Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/323830343a363833303a3a2f33322d3334203d3e20323639363734.roa
File:                     323830343a363833303a3a2f33322d3334203d3e20323639363734.roa (raw, json)
Hash identifier:          X63BEPvmcfIHSf/hLlVe/aLi2UQu42RYFb6wWzlPwXo=
Subject key identifier:   28:AD:2B:EB:6F:1D:E4:6D:15:39:0F:4B:2E:6B:CC:D6:87:44:29:33
Certificate issuer:       /CN=5C26D981DDA3B46D0C4B6B0503E947D507088323
Certificate serial:       D4716B27286F8B8798078CD6BF5F3A95E7A3DC
Authority key identifier: 5C:26:D9:81:DD:A3:B4:6D:0C:4B:6B:05:03:E9:47:D5:07:08:83:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C26D981DDA3B46D0C4B6B0503E947D507088323.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/323830343a363833303a3a2f33322d3334203d3e20323639363734.roa
Signing time:             Mon 29 Jul 2024 15:45:45 +0000
ROA not before:           Mon 29 Jul 2024 15:40:45 +0000
ROA not after:            Mon 28 Jul 2025 15:45:45 +0000
asID:                     269674
IP address blocks:        2804:6830::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d4:71:6b:27:28:6f:8b:87:98:07:8c:d6:bf:5f:3a:95:e7:a3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C26D981DDA3B46D0C4B6B0503E947D507088323
        Validity
            Not Before: Jul 29 15:40:45 2024 GMT
            Not After : Jul 28 15:45:45 2025 GMT
        Subject: CN=28AD2BEB6F1DE46D15390F4B2E6BCCD687442933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:fd:d0:2d:2a:59:36:c5:eb:5a:0b:66:18:
                    fa:08:ca:dd:50:b5:ea:69:cf:27:cd:75:d8:25:72:
                    a3:c6:2c:9d:fd:b6:83:19:a9:2d:ef:e3:54:67:e0:
                    d7:e3:8c:5b:8d:bf:83:4a:11:72:b9:7a:c6:11:12:
                    14:42:48:4f:6e:ce:9f:18:90:5b:d6:7f:a5:47:85:
                    e8:75:5d:a7:32:35:ce:e1:d3:dd:fb:55:16:1d:38:
                    06:37:3f:76:88:91:9b:39:27:3c:ae:3b:7a:49:74:
                    ca:09:6a:47:25:ed:bb:8d:75:a1:ca:7f:09:13:a3:
                    0b:ad:33:2d:49:99:53:92:2f:75:bd:e1:5c:93:fd:
                    eb:43:ba:34:88:72:41:43:dd:3d:3a:b0:b6:58:9c:
                    e6:b5:87:5a:a3:ce:88:61:b7:69:5a:bf:c7:c9:ed:
                    78:15:1c:7d:7f:ce:54:bc:e2:4a:ae:c4:dc:aa:2c:
                    48:cb:5d:bd:6d:79:03:92:6f:be:56:71:89:f6:b9:
                    f0:de:92:91:58:61:90:2f:74:a0:e7:58:35:77:f9:
                    16:d0:43:d8:1b:45:a6:fe:c3:25:0d:cc:09:56:10:
                    a4:79:3f:88:f6:db:8a:74:8e:52:77:3e:cf:d6:0c:
                    60:43:a7:ab:ef:dd:05:8e:4d:e5:ba:27:4e:ba:3c:
                    26:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AD:2B:EB:6F:1D:E4:6D:15:39:0F:4B:2E:6B:CC:D6:87:44:29:33
            X509v3 Authority Key Identifier:
                keyid:5C:26:D9:81:DD:A3:B4:6D:0C:4B:6B:05:03:E9:47:D5:07:08:83:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/5C26D981DDA3B46D0C4B6B0503E947D507088323.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C26D981DDA3B46D0C4B6B0503E947D507088323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/323830343a363833303a3a2f33322d3334203d3e20323639363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6830::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:20:25:1b:45:a8:29:62:26:d3:f0:f4:32:01:f3:bd:ca:08:
         8d:48:6d:5b:2c:ac:8d:55:29:5f:d7:17:98:ef:ee:35:8d:b0:
         60:b5:31:ce:f9:b8:26:dd:12:e4:22:3e:f4:14:f2:81:46:a2:
         63:e6:4d:e2:9d:d2:8c:61:7b:8c:99:3d:90:9c:dc:75:ee:83:
         e0:da:f1:61:a8:a6:80:43:79:86:46:a9:8e:e5:8f:8f:fa:7f:
         4b:21:77:b2:72:ab:d7:71:4e:7d:8a:d9:9c:7c:5d:b4:60:ae:
         8a:46:0c:b8:6e:70:75:ed:e8:93:2c:07:69:27:a1:c8:75:13:
         b1:17:16:c5:e1:1c:5d:bc:5a:10:13:d9:75:d3:f0:80:e4:36:
         c9:8a:a8:df:df:03:ca:58:35:73:6a:9f:94:df:ed:b2:f7:e2:
         87:ec:c0:52:9a:4d:65:fb:c7:78:6d:2f:e3:ab:f5:99:b6:8b:
         fc:f8:61:04:e5:7d:fd:74:63:09:d0:cb:5a:17:a1:63:4d:78:
         07:8a:c3:1f:30:d8:24:f7:d8:2f:3b:59:cb:18:de:1d:11:2d:
         7d:6a:ac:f7:8d:34:72:a1:de:80:67:fd:5a:af:2b:10:97:0d:
         dd:bd:e6:37:0d:a2:ac:8b:44:f7:b1:c6:77:e6:28:7d:e5:15:
         af:b6:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 17:28:40 2024 by rpki-client on console-fra.rpki-client.org