Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a613930303a3a2f34342d3434203d3e20323638373037.roa
File:                     323830343a353938343a613930303a3a2f34342d3434203d3e20323638373037.roa (raw, json)
Hash identifier:          pu1mTVUl8RgVX1G93Lc2C0vgS4ROdOxpRQLC7LavCUg=
Subject key identifier:   27:BA:FE:99:7C:3D:48:E0:ED:C3:F5:09:46:A7:9C:0B:88:F5:A9:34
Certificate issuer:       /CN=5AC8759123B17EF922F441C2EC527CCA9757CB30
Certificate serial:       3DBCE00B872C4892AB2D09FF88C5FD6AD3E3E51C
Authority key identifier: 5A:C8:75:91:23:B1:7E:F9:22:F4:41:C2:EC:52:7C:CA:97:57:CB:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC8759123B17EF922F441C2EC527CCA9757CB30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a613930303a3a2f34342d3434203d3e20323638373037.roa
Signing time:             Wed 27 Sep 2023 13:15:27 +0000
ROA not before:           Wed 27 Sep 2023 13:10:27 +0000
ROA not after:            Wed 25 Sep 2024 13:15:27 +0000
asID:                     268707
IP address blocks:        2804:5984:a900::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:bc:e0:0b:87:2c:48:92:ab:2d:09:ff:88:c5:fd:6a:d3:e3:e5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC8759123B17EF922F441C2EC527CCA9757CB30
        Validity
            Not Before: Sep 27 13:10:27 2023 GMT
            Not After : Sep 25 13:15:27 2024 GMT
        Subject: CN=27BAFE997C3D48E0EDC3F50946A79C0B88F5A934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:2d:42:98:bb:04:e8:10:ea:93:ac:f8:f0:
                    a6:41:77:af:b1:13:94:d2:30:6b:f3:e1:2e:c6:ed:
                    af:53:ed:d0:d4:0f:a9:69:f2:17:cd:8c:a9:97:3b:
                    20:23:cc:e2:e2:c4:cc:82:59:5f:aa:23:da:f0:11:
                    8e:51:98:5a:dd:2e:1a:80:be:2e:c3:5f:1d:82:09:
                    f0:e2:d2:e8:92:c4:c3:f6:fe:87:d6:cc:34:c4:1a:
                    99:e8:0a:de:b6:82:ba:16:6e:24:bd:49:e2:60:9b:
                    8c:b2:95:f5:28:3e:c6:56:12:d5:0e:8d:e9:1b:b4:
                    14:ad:90:8f:73:a3:46:3e:8b:62:9e:d4:57:35:6c:
                    53:f8:31:b4:4b:46:e3:f4:5e:cf:bf:5c:bd:e3:b1:
                    bf:5a:82:c5:71:d0:82:d6:46:33:9b:aa:a8:18:f1:
                    01:c7:1f:57:93:a5:d6:7d:f2:47:63:fd:9a:49:a7:
                    17:d4:d2:09:c4:ce:25:98:9e:a5:08:ac:29:d2:75:
                    1a:03:3e:39:50:0e:d6:95:55:4e:be:64:ca:11:22:
                    3f:59:8c:b7:65:57:79:ae:5b:da:cd:1e:b2:8a:f2:
                    47:4d:d6:40:9c:04:d1:00:47:8b:a2:59:da:5e:0f:
                    01:3a:04:d9:a1:4e:2a:9f:8a:50:86:de:4c:f1:bf:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BA:FE:99:7C:3D:48:E0:ED:C3:F5:09:46:A7:9C:0B:88:F5:A9:34
            X509v3 Authority Key Identifier:
                keyid:5A:C8:75:91:23:B1:7E:F9:22:F4:41:C2:EC:52:7C:CA:97:57:CB:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/5AC8759123B17EF922F441C2EC527CCA9757CB30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC8759123B17EF922F441C2EC527CCA9757CB30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a613930303a3a2f34342d3434203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:a900::/44

    Signature Algorithm: sha256WithRSAEncryption
         30:d3:eb:3f:69:d0:d5:87:57:62:c9:4a:12:a8:14:d3:de:2d:
         94:46:79:f3:b8:81:76:cf:31:8e:78:e1:bc:b7:b9:b4:96:5e:
         fb:86:bd:bb:38:21:ff:df:49:ce:18:57:c6:5f:64:2d:28:8d:
         3f:8c:65:d0:5a:22:be:18:93:19:5f:00:83:b8:62:13:29:2e:
         30:f7:c1:86:69:43:fe:77:b7:05:18:15:63:b5:fa:8b:04:9c:
         5d:ec:14:77:48:65:e1:52:66:83:b1:bd:79:64:b7:f3:bb:64:
         e0:9b:7f:e3:98:1e:14:d7:13:c9:d8:07:76:b0:80:c8:ce:36:
         2b:0b:9e:e7:7b:2d:01:a5:e9:65:ec:32:29:4c:01:fa:d0:55:
         05:f4:39:03:81:a5:53:ee:8c:50:89:2c:b8:95:b7:c7:e5:f4:
         cc:86:5b:13:32:d6:7b:ba:b3:34:88:73:52:31:de:5f:44:7e:
         ae:54:b9:d1:c7:0a:6b:78:5e:be:f5:a4:7f:8c:59:d6:18:f3:
         db:24:24:e0:68:45:ec:d6:32:bb:0f:ac:f5:28:d0:3f:fd:2e:
         e4:60:94:46:d0:5c:b4:b8:c4:b3:26:ec:85:4a:94:2d:1c:72:
         30:a4:eb:50:2b:4b:a9:bf:da:cb:40:08:71:da:44:31:65:1c:
         18:5d:bb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:32 2024 by rpki-client on console.sobornost.net