Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/323830343a353761303a3a2f33322d313238203d3e20323638303736.roa
File:                     323830343a353761303a3a2f33322d313238203d3e20323638303736.roa (raw, json)
Hash identifier:          verk8Ta6CoWPBC2aaopMCPetVBL/vqoeQKfve2knX3U=
Subject key identifier:   75:79:8B:10:71:53:30:DB:4D:B1:9C:BD:C6:C8:60:FC:B6:DC:F4:DC
Certificate issuer:       /CN=21DA9A8658D9028E72BA32DC1BE47519EF271F9E
Certificate serial:       34E903BF07FF28E6D499C1FF6CC6A7D86F799A5C
Authority key identifier: 21:DA:9A:86:58:D9:02:8E:72:BA:32:DC:1B:E4:75:19:EF:27:1F:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/323830343a353761303a3a2f33322d313238203d3e20323638303736.roa
Signing time:             Tue 16 Apr 2024 14:40:53 +0000
ROA not before:           Tue 16 Apr 2024 14:35:53 +0000
ROA not after:            Tue 15 Apr 2025 14:40:53 +0000
asID:                     268076
IP address blocks:        2804:57a0::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e9:03:bf:07:ff:28:e6:d4:99:c1:ff:6c:c6:a7:d8:6f:79:9a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DA9A8658D9028E72BA32DC1BE47519EF271F9E
        Validity
            Not Before: Apr 16 14:35:53 2024 GMT
            Not After : Apr 15 14:40:53 2025 GMT
        Subject: CN=75798B10715330DB4DB19CBDC6C860FCB6DCF4DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:24:fa:3a:bd:92:cf:b6:4a:6d:74:dd:4d:
                    24:da:b8:98:dd:46:04:3a:8a:7b:a6:92:f9:e8:70:
                    e4:e9:e4:0e:b2:a0:04:b5:c6:86:ba:29:d1:d2:b9:
                    f3:04:78:cf:81:01:9f:ef:e6:03:3a:1d:9f:ee:09:
                    8f:71:42:79:3d:77:6b:28:8f:5c:a5:74:86:45:c9:
                    fc:2f:7c:d0:f2:f1:96:b0:dc:c3:1d:5a:d9:01:04:
                    21:81:98:0b:2d:b2:46:b3:38:5a:72:da:4a:1e:c7:
                    bb:65:f2:c8:8b:63:13:67:a1:be:8e:75:90:a7:7d:
                    2e:34:22:e2:73:b3:3a:fd:31:6c:07:cb:f4:4b:d1:
                    7d:79:83:ca:95:7d:e0:9a:5d:f3:da:dd:ed:4d:18:
                    ec:67:22:6b:9e:3e:40:c7:e9:7d:ee:6b:4e:38:ba:
                    d7:46:dd:86:d5:69:9f:98:a2:30:9f:5c:0d:98:e0:
                    77:b0:a6:a3:f5:57:8c:c2:95:9b:b5:f0:b4:98:2a:
                    93:c7:79:7d:5d:9f:6a:c3:a5:f3:7b:8b:e1:0d:37:
                    b8:b0:b6:a8:42:23:d2:c2:5c:e3:31:25:8a:6c:de:
                    4a:37:12:90:6b:95:fa:c7:c5:70:b8:22:4a:28:f7:
                    e4:79:b1:46:00:2a:bf:16:0d:73:f4:29:34:29:30:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:79:8B:10:71:53:30:DB:4D:B1:9C:BD:C6:C8:60:FC:B6:DC:F4:DC
            X509v3 Authority Key Identifier:
                keyid:21:DA:9A:86:58:D9:02:8E:72:BA:32:DC:1B:E4:75:19:EF:27:1F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/323830343a353761303a3a2f33322d313238203d3e20323638303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:ff:97:8a:b2:d8:b1:0e:35:69:13:62:33:b8:e5:ce:5a:73:
         11:8c:8f:68:a1:a4:56:e7:01:15:64:29:6a:6c:a7:aa:a0:70:
         21:bc:d2:7f:7d:80:92:7c:d0:14:11:30:22:1d:a6:77:40:f7:
         7d:37:37:56:bd:a6:dc:4a:0b:df:58:36:18:b0:4b:d4:fe:94:
         16:47:77:f1:11:0b:fe:11:3f:d7:a2:75:a9:90:23:8f:7c:04:
         2e:65:78:da:e9:64:62:8f:53:e2:ad:ea:a4:9f:9e:96:24:9c:
         4d:7a:71:06:c9:a5:2c:97:4f:20:76:f5:ee:d1:58:0a:36:f7:
         de:a4:82:3b:f1:9f:c4:c6:f9:94:21:1b:9b:85:15:aa:f0:78:
         0e:8d:1c:e1:33:3a:94:2b:c6:80:63:9f:7b:a1:21:b1:91:e8:
         2d:e5:77:29:eb:fa:03:83:74:44:96:64:21:0c:e2:4c:1b:59:
         4f:cd:a5:3f:a5:11:ea:4f:a5:68:42:fa:72:49:23:bb:8c:9d:
         45:fe:f8:b8:f1:86:bf:f3:2a:15:63:f6:ef:0d:d2:4e:21:d3:
         12:35:fb:7e:f2:39:bd:fa:c3:44:30:52:0c:6f:8f:57:0e:f5:
         f1:80:25:c0:8e:5e:bb:89:af:25:7a:68:83:31:d2:67:7f:33:
         d4:e6:77:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 21:07:17 2024 by rpki-client on console-fra.rpki-client.org