Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a3a2f33322d3332203d3e20323733373238.roa
File:                     323830343a386235633a3a2f33322d3332203d3e20323733373238.roa (raw, json)
Hash identifier:          BbYbyHDyffVS4WyYb6VaVRe1Q9NtDJGpMGlPdbcxbDI=
Subject key identifier:   93:37:38:39:95:8B:41:90:6E:C9:64:8B:30:FF:3F:C0:40:3A:95:A0
Certificate issuer:       /CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
Certificate serial:       0DFEF1A59888ED86986B819A82B54C0BEB3BC691
Authority key identifier: FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a3a2f33322d3332203d3e20323733373238.roa
Signing time:             Thu 04 Apr 2024 14:55:36 +0000
ROA not before:           Thu 04 Apr 2024 14:50:36 +0000
ROA not after:            Thu 03 Apr 2025 14:55:36 +0000
asID:                     273728
IP address blocks:        2804:8b5c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fe:f1:a5:98:88:ed:86:98:6b:81:9a:82:b5:4c:0b:eb:3b:c6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
        Validity
            Not Before: Apr  4 14:50:36 2024 GMT
            Not After : Apr  3 14:55:36 2025 GMT
        Subject: CN=93373839958B41906EC9648B30FF3FC0403A95A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:8e:22:dc:41:43:94:45:81:72:15:01:5a:
                    ca:14:d4:1d:cd:ac:13:a7:c5:34:5a:2d:f1:99:03:
                    e4:e3:d1:57:21:a0:06:c8:50:69:50:3f:a9:d0:9e:
                    31:03:43:b3:00:d5:44:31:63:90:2d:45:e7:c2:3a:
                    81:54:b0:81:f7:8f:bf:89:47:04:12:af:6e:28:ab:
                    30:f4:0b:2e:2f:ea:0b:ec:f9:5d:14:34:0a:7d:a2:
                    a7:b6:f1:0f:a9:70:d9:98:61:45:c9:2d:34:04:6e:
                    45:0a:49:bf:ec:38:79:92:72:64:1a:7d:8f:e0:a0:
                    79:bf:89:41:34:09:52:d6:ae:c3:17:f6:12:85:07:
                    25:70:01:de:db:a0:cf:20:0c:2c:12:df:dd:2b:7d:
                    fa:fb:7f:a3:de:a9:e6:ff:e6:0a:06:07:c7:fd:b3:
                    98:af:2b:b6:b7:f4:85:0a:f3:ed:f0:9a:51:cd:d9:
                    a0:93:de:73:61:6b:c9:1d:fc:8c:b9:48:90:9e:d9:
                    3a:0c:d4:3f:32:2e:e8:a7:09:03:d0:d0:be:99:ce:
                    d4:ed:aa:c3:8a:7e:bd:f3:ed:f8:65:01:bb:17:1b:
                    2d:59:a8:52:b6:c9:4d:e4:81:42:25:10:4e:25:55:
                    0b:6e:29:5f:5b:7d:3f:03:f9:24:95:e8:40:49:b6:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:37:38:39:95:8B:41:90:6E:C9:64:8B:30:FF:3F:C0:40:3A:95:A0
            X509v3 Authority Key Identifier:
                keyid:FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a3a2f33322d3332203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:6a:2a:e0:64:85:ea:35:47:be:14:51:ed:d3:30:2f:66:e0:
         3f:0a:42:ad:1d:57:f0:2a:8e:84:29:db:22:a9:1b:98:de:05:
         8c:15:77:c4:f7:27:47:5c:3d:20:41:7f:58:56:ab:08:d3:59:
         ff:a6:0f:b6:fc:11:1c:50:02:aa:90:ca:a6:c9:eb:a3:a1:f9:
         b7:7a:fd:92:76:17:ae:44:ae:19:49:20:85:17:3b:a2:7c:e5:
         e8:7a:c5:be:b2:61:02:74:9a:84:4b:72:1d:76:79:92:a2:28:
         b0:40:93:7b:55:c0:ec:90:71:f8:a7:54:69:4f:8a:a0:f6:d7:
         29:33:ca:e3:93:4c:c1:e2:10:0f:de:07:99:dd:9e:56:38:78:
         83:07:fe:27:bc:9c:b7:0a:6d:01:04:69:3b:b9:2a:2c:48:15:
         a1:c2:90:41:a9:c9:14:85:97:65:51:97:72:f9:3d:ad:6e:0d:
         83:70:d1:df:1c:ef:2b:c1:c6:de:5e:0a:fb:a0:9d:6e:4d:62:
         28:0f:88:45:1c:dd:53:16:5a:5c:6a:9f:b6:d5:dd:74:c0:34:
         c1:7d:87:7b:e8:7b:73:22:68:1e:3a:74:2e:76:e8:67:75:9f:
         45:1f:d5:20:51:6c:3d:13:62:39:9d:e4:fa:73:a5:a1:1b:af:
         f9:f2:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 14:40:03 2024 by rpki-client on console-fra.rpki-client.org