Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          MjTONvdkBWShTXdyh7s9A8cxSq2kmnp9mOykFsqUFgs=
Subject key identifier:   57:6A:75:A2:0B:DD:9E:CC:F4:57:AA:D3:DF:92:47:6B:90:FB:01:A5
Certificate issuer:       /CN=5F50A6A460D5319BEA5DD872C05A27993FA41793
Certificate serial:       1F69F811BA538021BF66C631AC807F25851464E1
Authority key identifier: 5F:50:A6:A4:60:D5:31:9B:EA:5D:D8:72:C0:5A:27:99:3F:A4:17:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Thu 10 Oct 2024 00:35:51 +0000
ROA not before:           Thu 10 Oct 2024 00:30:51 +0000
ROA not after:            Thu 09 Oct 2025 00:35:51 +0000
asID:                     273728
IP address blocks:        2804:8b5c:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:69:f8:11:ba:53:80:21:bf:66:c6:31:ac:80:7f:25:85:14:64:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F50A6A460D5319BEA5DD872C05A27993FA41793
        Validity
            Not Before: Oct 10 00:30:51 2024 GMT
            Not After : Oct  9 00:35:51 2025 GMT
        Subject: CN=576A75A20BDD9ECCF457AAD3DF92476B90FB01A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:39:1d:f2:9e:4d:86:ee:c4:b1:8b:d6:7a:
                    73:28:c9:e2:a9:54:31:4a:58:40:9d:df:01:bb:82:
                    f1:37:f4:2f:76:1f:16:45:ec:45:46:4f:c3:37:13:
                    b6:4c:06:fa:20:2e:0f:33:07:1f:40:10:96:04:1e:
                    d7:fd:be:2b:cd:3d:ed:0a:af:eb:02:a1:9b:fb:ae:
                    e4:cb:81:2a:0d:ca:5e:d5:db:c2:a7:e6:94:91:70:
                    77:e3:20:92:81:ed:d7:76:65:77:75:0a:c6:ee:1a:
                    df:47:b4:6c:1e:d8:43:21:d3:f4:55:7c:69:1e:84:
                    a1:24:33:d1:88:b9:38:43:43:ae:ab:e3:46:5d:0f:
                    58:7c:7f:aa:38:42:01:54:a4:4f:c7:90:28:2b:22:
                    fe:0a:2f:6a:96:34:90:a9:7d:81:60:b0:59:14:c6:
                    54:52:00:c0:8c:88:1f:56:7b:88:41:0d:ac:2e:2f:
                    14:c4:59:4a:98:19:ba:c0:60:29:d3:b8:0a:38:ca:
                    9d:8e:d8:db:0e:03:c0:19:e3:1f:2f:c6:32:cf:c5:
                    1c:4a:c4:08:33:b2:39:5b:54:3b:35:44:98:9c:71:
                    49:e0:22:22:5e:d5:cf:a7:b2:09:a8:cc:a7:12:6b:
                    41:7d:d3:f9:b8:83:89:ff:7d:10:a9:41:e9:cc:ab:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6A:75:A2:0B:DD:9E:CC:F4:57:AA:D3:DF:92:47:6B:90:FB:01:A5
            X509v3 Authority Key Identifier:
                keyid:5F:50:A6:A4:60:D5:31:9B:EA:5D:D8:72:C0:5A:27:99:3F:A4:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:5a:de:09:82:e2:cf:d5:21:be:4d:c0:d2:ce:8e:55:a7:7e:
         7c:26:59:cc:aa:9a:e1:37:28:26:63:c0:9d:f5:7f:0b:68:1c:
         4b:e0:75:0b:d8:2f:49:b8:ab:66:a2:10:d8:ec:8e:67:b4:07:
         88:42:0e:18:b2:3d:cc:df:32:d8:3d:f5:9e:1d:fb:bd:9d:14:
         d1:f9:e1:3b:05:a5:74:3b:51:07:a8:20:4d:e4:77:c7:6e:62:
         58:4e:f6:74:97:c4:43:29:d7:9c:01:b9:53:83:ae:4a:e4:3c:
         df:df:a9:66:02:0a:5b:c7:2c:5c:c8:23:72:37:08:7c:ab:c5:
         f0:8a:bf:f2:02:43:aa:fa:8c:81:4d:73:7e:bc:8b:46:7f:3b:
         ea:05:75:ef:36:36:9d:1c:f0:6e:24:e2:ee:0b:1b:92:b2:9c:
         46:e7:e2:d2:df:28:ca:a2:99:fe:96:ea:52:f0:9e:bf:c5:2c:
         4d:24:cf:cd:27:ef:d7:22:09:0f:b7:8e:90:44:d8:9c:6c:6e:
         0c:0d:76:f3:5d:06:90:b2:e8:1f:c3:1a:5f:03:85:fe:b4:be:
         dc:46:46:d6:53:d8:6e:68:fc:b2:78:af:c6:25:c1:07:19:59:
         6b:16:c0:6d:1c:4f:4f:87:7e:dc:2e:ca:c5:36:45:f6:ec:ca:
         2e:b5:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 17:45:12 2024 by rpki-client on console-fra.rpki-client.org