Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/323830343a373263343a343030303a3a2f33342d3334203d3e20323730383734.roa
File:                     323830343a373263343a343030303a3a2f33342d3334203d3e20323730383734.roa (raw, json)
Hash identifier:          RHDEZf4vG5ANkG/CkXOvWru0+3T9OqDnjYlwLqu0xik=
Subject key identifier:   43:98:30:5C:C0:A5:A8:34:C0:E0:D2:2D:EE:7A:55:53:07:0D:5C:FE
Certificate issuer:       /CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
Certificate serial:       27CF9AFB4FD6ED80E64AB206CC3682CD42BDE06E
Authority key identifier: 5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/323830343a373263343a343030303a3a2f33342d3334203d3e20323730383734.roa
Signing time:             Mon 13 May 2024 04:17:31 +0000
ROA not before:           Mon 13 May 2024 04:12:31 +0000
ROA not after:            Mon 12 May 2025 04:17:31 +0000
asID:                     270874
IP address blocks:        2804:72c4:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cf:9a:fb:4f:d6:ed:80:e6:4a:b2:06:cc:36:82:cd:42:bd:e0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
        Validity
            Not Before: May 13 04:12:31 2024 GMT
            Not After : May 12 04:17:31 2025 GMT
        Subject: CN=4398305CC0A5A834C0E0D22DEE7A5553070D5CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:7a:f5:e6:c5:83:b7:b4:76:c4:e1:be:96:
                    45:04:1a:b5:50:1e:4b:12:a5:0a:32:15:d4:bc:99:
                    16:a6:d3:7b:fc:21:c4:e8:99:24:ef:86:15:84:7c:
                    98:5a:f8:b1:52:86:d8:02:38:ee:10:d8:38:8f:97:
                    0a:9d:44:85:95:c4:47:35:42:36:2b:94:b8:ba:34:
                    3e:60:b4:f6:58:cd:8d:d4:ed:bd:77:6d:aa:37:c8:
                    fb:3f:80:1e:ee:d2:ad:6f:5a:d8:70:c2:51:f0:f4:
                    16:16:8e:13:75:87:e0:9b:ed:96:c4:05:89:76:56:
                    ba:75:b0:9c:1d:66:0a:e0:0b:60:d9:b3:b7:59:54:
                    22:4b:b2:19:a7:d0:2f:41:f3:b6:41:9a:02:0c:df:
                    cd:67:5d:91:a3:9a:6f:14:87:12:96:71:59:51:6d:
                    41:b5:43:8a:d5:dc:64:0f:d5:7c:a0:3d:0e:a9:81:
                    0d:86:2e:d9:72:49:05:06:76:95:11:9e:6d:3b:d7:
                    03:30:b3:07:a3:8e:c8:05:8b:b6:c0:da:29:1e:e0:
                    a8:4e:0d:11:89:fe:94:f4:b9:7f:53:3b:32:da:1f:
                    c2:33:59:f7:54:35:40:81:fa:68:a5:69:04:53:d4:
                    92:23:24:4e:3d:a3:c7:29:a6:11:09:53:83:e7:d8:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:98:30:5C:C0:A5:A8:34:C0:E0:D2:2D:EE:7A:55:53:07:0D:5C:FE
            X509v3 Authority Key Identifier:
                keyid:5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/5F384CAF597EE6AD61C526C86D22E586C1935FA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/323830343a373263343a343030303a3a2f33342d3334203d3e20323730383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72c4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ed:bf:32:b3:26:f8:c0:ef:f0:ec:aa:3d:6d:6d:6f:ae:e0:b9:
         34:81:ab:eb:a5:8a:ec:73:be:b2:30:98:04:45:e0:ee:c2:df:
         c6:b6:43:7b:ec:ca:0e:b7:2c:3f:3c:b5:18:d2:b0:0d:e3:57:
         a4:4a:bd:0a:29:f4:44:bb:f4:8d:3c:9c:6d:15:a9:6b:d7:7b:
         55:39:d3:ce:af:18:da:1e:cb:bb:47:58:0c:f4:fe:68:17:b4:
         f0:23:13:72:55:8e:bc:6f:7d:cf:03:71:b7:1b:ae:c8:0b:54:
         29:ba:4e:b2:7b:8d:e8:db:2a:9e:29:35:65:42:cd:46:b5:07:
         a9:65:bf:2e:28:7e:ff:19:cc:8e:12:bf:17:8a:59:d1:47:e2:
         0b:fa:d6:33:d0:7b:11:37:11:79:66:a1:a9:ed:16:1d:d4:92:
         e6:1d:e2:a0:d0:46:a8:06:5c:8b:18:5e:68:fa:fc:fb:ab:23:
         73:72:65:9b:cf:69:7b:b5:46:b3:7d:c3:08:f0:02:bc:5f:ed:
         26:da:89:ff:ae:d8:83:a7:70:90:b5:b1:a9:bf:96:ec:22:11:
         64:f3:ce:55:92:fb:e8:dc:1e:3d:0d:06:7e:bb:68:d2:73:51:
         40:b9:c9:ce:00:76:8a:0c:45:fc:0f:8a:2d:65:e2:c1:37:c6:
         37:7f:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 13:47:32 2024 by rpki-client on console-fra.rpki-client.org