Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/323830343a353937383a6338303a3a2f34312d3431203d3e20323638373034.roa
File:                     323830343a353937383a6338303a3a2f34312d3431203d3e20323638373034.roa (raw, json)
Hash identifier:          /pgUeY6SGiMvBXZ7r+KiKfZ9VvGJALM1WkRsJJv5xHE=
Subject key identifier:   FA:E2:F6:E4:A8:90:83:E5:E8:94:31:AE:9C:13:B7:98:79:56:B6:1C
Certificate issuer:       /CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
Certificate serial:       0BA5280622D8BDC0674AF13FCD5F0EE3614EC9CC
Authority key identifier: 96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/323830343a353937383a6338303a3a2f34312d3431203d3e20323638373034.roa
Signing time:             Mon 05 Aug 2024 03:41:41 +0000
ROA not before:           Mon 05 Aug 2024 03:36:41 +0000
ROA not after:            Mon 04 Aug 2025 03:41:41 +0000
asID:                     268704
IP address blocks:        2804:5978:c80::/41 maxlen: 41

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a5:28:06:22:d8:bd:c0:67:4a:f1:3f:cd:5f:0e:e3:61:4e:c9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
        Validity
            Not Before: Aug  5 03:36:41 2024 GMT
            Not After : Aug  4 03:41:41 2025 GMT
        Subject: CN=FAE2F6E4A89083E5E89431AE9C13B7987956B61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:73:12:91:7c:27:d5:d0:c0:e9:22:01:cf:
                    5f:27:bb:d3:84:fa:24:12:4f:9d:d7:30:a6:21:37:
                    ca:de:32:a9:fc:6f:f5:54:b4:c5:ef:ca:71:63:28:
                    fb:ad:91:0a:d0:b6:a5:f7:04:9b:19:a4:69:11:fc:
                    06:9e:a3:d8:e9:57:8d:22:f2:99:c4:1d:32:2c:f5:
                    1a:af:f0:04:e1:2b:01:fe:4c:1b:eb:4d:c6:9a:a6:
                    d5:dc:e0:ea:31:5d:28:37:3a:92:39:f6:f9:5e:5d:
                    d9:7b:8a:1f:ff:f6:69:df:91:76:c7:9c:3c:b9:65:
                    cc:f1:0e:c6:40:c3:f8:28:09:1a:bc:ce:46:86:a8:
                    dd:93:00:d9:2a:8f:a5:4f:cf:1a:ec:da:02:69:31:
                    29:50:2b:fb:23:5e:eb:5b:16:f2:32:9b:fe:f5:23:
                    e3:e0:71:80:ee:65:37:91:8c:a7:66:46:79:f1:72:
                    d1:a4:8c:01:9d:81:c2:12:c0:c0:64:64:3c:32:e6:
                    b8:e1:e5:d9:3b:98:9d:b1:d3:7c:62:dc:3d:b2:d6:
                    4d:d6:97:34:a1:93:7d:81:83:f4:01:3a:b2:fe:06:
                    4e:cb:55:e6:83:66:ad:1a:cc:b2:06:da:c8:93:77:
                    62:2c:25:03:0b:57:88:2d:41:d4:3f:49:94:e3:9c:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E2:F6:E4:A8:90:83:E5:E8:94:31:AE:9C:13:B7:98:79:56:B6:1C
            X509v3 Authority Key Identifier:
                keyid:96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/96A28B7606385C538AB85121C62CC8D2D1FFF64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/323830343a353937383a6338303a3a2f34312d3431203d3e20323638373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5978:c80::/41

    Signature Algorithm: sha256WithRSAEncryption
         74:40:e8:f7:6e:59:6d:73:a6:8b:0e:82:d5:6d:4c:59:a9:59:
         5a:38:94:56:20:07:27:78:57:1f:4b:ab:ba:50:32:6f:6f:03:
         bc:48:13:82:c2:28:aa:cb:41:4d:2d:3a:f4:ae:d2:50:37:af:
         14:fb:8b:af:8d:66:17:38:1f:c9:c1:8e:cc:98:34:19:00:81:
         73:4d:e7:ad:0d:77:33:a1:62:fa:a6:7b:61:a5:a8:f7:77:ab:
         c7:b0:02:07:44:68:86:29:46:f7:fa:d0:07:31:cb:18:34:7a:
         c6:35:52:95:6d:ab:c3:8c:81:23:53:4d:0e:d8:57:ef:f3:f9:
         40:85:41:20:f5:2c:f8:b3:9d:83:f9:09:9c:69:ab:ff:2a:bb:
         fa:5c:e5:77:24:16:ce:f7:90:66:d0:da:ac:44:13:88:1d:f4:
         6d:22:3e:5d:e5:85:2c:fe:da:0a:6f:1f:9d:6e:f6:15:4f:1d:
         6b:26:4f:d0:8d:9d:cc:88:ed:f7:02:07:93:49:4c:6c:d1:15:
         0f:cf:bd:98:79:e4:a5:ed:bf:d1:b2:fa:d6:86:f8:38:87:28:
         6b:00:b3:4e:06:9d:b8:a9:a0:ba:4d:7f:00:5b:02:28:db:ff:
         1c:a8:e4:45:0b:20:61:60:d1:74:73:b5:8c:e9:aa:1d:ff:2c:
         bb:78:34:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 13:19:42 2024 by rpki-client on console-fra.rpki-client.org