Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/323830343a323536633a3230303a3a2f34302d3434203d3e20323634323830.roa
File:                     323830343a323536633a3230303a3a2f34302d3434203d3e20323634323830.roa (raw, json)
Hash identifier:          oX/Fo/wZF4ShritlUhzszovR1ugeBF8plyVrmnzmE4Q=
Subject key identifier:   8B:51:BA:4E:F1:97:F2:6D:92:95:3C:39:EE:8E:DB:66:5A:0F:98:69
Certificate issuer:       /CN=D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9
Certificate serial:       5E4D5BB524695DB45C41145F19CF4A71862E25CD
Authority key identifier: D7:7B:35:FD:C7:6F:70:6D:76:A2:AD:D5:9A:CF:80:8B:63:AC:F1:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/323830343a323536633a3230303a3a2f34302d3434203d3e20323634323830.roa
Signing time:             Mon 15 Jan 2024 18:44:57 +0000
ROA not before:           Mon 15 Jan 2024 18:39:57 +0000
ROA not after:            Mon 13 Jan 2025 18:44:57 +0000
asID:                     264280
IP address blocks:        2804:256c:200::/40 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4d:5b:b5:24:69:5d:b4:5c:41:14:5f:19:cf:4a:71:86:2e:25:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9
        Validity
            Not Before: Jan 15 18:39:57 2024 GMT
            Not After : Jan 13 18:44:57 2025 GMT
        Subject: CN=8B51BA4EF197F26D92953C39EE8EDB665A0F9869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:64:e1:c6:ab:89:f3:8f:d5:89:a5:89:d6:
                    4b:1e:cc:32:9b:87:40:e0:b7:fd:c4:9b:6a:fa:5c:
                    a4:2c:0d:50:27:95:f7:ed:13:2f:e6:1d:1d:81:75:
                    e4:93:03:d0:39:26:bf:b6:67:62:82:20:d1:dc:fd:
                    9f:07:20:36:30:65:70:1e:0a:c1:54:5d:e4:30:6a:
                    e6:61:52:4c:5b:eb:fb:37:09:62:7d:26:c4:42:e3:
                    9b:43:6b:25:d0:d6:0a:cb:ad:a3:54:a4:79:24:a6:
                    53:bd:e0:ff:f8:55:12:09:62:99:d3:a5:ac:6d:f5:
                    09:90:90:36:08:48:e4:2b:e2:68:52:2d:c1:7c:ab:
                    f7:59:fa:73:63:2c:5a:51:d0:5d:35:0c:18:db:05:
                    75:57:db:85:99:12:c6:7f:39:42:7c:5f:f3:62:b2:
                    87:1b:bd:15:91:8f:02:14:e7:68:ba:90:e5:bf:53:
                    f7:4b:d6:6e:30:93:2b:93:48:3e:ac:5c:33:5c:cf:
                    d1:c3:6f:5b:38:88:26:bc:53:75:51:6a:d7:ff:f7:
                    36:7a:08:9e:6d:50:a8:e3:59:c2:0a:e8:f9:a6:44:
                    17:a5:99:eb:2f:43:f3:a6:8c:07:f1:ee:72:61:7e:
                    6b:d8:4c:40:76:a7:9f:5b:ec:d4:97:82:4c:43:70:
                    5b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:51:BA:4E:F1:97:F2:6D:92:95:3C:39:EE:8E:DB:66:5A:0F:98:69
            X509v3 Authority Key Identifier:
                keyid:D7:7B:35:FD:C7:6F:70:6D:76:A2:AD:D5:9A:CF:80:8B:63:AC:F1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/323830343a323536633a3230303a3a2f34302d3434203d3e20323634323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:256c:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:4d:fd:82:c5:48:7b:61:b8:6f:e9:75:e6:85:8d:51:6e:c3:
         17:9a:f7:a9:83:ae:4e:53:6a:7c:e7:51:c3:54:f5:a7:64:2d:
         99:03:47:da:4d:66:16:48:df:eb:98:73:7d:62:4e:7a:0e:49:
         5e:3f:90:1f:a1:cf:08:96:ed:41:62:8c:31:98:72:ea:a2:59:
         7c:58:5d:e3:f8:27:5d:6b:de:4d:0a:c0:24:01:41:6b:be:bd:
         a8:51:05:f8:f5:0f:8e:80:01:be:f8:0c:a1:4f:95:11:61:04:
         47:e4:18:cb:6e:68:af:44:65:f7:95:73:c0:71:87:67:d3:35:
         b4:e2:4f:7c:3c:a8:44:b8:29:68:77:11:92:1b:6a:40:0e:6a:
         89:9f:8e:bd:d7:91:2f:89:21:53:35:a0:ff:60:96:a9:b7:ec:
         ca:7f:6b:af:72:ee:e7:bd:84:94:4f:13:3c:50:4f:b4:7d:58:
         cc:e7:a1:40:d3:21:71:3d:97:f0:a3:e6:cb:7f:4f:f3:04:7c:
         6a:f7:f2:01:34:85:4a:41:e7:d3:a5:e0:28:d3:8a:73:86:0e:
         c7:74:af:0b:c2:b8:5e:08:30:28:7f:aa:d0:20:a4:ef:11:a5:
         e2:d4:eb:ab:74:bf:34:f6:aa:45:3f:e6:f6:43:63:4c:fa:9b:
         14:99:03:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 13:16:08 2024 by rpki-client on console-fra.rpki-client.org