Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/323830343a323139303a3a2f33332d3333203d3e20323634353632.roa
File:                     323830343a323139303a3a2f33332d3333203d3e20323634353632.roa (raw, json)
Hash identifier:          8vh3uqre48KVI6Yf/XetNUM78IlWpq+V/cEE2RNkOBs=
Subject key identifier:   5E:92:E8:4C:8C:5C:55:CB:C4:E9:05:B3:2F:C4:33:17:97:23:F1:97
Certificate issuer:       /CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
Certificate serial:       51DB337E23D88E647966C5C0E2DF45AA365BE03D
Authority key identifier: D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/323830343a323139303a3a2f33332d3333203d3e20323634353632.roa
Signing time:             Fri 26 Apr 2024 19:28:44 +0000
ROA not before:           Fri 26 Apr 2024 19:23:44 +0000
ROA not after:            Fri 25 Apr 2025 19:28:44 +0000
asID:                     264562
IP address blocks:        2804:2190::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:db:33:7e:23:d8:8e:64:79:66:c5:c0:e2:df:45:aa:36:5b:e0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
        Validity
            Not Before: Apr 26 19:23:44 2024 GMT
            Not After : Apr 25 19:28:44 2025 GMT
        Subject: CN=5E92E84C8C5C55CBC4E905B32FC433179723F197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:5c:5a:30:3d:18:dd:1c:97:84:af:00:66:
                    42:8c:47:65:8c:4f:3f:aa:26:ff:e1:f9:af:28:98:
                    01:64:d1:5f:63:e2:6f:39:34:b1:4c:fb:b1:ef:8b:
                    ea:31:97:98:02:2c:b2:dd:d4:e3:27:3f:04:0a:aa:
                    20:88:f3:af:4b:2c:20:12:2d:58:bf:e7:03:ff:13:
                    9c:37:32:46:e1:8c:7d:25:d7:ba:cd:13:d9:4b:a7:
                    38:74:97:3f:ef:6f:ef:37:85:46:17:c3:21:96:22:
                    ae:cf:92:26:fa:1f:5b:17:92:ed:18:68:39:17:1c:
                    93:6b:00:8b:90:83:b9:d9:33:67:93:fa:85:31:11:
                    17:81:1d:2c:fc:75:27:4d:ec:f4:3d:d1:39:81:37:
                    2a:9c:27:1e:ce:01:9a:f9:73:56:7f:a0:27:d7:1b:
                    3f:2c:d6:ff:a8:a6:c4:6f:d9:2e:4f:4d:fa:0b:97:
                    27:92:f1:bb:d8:07:7a:1f:de:23:c5:96:df:3c:83:
                    9a:84:7c:3c:31:60:38:17:47:3e:90:d2:bc:00:67:
                    fb:57:97:b9:6c:f1:20:3e:ac:ea:28:09:c6:dc:a5:
                    71:44:d1:2e:62:21:73:fd:f5:d8:d3:77:e0:20:d6:
                    8b:57:18:18:7e:56:f1:a4:b7:d1:9b:b2:d5:02:49:
                    b3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:92:E8:4C:8C:5C:55:CB:C4:E9:05:B3:2F:C4:33:17:97:23:F1:97
            X509v3 Authority Key Identifier:
                keyid:D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/323830343a323139303a3a2f33332d3333203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2190::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:9c:e0:4c:86:13:1c:e1:d7:ac:52:94:b6:30:31:26:e2:35:
         f9:b0:7d:eb:78:7c:e0:3e:5b:ee:35:6a:5e:a0:41:11:72:0e:
         4f:12:7c:c9:9c:6f:19:df:1a:b0:de:7a:25:74:87:6c:9a:c0:
         4c:f4:61:7d:d2:28:9b:01:10:f8:e1:b3:1a:ee:d2:55:2b:80:
         f0:af:a7:ee:16:16:df:2e:29:9f:05:e1:49:61:03:90:c5:44:
         ad:61:63:0d:7d:99:95:91:3c:7d:11:7b:27:be:86:18:f8:2d:
         43:46:f9:e8:63:12:2a:c0:fe:1c:f1:0f:7d:99:a2:38:b9:8c:
         90:f9:80:08:fb:d1:47:b9:65:95:db:27:c8:af:39:2c:af:97:
         3a:96:35:7f:99:5e:5c:78:57:92:b7:b6:82:5f:1f:11:19:4f:
         f1:b3:8c:e0:32:fc:8a:57:71:6e:75:c3:86:1e:1c:02:35:fb:
         4c:fd:1d:02:49:1b:b9:bd:c5:0b:85:51:90:0a:7b:e9:ab:3e:
         26:c1:ee:b0:16:c1:e5:ba:a2:67:76:ed:97:ef:d8:99:56:c7:
         a2:7c:10:6a:42:0c:fc:18:ee:47:36:ee:52:57:d3:27:40:ac:
         1b:e1:d6:4e:00:39:1b:a9:d8:0d:7b:b5:d5:5d:0c:99:69:09:
         10:d1:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 14:15:36 2024 by rpki-client on console.sobornost.net