Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          98Ye6kGjL2DGKdqy9Leh8CVZiaGnCtc1UTuMZF9ZNTE=
Subject key identifier:   CE:C7:19:43:17:D9:80:2A:33:14:D1:BD:54:CF:8B:17:38:AA:29:8C
Certificate issuer:       /CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
Certificate serial:       344A9FA042E737ECB2D47E8A5B243026324A0229
Authority key identifier: FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Thu 04 Apr 2024 14:55:37 +0000
ROA not before:           Thu 04 Apr 2024 14:50:37 +0000
ROA not after:            Thu 03 Apr 2025 14:55:37 +0000
asID:                     273728
IP address blocks:        2804:8b5c:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4a:9f:a0:42:e7:37:ec:b2:d4:7e:8a:5b:24:30:26:32:4a:02:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
        Validity
            Not Before: Apr  4 14:50:37 2024 GMT
            Not After : Apr  3 14:55:37 2025 GMT
        Subject: CN=CEC7194317D9802A3314D1BD54CF8B1738AA298C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c5:df:4a:1e:b2:e0:77:e4:4c:d3:38:31:97:
                    97:9f:a4:c0:4d:b8:06:c3:15:16:0f:b7:76:cb:c5:
                    59:4e:4f:4b:a6:b1:cb:1d:5d:4c:3b:ce:be:11:22:
                    48:52:85:6d:2d:c0:be:f8:0f:05:1a:18:74:d0:6f:
                    ea:46:c0:67:8e:c8:0b:20:e5:1f:e5:d5:b3:9a:e2:
                    78:02:f4:11:70:72:c7:f4:b6:33:db:b3:4d:7e:be:
                    e5:a6:1a:77:0d:61:25:53:47:b6:65:7e:2c:28:27:
                    3f:86:2e:25:b1:53:2f:af:fc:dd:b8:bf:52:55:7f:
                    fd:cd:1c:68:6d:30:71:1c:56:3c:53:a5:72:b7:c3:
                    e2:db:a6:ef:cd:b0:11:5d:9f:03:bc:c4:ad:5f:aa:
                    00:b8:d5:34:c6:c4:c9:d3:1d:33:52:d4:22:23:d3:
                    d7:a0:c3:db:a2:43:67:04:38:5b:86:61:d2:0a:8b:
                    08:7f:7f:c3:94:55:fb:35:69:46:cf:a7:66:bb:5d:
                    28:38:77:e2:c3:dd:07:be:13:2a:8c:4d:2a:eb:88:
                    f9:64:18:f1:6c:02:c7:7f:00:1b:10:1e:00:ad:93:
                    f0:d8:a1:52:0e:25:3a:81:2d:93:3c:d4:7f:98:2c:
                    f8:e9:d6:22:e7:5e:7c:7f:09:60:c3:55:1f:69:5c:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C7:19:43:17:D9:80:2A:33:14:D1:BD:54:CF:8B:17:38:AA:29:8C
            X509v3 Authority Key Identifier:
                keyid:FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6e:ed:74:c6:21:c5:02:17:72:32:b4:70:3c:6b:3a:1a:22:57:
         6c:0d:79:73:d3:f7:67:02:cb:a4:47:8e:59:7f:64:e4:df:48:
         03:bd:6b:58:87:1b:ec:d3:0a:d9:7b:0f:28:34:df:c1:e7:33:
         c6:00:ae:04:0a:99:39:f9:04:d2:c0:a0:eb:c9:cd:9d:4a:2a:
         0a:40:68:66:50:8a:be:cd:4f:65:62:0d:8a:ea:f4:fe:fb:9e:
         c5:db:7e:c0:00:ad:bd:22:98:f5:45:95:fc:1d:de:67:ef:b1:
         5c:90:25:16:05:3f:9f:f4:8a:93:1a:09:33:9f:cc:ad:d5:af:
         3a:43:9d:be:be:b2:6d:fb:aa:c2:15:63:fd:2c:aa:e1:b6:ad:
         a0:ce:c6:cd:f3:58:b7:9b:29:a2:64:a2:45:a4:52:94:b2:ff:
         7a:b5:e2:ca:24:f6:f2:b2:f1:88:cd:49:fc:e4:4e:4f:79:f9:
         b1:30:dc:fc:3f:84:65:42:b0:c0:a1:01:80:3c:24:e2:a0:be:
         49:48:31:37:0c:3d:74:50:7d:a7:03:5c:f9:8f:d5:58:66:82:
         a3:6d:a6:aa:04:44:bd:97:88:8e:2b:ff:e2:7b:9e:49:af:72:
         15:27:59:3e:8d:1b:30:0f:58:f8:6c:12:25:6f:b3:cb:00:11:
         15:8d:31:5e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNEqfoELnN+yy1H6KWyQwJjJKAikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQwOTNBRDMwRkREQzcyODBBNzJDNUQ1RTE2MTRFRDM0
RUU4Q0Q5NzAeFw0yNDA0MDQxNDUwMzdaFw0yNTA0MDMxNDU1MzdaMDMxMTAvBgNV
BAMTKENFQzcxOTQzMTdEOTgwMkEzMzE0RDFCRDU0Q0Y4QjE3MzhBQTI5OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZxd9KHrLgd+RM0zgxl5efpMBN
uAbDFRYPt3bLxVlOT0umscsdXUw7zr4RIkhShW0twL74DwUaGHTQb+pGwGeOyAsg
5R/l1bOa4ngC9BFwcsf0tjPbs01+vuWmGncNYSVTR7ZlfiwoJz+GLiWxUy+v/N24
v1JVf/3NHGhtMHEcVjxTpXK3w+Lbpu/NsBFdnwO8xK1fqgC41TTGxMnTHTNS1CIj
09egw9uiQ2cEOFuGYdIKiwh/f8OUVfs1aUbPp2a7XSg4d+LD3Qe+EyqMTSrriPlk
GPFsAsd/ABsQHgCtk/DYoVIOJTqBLZM81H+YLPjp1iLnXnx/CWDDVR9pXFGJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUzscZQxfZgCozFNG9VM+LFziqKYwwHwYDVR0j
BBgwFoAU/Qk60w/dxygKcsXV4WFO007ozZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR
Wm8vMi9GRDA5M0FEMzBGRERDNzI4MEE3MkM1RDVFMTYxNEVEMzRFRThDRDk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEMDkzQUQzMEZEREM3Mjgw
QTcyQzVENUUxNjE0RUQzNEVFOENEOTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzIv
MzIzODMwMzQzYTM4NjIzNTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMzM3MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEi1zAMA0GCSqGSIb3DQEBCwUA
A4IBAQBu7XTGIcUCF3IytHA8azoaIldsDXlz0/dnAsukR45Zf2Tk30gDvWtYhxvs
0wrZew8oNN/B5zPGAK4ECpk5+QTSwKDryc2dSioKQGhmUIq+zU9lYg2K6vT++57F
237AAK29Ipj1RZX8Hd5n77FckCUWBT+f9IqTGgkzn8yt1a86Q52+vrJt+6rCFWP9
LKrhtq2gzsbN81i3mymiZKJFpFKUsv96teLKJPbysvGIzUn85E5PefmxMNz8P4Rl
QrDAoQGAPCTioL5JSDE3DD10UH2nA1z5j9VYZoKjbaaqBES9l4iOK//ie55Jr3IV
J1k+jRswD1j4bBIlb7PLABEVjTFe
-----END CERTIFICATE-----
Generated at Sat Aug 10 14:40:03 2024 by rpki-client on console-fra.rpki-client.org