Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          3YgTFgBI7iIYioTaeV7KT9L/Rvu9V33tWv6Sqi2f3YE=
Subject key identifier:   0C:F9:67:F2:0B:68:40:25:30:EC:AC:8F:F8:80:A8:F7:40:F4:3C:67
Certificate issuer:       /CN=5F50A6A460D5319BEA5DD872C05A27993FA41793
Certificate serial:       7E8AFFA34CE70C9D15242E87CBDCC019896F7D25
Authority key identifier: 5F:50:A6:A4:60:D5:31:9B:EA:5D:D8:72:C0:5A:27:99:3F:A4:17:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Thu 10 Oct 2024 00:35:51 +0000
ROA not before:           Thu 10 Oct 2024 00:30:51 +0000
ROA not after:            Thu 09 Oct 2025 00:35:51 +0000
asID:                     273728
IP address blocks:        2804:8b5c:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8a:ff:a3:4c:e7:0c:9d:15:24:2e:87:cb:dc:c0:19:89:6f:7d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F50A6A460D5319BEA5DD872C05A27993FA41793
        Validity
            Not Before: Oct 10 00:30:51 2024 GMT
            Not After : Oct  9 00:35:51 2025 GMT
        Subject: CN=0CF967F20B68402530ECAC8FF880A8F740F43C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:35:5b:15:d6:0a:99:1e:d8:b2:e7:90:bb:7f:
                    53:26:7b:ee:41:ed:62:41:8a:d3:32:ac:f9:07:6d:
                    fc:c9:c6:a1:9c:4c:24:20:b2:67:36:00:00:52:ad:
                    7b:0e:f7:c2:3c:22:cf:d6:f6:99:b4:52:38:1d:29:
                    32:b4:d7:35:f3:04:5e:05:7e:f9:ad:43:03:45:78:
                    de:99:e7:31:07:34:72:d0:ae:17:ec:85:cb:f0:ea:
                    5f:db:6f:36:f6:b3:d8:d3:06:ee:ae:55:1e:b4:3e:
                    c6:50:5a:57:7f:85:58:f0:0f:29:34:2c:31:e4:cf:
                    99:23:af:7a:be:cb:25:32:f7:9e:8f:37:08:65:28:
                    63:bd:74:9a:e4:31:69:e6:92:16:5d:39:e1:e4:b4:
                    b6:67:99:96:49:90:70:ff:d5:72:62:6b:6b:71:5f:
                    1b:74:0f:c2:10:8c:5b:61:04:34:76:fd:b7:78:f7:
                    76:f8:0e:7b:54:8f:96:ae:48:13:f7:32:a7:e0:b8:
                    ec:05:a8:72:8a:51:56:ed:de:49:30:30:a0:a3:d4:
                    11:16:b4:10:a1:67:ba:2b:66:67:42:da:29:4f:08:
                    5b:84:96:60:99:f9:7b:a2:33:d9:f3:a1:93:98:c2:
                    2e:9e:01:e9:72:36:a6:12:f7:1c:7c:5c:51:f2:e6:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:67:F2:0B:68:40:25:30:EC:AC:8F:F8:80:A8:F7:40:F4:3C:67
            X509v3 Authority Key Identifier:
                keyid:5F:50:A6:A4:60:D5:31:9B:EA:5D:D8:72:C0:5A:27:99:3F:A4:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         dd:bb:f8:2d:4c:c2:97:aa:fb:c3:a8:e9:9b:90:3f:e4:95:0b:
         a6:cd:90:31:65:c6:b9:c4:b6:52:16:62:82:08:a1:0a:93:7e:
         43:68:fb:ab:51:8c:8f:4e:05:44:7b:e6:7f:10:6d:4b:de:0c:
         f3:84:d5:53:6e:04:83:d5:c5:68:6a:f7:35:0f:07:3d:25:ba:
         6b:65:c0:77:31:9b:8d:eb:f2:69:69:49:b9:38:1d:38:8a:1b:
         3d:97:f6:43:d3:09:03:48:f4:12:f8:f0:66:b4:4d:c1:95:5b:
         db:da:32:22:e3:5a:e8:10:f9:06:9f:0e:e6:0c:4e:85:75:f2:
         c7:50:97:4c:91:4e:d6:89:22:5b:bb:14:3f:33:b5:11:c0:cf:
         0b:41:d0:82:6a:87:49:45:e1:cb:e2:40:fe:3e:b4:e0:ee:8f:
         66:9e:59:09:7e:40:9e:48:88:d9:58:dc:52:37:5e:e8:c8:62:
         1a:22:88:d5:4a:22:64:43:97:58:23:b7:dc:99:93:71:e9:8f:
         94:90:cf:b1:6b:4d:07:b3:5d:03:b9:95:de:a1:a5:d2:78:a3:
         6d:4b:13:ab:c4:cd:f2:59:a2:eb:89:ae:e3:55:95:1f:c1:cb:
         fc:7d:79:8f:43:c1:31:1e:28:1b:dd:e9:77:2c:75:fd:b7:35:
         e9:40:ed:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 17:45:12 2024 by rpki-client on console-fra.rpki-client.org