaFw0yNTA4MDQwMzQxNDFaMDMxMTAvBgNV
BAMTKDAyNjcwNTc3OTQ2QTM1RTgzNzQyNUU2QzY2QzZGMTIyRDI0NkFBMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUSiHlmf3l+KSBQGy0UVnwbBG
Jcz9RVDFDgiF5r0Kab8bl2nTM4taa4rV3ZeAMHm29igxGbPS9K81MFqgl8WncvOc
VOpGM1b4Z092VFhE2VePXdXLxBH7ODGHpEDtzQK0IiYdSdauQrKM3fp+aTq6P73w
JX+Wy95dfE70aCbs2sqkOFj011RDX8tPbHOrryBINHly+I+Ov0zsR+CtUktLP0pJ
MLF09PE9gwMxJedp6UILh2k4ZyEd3NRVxM7k7hxvmTsYaMVTzOGKGcBJyIaYKqDR
mW2YA+VfwvwlaJxzZZBI6+9T3abf2XddJ1bjeMnWHFZCcoy9Po51mxdmIPwbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAmcFd5RqNeg3Ql5sZsbxItJGqgYwHwYDVR0j
BBgwFoAUlqKLdgY4XFOKuFEhxizI0tH/9k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWVrYlhMcUZpWlZxcmdHTVlnS3ZCSEVMMk1vejZLbzdBdzNlQmV4Nk1F
cFYvMC85NkEyOEI3NjA2Mzg1QzUzOEFCODUxMjFDNjJDQzhEMkQxRkZGNjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2QTI4Qjc2MDYzODVDNTM4
QUI4NTEyMUM2MkNDOEQyRDFGRkY2NEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vla2JYTHFGaVpWcXJnR01ZZ0t2QkhFTDJNb3o2S283QXczZUJleDZNRXBWLzAv
MzIzODMwMzQzYTM1MzkzNzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzczMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARZeDANBgkqhkiG9w0BAQsFAAOCAQEADtcAEk/e
89cL7sbIe/8HBRY/eMJU4Wn9wbQUmxQmYTBnOaccddmuIBYNYBZiZQ/eOssB/N98
SKdS7nGskLRChwNt6CKyqA9QYwfv0Iuo0Qe7A0MnJqaZsvIqPHhgrZE5aSzUOTQN
ysgYSBp1pNCYBhvHVIH77ecVHy/3O70tjhcpXZdwj5jGQfoW58gCIx/Q7+B89V4/
YYZeC+IlVKyMyOf1Ym47VnbfDalDtuCT18sngho+gvZYGH0lgBWCwTQKyb6qzJJF
0YKwreIxk0zKTvY89kmIhQrVTn/Np9lN6bp72iIxhRjPEm0XCpEEV32xCVKIOcmK
6qNHF4ZzY+T/Rg==
-----END CERTIFICATE-----
Generated at Thu Aug 29 13:19:42 2024 by rpki-client on console-fra.rpki-client.org