Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/323830343a353665383a3a2f33322d3438203d3e20323638303331.roa
File:                     323830343a353665383a3a2f33322d3438203d3e20323638303331.roa (raw, json)
Hash identifier:          AIzGSyVtKkj/JrWsqVURsEeCUpG8HGLeO4sCkpcNlDk=
Subject key identifier:   94:90:35:95:E3:9B:50:0B:62:3B:E2:22:8C:69:03:99:65:3A:E7:BF
Certificate issuer:       /CN=F27941693B376C4C67B0FD176F1538F4B07BE79E
Certificate serial:       61BDC5A08F5192EB7878039BC381CE46E9FF13E7
Authority key identifier: F2:79:41:69:3B:37:6C:4C:67:B0:FD:17:6F:15:38:F4:B0:7B:E7:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27941693B376C4C67B0FD176F1538F4B07BE79E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/323830343a353665383a3a2f33322d3438203d3e20323638303331.roa
Signing time:             Mon 22 Jul 2024 12:09:32 +0000
ROA not before:           Mon 22 Jul 2024 12:04:32 +0000
ROA not after:            Mon 21 Jul 2025 12:09:32 +0000
asID:                     268031
IP address blocks:        2804:56e8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bd:c5:a0:8f:51:92:eb:78:78:03:9b:c3:81:ce:46:e9:ff:13:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27941693B376C4C67B0FD176F1538F4B07BE79E
        Validity
            Not Before: Jul 22 12:04:32 2024 GMT
            Not After : Jul 21 12:09:32 2025 GMT
        Subject: CN=94903595E39B500B623BE2228C690399653AE7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:8e:c4:25:80:c9:d2:f1:31:07:17:ed:9c:
                    94:7f:2b:3f:f9:ee:4b:ce:c9:16:5a:98:c8:f4:6e:
                    17:f4:1a:7d:06:e2:68:08:eb:63:40:94:04:15:c1:
                    e3:43:1b:5a:99:4a:a0:57:b3:84:e5:0c:68:e8:11:
                    51:a5:5f:15:0b:41:17:ae:32:ea:62:3d:9c:c9:0a:
                    e5:9f:b2:2c:19:2e:d1:1f:0f:f0:8a:53:cc:bc:97:
                    9b:11:26:9b:42:1b:72:17:69:1e:fe:7d:cf:2f:8e:
                    a4:55:f1:3a:a5:d9:06:71:81:38:09:10:55:11:7a:
                    f1:72:9f:4d:bf:cf:02:d8:8f:cd:4b:49:f9:a2:eb:
                    ec:31:cc:4f:51:84:bc:f5:bc:57:c9:77:96:01:9a:
                    c5:23:fc:c2:2d:9a:eb:14:28:2c:b7:ae:19:33:ad:
                    45:2b:d0:2d:bc:e2:93:7d:a1:86:a0:e1:bc:70:5f:
                    a2:d3:ea:db:20:ee:0e:0d:2c:85:be:73:a3:66:18:
                    7e:32:2e:50:c3:c0:da:2a:25:3b:ae:cc:4f:8d:86:
                    83:6c:15:89:a5:88:b7:b8:69:84:3c:f2:77:4d:44:
                    50:29:39:4d:23:e1:d2:97:29:cd:e4:b5:22:05:f9:
                    c1:55:06:d2:fd:9d:2f:8c:c4:d5:2c:cf:ff:c0:e4:
                    81:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:90:35:95:E3:9B:50:0B:62:3B:E2:22:8C:69:03:99:65:3A:E7:BF
            X509v3 Authority Key Identifier:
                keyid:F2:79:41:69:3B:37:6C:4C:67:B0:FD:17:6F:15:38:F4:B0:7B:E7:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/F27941693B376C4C67B0FD176F1538F4B07BE79E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27941693B376C4C67B0FD176F1538F4B07BE79E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/323830343a353665383a3a2f33322d3438203d3e20323638303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:2e:fc:b1:a1:7c:b5:28:cd:48:92:2f:76:3a:41:66:3d:3a:
         0d:cc:30:87:08:d1:c6:da:0a:0c:fe:03:f8:b1:82:58:07:46:
         34:a7:ae:78:3d:97:14:d5:1a:f6:5f:00:a8:50:70:a6:dc:e1:
         25:51:83:e5:a5:a9:30:7c:17:51:fa:46:4c:c7:45:73:5a:5e:
         3f:f6:70:50:d4:51:b6:e1:f8:40:42:0d:47:3f:93:b6:77:38:
         41:0e:b1:a4:bc:77:bb:0d:a0:a9:a0:48:e7:20:09:65:b5:b1:
         a6:ec:c5:55:7a:2a:6b:e9:7f:8a:26:b9:cf:3c:4c:fb:3a:6c:
         5b:4b:34:85:a8:d6:e2:e2:b3:58:3d:77:a8:16:a9:5c:21:89:
         54:ff:93:6a:00:4c:f7:41:7f:17:d5:bd:d5:6d:f9:e2:22:12:
         4d:6d:53:dc:60:85:50:a3:e1:6b:60:b7:95:a3:ef:47:4d:04:
         52:5b:95:70:d9:67:1b:78:3e:d3:75:64:8d:d4:30:a1:bb:ff:
         13:cd:ba:09:9a:6f:04:cf:a5:21:eb:3d:45:75:c3:be:b2:2b:
         eb:00:6b:c3:82:2b:7e:ba:8c:2f:ac:4c:96:bd:17:26:da:8f:
         43:27:c1:85:06:5c:8f:1f:35:20:23:41:37:4c:b1:0c:64:10:
         e8:32:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 09:58:20 2024 by rpki-client on console-fra.rpki-client.org