Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a633030303a3a2f33342d3334203d3e203532363936.roa
File:                     323830343a6336303a633030303a3a2f33342d3334203d3e203532363936.roa (raw, json)
Hash identifier:          KlXMTZsgD66XrVZZar45ad6BM/ljUrskS1DRCUTG8sM=
Subject key identifier:   D3:54:1D:86:14:05:90:25:94:A7:F8:73:A0:A3:3F:2B:C9:C5:E9:ED
Certificate issuer:       /CN=759FD53741DAAEF6CE6410013C127C1B23331A7B
Certificate serial:       29F9897714EAE2E7F0C130F4737789F3AB0A0DE1
Authority key identifier: 75:9F:D5:37:41:DA:AE:F6:CE:64:10:01:3C:12:7C:1B:23:33:1A:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759FD53741DAAEF6CE6410013C127C1B23331A7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a633030303a3a2f33342d3334203d3e203532363936.roa
Signing time:             Tue 06 Aug 2024 00:02:55 +0000
ROA not before:           Mon 05 Aug 2024 23:57:55 +0000
ROA not after:            Tue 05 Aug 2025 00:02:55 +0000
asID:                     52696
IP address blocks:        2804:c60:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f9:89:77:14:ea:e2:e7:f0:c1:30:f4:73:77:89:f3:ab:0a:0d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759FD53741DAAEF6CE6410013C127C1B23331A7B
        Validity
            Not Before: Aug  5 23:57:55 2024 GMT
            Not After : Aug  5 00:02:55 2025 GMT
        Subject: CN=D3541D861405902594A7F873A0A33F2BC9C5E9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:fc:d6:bf:b9:e0:4a:b0:6a:f4:fb:79:e8:
                    4c:c5:68:60:ef:02:46:50:30:e6:73:8b:63:4f:35:
                    d3:0c:e0:7a:18:17:cf:24:5a:a7:46:bd:bc:20:80:
                    a1:ae:51:43:a9:90:19:7f:cc:ba:26:57:70:20:86:
                    ea:6a:8b:63:c7:f5:20:0d:68:8d:15:02:e6:0a:72:
                    0d:f8:86:8d:b2:e1:07:5d:07:4b:b9:4d:ab:41:14:
                    2b:fd:de:aa:1e:a5:af:d2:95:42:9d:5e:65:bb:d5:
                    82:49:94:f7:32:b9:e2:26:60:bd:93:3f:41:c6:5b:
                    48:2e:57:a6:26:e8:2f:bb:fe:55:60:1f:c2:c6:53:
                    29:ea:b6:23:d9:cc:fe:ba:93:9e:c4:0e:25:73:7a:
                    bd:68:e3:72:41:7c:37:19:48:8c:45:9e:45:fb:4e:
                    b2:70:47:29:9e:72:84:04:88:4e:6b:2d:5f:a0:40:
                    20:e1:dd:6b:c8:e9:fb:7a:76:8a:4a:c4:0c:06:f6:
                    74:84:d0:ec:a6:52:ad:3d:c2:f0:f2:93:aa:f8:0c:
                    ca:86:4d:b9:85:78:ee:c4:96:d6:d8:5e:83:33:59:
                    35:46:df:70:46:c4:cb:89:2b:d2:0f:4a:7b:c1:0e:
                    9f:f6:77:d7:d4:5f:e4:07:d4:2b:d2:c8:17:88:22:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:54:1D:86:14:05:90:25:94:A7:F8:73:A0:A3:3F:2B:C9:C5:E9:ED
            X509v3 Authority Key Identifier:
                keyid:75:9F:D5:37:41:DA:AE:F6:CE:64:10:01:3C:12:7C:1B:23:33:1A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/759FD53741DAAEF6CE6410013C127C1B23331A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759FD53741DAAEF6CE6410013C127C1B23331A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a633030303a3a2f33342d3334203d3e203532363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c60:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         34:5b:04:50:ed:8e:f6:72:8e:90:a9:cf:2e:b4:91:2c:7b:f5:
         aa:5b:20:31:45:26:9e:cc:37:62:e5:8c:7a:c6:6a:94:91:fd:
         71:d4:93:16:16:1d:0a:aa:79:3d:7b:76:c4:6d:19:5f:c5:c7:
         23:6c:57:cf:24:92:0e:4c:10:a0:f6:17:a8:46:83:f9:82:79:
         30:73:55:ab:23:fa:e8:e7:96:fc:fc:a7:8e:24:0c:70:eb:aa:
         bf:eb:b6:a4:d3:91:e6:7f:c0:be:df:6d:c4:68:4f:c0:a6:66:
         ef:ca:9d:f8:a1:5f:a1:2b:c1:c7:67:11:41:89:ad:ac:42:b7:
         03:65:62:39:47:53:3c:1b:a1:55:5b:2e:e2:d4:8c:ed:1c:61:
         32:3c:77:6d:bd:d8:cc:d1:6e:03:84:4d:a5:9d:31:ee:f1:38:
         a2:ee:bc:68:e9:c3:97:b4:f1:f6:c9:80:fa:59:87:59:f7:cc:
         2b:5d:00:71:e6:bc:91:27:8d:a3:81:d1:4f:54:a8:8f:cc:64:
         dc:1d:ce:86:54:23:7a:f4:dc:ff:e0:ec:2c:2a:df:92:23:d3:
         46:e4:3f:ec:b0:a4:97:fe:0b:74:18:ed:2a:85:33:98:a6:a8:
         b2:89:d6:d9:25:e8:b8:e1:36:21:7e:9f:ad:b0:77:98:15:db:
         9a:5a:f9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 22:38:44 2024 by rpki-client on console-ams.rpki-client.org