Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/323830343a356263383a3a2f33322d3438203d3e20323638383639.roa
File:                     323830343a356263383a3a2f33322d3438203d3e20323638383639.roa (raw, json)
Hash identifier:          KLMT+N/V2nhCcycBuzZqNodgkVtRbl1aE0hcKBzLzWU=
Subject key identifier:   C3:7F:FC:7C:A6:3F:00:85:5A:55:0F:B2:36:78:56:8D:03:FF:A7:F4
Certificate issuer:       /CN=D1FBE89D5F67043ED369B1D24B2F8A18C9131156
Certificate serial:       55712A28E52E781A81C8D8877410DE5B669B8532
Authority key identifier: D1:FB:E8:9D:5F:67:04:3E:D3:69:B1:D2:4B:2F:8A:18:C9:13:11:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/323830343a356263383a3a2f33322d3438203d3e20323638383639.roa
Signing time:             Thu 26 Dec 2024 06:43:59 +0000
ROA not before:           Thu 26 Dec 2024 06:38:59 +0000
ROA not after:            Thu 25 Dec 2025 06:43:59 +0000
asID:                     268869
IP address blocks:        2804:5bc8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:71:2a:28:e5:2e:78:1a:81:c8:d8:87:74:10:de:5b:66:9b:85:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FBE89D5F67043ED369B1D24B2F8A18C9131156
        Validity
            Not Before: Dec 26 06:38:59 2024 GMT
            Not After : Dec 25 06:43:59 2025 GMT
        Subject: CN=C37FFC7CA63F00855A550FB23678568D03FFA7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:f4:37:6d:32:ee:99:ef:5c:64:30:6f:1b:
                    cf:f4:7a:b6:62:b7:07:10:6a:17:be:36:43:24:5d:
                    ff:82:24:40:01:3e:5a:7c:63:8d:a9:29:e6:b4:02:
                    2e:fc:c6:00:8f:99:1b:47:e3:08:b6:eb:8a:8d:bb:
                    04:f1:f0:df:a3:6f:47:29:b9:fd:56:73:98:24:f1:
                    80:73:41:1f:30:f6:73:af:7f:67:4e:af:ca:b7:a9:
                    ac:92:29:2f:b2:38:bc:ee:7f:98:f1:5b:f9:f9:72:
                    87:66:cc:24:7c:f1:f0:5d:f3:76:7c:63:a1:80:eb:
                    61:91:f3:1c:cb:69:ab:71:aa:5d:15:91:6d:fe:b9:
                    6a:9c:86:64:88:d1:7d:c9:7c:63:fa:a9:85:21:b0:
                    5f:88:da:66:74:cb:b3:88:c3:4e:0e:e9:84:2d:cc:
                    61:02:80:91:b6:9e:b3:4b:a0:b3:bb:f1:d5:2d:50:
                    13:bc:75:e4:66:3c:31:b1:18:d8:4d:25:a8:43:c3:
                    86:07:f0:7e:e6:37:91:d4:ff:53:16:aa:a2:36:7c:
                    2e:43:52:92:03:37:0c:2c:14:d9:40:f2:59:e7:ec:
                    0a:3a:89:60:57:be:4b:7c:0e:62:b8:b4:12:98:76:
                    7f:7e:c0:69:42:3b:fd:b7:0e:fe:ee:df:b7:01:a5:
                    c9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7F:FC:7C:A6:3F:00:85:5A:55:0F:B2:36:78:56:8D:03:FF:A7:F4
            X509v3 Authority Key Identifier:
                keyid:D1:FB:E8:9D:5F:67:04:3E:D3:69:B1:D2:4B:2F:8A:18:C9:13:11:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/323830343a356263383a3a2f33322d3438203d3e20323638383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:fd:36:03:06:17:2b:1a:44:64:c9:1e:51:55:f3:c1:f2:aa:
         32:bc:e3:43:bc:4e:19:5a:2f:8b:dc:d4:25:49:4c:c1:d7:2d:
         c3:97:ff:2c:41:35:20:8f:81:e1:e4:4a:c6:de:75:36:9b:79:
         3c:76:43:52:8b:b7:11:41:31:24:ea:25:6a:34:dc:8f:33:76:
         8a:6e:97:2f:ec:63:1c:9a:03:d5:30:83:d3:4e:11:03:7a:39:
         00:c6:74:1a:ee:07:26:ff:79:25:93:03:6d:5a:4b:13:f1:23:
         16:d1:0d:d1:d0:74:83:90:e6:ce:05:7d:38:b4:2f:19:f9:fb:
         2c:b7:82:3e:ed:56:5a:eb:b8:f9:24:69:db:d4:c6:c9:ca:c8:
         7d:e4:47:37:99:10:4e:da:54:93:f7:63:7f:7c:ef:5d:fb:e4:
         98:01:c5:ca:c0:96:40:ad:1e:6b:c5:04:0c:26:b9:66:d3:0a:
         80:e8:12:89:64:a9:64:82:2f:97:85:ba:be:c9:58:d3:53:65:
         5d:7b:93:ca:e3:25:62:2e:3c:9b:08:c5:60:96:0b:0c:46:3a:
         d1:fa:ed:8b:7f:42:7d:fb:55:4e:38:b6:40:57:14:ab:71:70:
         17:b7:7c:2b:55:9a:52:0a:fa:f2:13:a5:ab:06:15:9b:8d:41:
         83:19:c0:22
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVXEqKOUueBqByNiHdBDeW2abhTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGQkU4OUQ1RjY3MDQzRUQzNjlCMUQyNEIyRjhBMThD
OTEzMTE1NjAeFw0yNDEyMjYwNjM4NTlaFw0yNTEyMjUwNjQzNTlaMDMxMTAvBgNV
BAMTKEMzN0ZGQzdDQTYzRjAwODU1QTU1MEZCMjM2Nzg1NjhEMDNGRkE3RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyF/Q3bTLume9cZDBvG8/0erZi
twcQahe+NkMkXf+CJEABPlp8Y42pKea0Ai78xgCPmRtH4wi264qNuwTx8N+jb0cp
uf1Wc5gk8YBzQR8w9nOvf2dOr8q3qaySKS+yOLzuf5jxW/n5codmzCR88fBd83Z8
Y6GA62GR8xzLaatxql0VkW3+uWqchmSI0X3JfGP6qYUhsF+I2mZ0y7OIw04O6YQt
zGECgJG2nrNLoLO78dUtUBO8deRmPDGxGNhNJahDw4YH8H7mN5HU/1MWqqI2fC5D
UpIDNwwsFNlA8lnn7Ao6iWBXvkt8DmK4tBKYdn9+wGlCO/23Dv7u37cBpcl7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUw3/8fKY/AIVaVQ+yNnhWjQP/p/QwHwYDVR0j
BBgwFoAU0fvonV9nBD7TabHSSy+KGMkTEVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnZmVU5VYTJ6WWs0WWlNaEN5VEthcXpkRzgyWFdzamV5dUVyVDNlUzZu
a1ovMC9EMUZCRTg5RDVGNjcwNDNFRDM2OUIxRDI0QjJGOEExOEM5MTMxMTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRkJFODlENUY2NzA0M0VE
MzY5QjFEMjRCMkY4QTE4QzkxMzExNTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ2ZlVOVWEyellrNFlpTWhDeVRLYXF6ZEc4MlhXc2pleXVFclQzZVM2bmtaLzAv
MzIzODMwMzQzYTM1NjI2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzgzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARbyDANBgkqhkiG9w0BAQsFAAOCAQEAS/02AwYX
KxpEZMkeUVXzwfKqMrzjQ7xOGVovi9zUJUlMwdctw5f/LEE1II+B4eRKxt51Npt5
PHZDUou3EUExJOolajTcjzN2im6XL+xjHJoD1TCD004RA3o5AMZ0Gu4HJv95JZMD
bVpLE/EjFtEN0dB0g5DmzgV9OLQvGfn7LLeCPu1WWuu4+SRp29TGycrIfeRHN5kQ
TtpUk/djf3zvXfvkmAHFysCWQK0ea8UEDCa5ZtMKgOgSiWSpZIIvl4W6vslY01Nl
XXuTyuMlYi48mwjFYJYLDEY60frti39CfftVTji2QFcUq3FwF7d8K1WaUgr68hOl
qwYVm41BgxnAIg==
-----END CERTIFICATE-----
Generated at Sun Jan 12 20:17:36 2025 by rpki-client on console.sobornost.net