Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a3a2f33332d3333203d3e20323633363631.roa
File:                     323830343a313132383a3a2f33332d3333203d3e20323633363631.roa (raw, json)
Hash identifier:          YumpPAtBr7+fMPNQ/ZpZdj3RUIqH0wy+pO5tGQ8z250=
Subject key identifier:   F0:08:E8:6C:CD:68:6E:60:D3:9F:09:06:C3:BA:52:AD:0F:79:84:0F
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       405B153DE0AA14D5E08155529B49A067117240CA
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a3a2f33332d3333203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:22:54 +0000
ROA not before:           Mon 04 Mar 2024 21:17:54 +0000
ROA not after:            Mon 03 Mar 2025 21:22:54 +0000
asID:                     263661
IP address blocks:        2804:1128::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5b:15:3d:e0:aa:14:d5:e0:81:55:52:9b:49:a0:67:11:72:40:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:17:54 2024 GMT
            Not After : Mar  3 21:22:54 2025 GMT
        Subject: CN=F008E86CCD686E60D39F0906C3BA52AD0F79840F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:8d:91:38:fb:9b:ae:87:d8:10:92:22:64:
                    85:e2:59:09:cb:21:15:5f:69:d9:83:c9:e6:03:08:
                    c6:e0:8a:70:65:83:a2:67:2f:b1:0d:a3:dc:fa:38:
                    73:c5:99:54:a2:4d:f7:3a:3c:1d:e1:70:08:6a:49:
                    7a:82:29:19:28:6f:ad:02:c2:4a:9e:5b:c3:14:31:
                    27:cd:fe:86:7b:f3:8f:56:23:3e:f4:78:b7:86:e1:
                    9d:fd:b7:93:42:75:02:d4:8f:37:97:60:af:34:96:
                    09:c3:8f:f5:6c:97:9e:4c:00:c0:c4:9e:58:07:87:
                    fd:a5:59:d8:43:79:a9:1a:84:f3:fd:23:b0:7c:7b:
                    46:bd:dc:7b:88:3e:ef:69:12:09:c0:25:fc:55:02:
                    f7:57:90:a3:44:22:64:df:5d:42:da:61:91:5a:03:
                    d1:ce:1d:60:17:94:56:2b:5f:c7:ee:92:dd:0a:ee:
                    4c:5a:ed:7f:0a:60:2b:1e:c7:d8:9f:16:df:22:3c:
                    49:a1:57:be:6e:91:1b:50:30:e3:01:18:be:6f:e8:
                    4d:c3:e0:cc:79:ae:d5:82:34:e0:3a:4e:e3:10:69:
                    f2:a0:43:41:5f:30:8c:41:5e:af:c8:5c:ab:21:aa:
                    98:37:87:d7:fe:4a:43:49:0a:89:2c:f1:58:7f:4f:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:08:E8:6C:CD:68:6E:60:D3:9F:09:06:C3:BA:52:AD:0F:79:84:0F
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a3a2f33332d3333203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128::/33

    Signature Algorithm: sha256WithRSAEncryption
         9e:ec:54:4f:25:67:68:5e:4d:c4:17:23:b8:1d:9e:db:fe:41:
         c7:90:c7:b5:a8:0b:d4:8a:f5:70:e7:9b:9f:4d:c7:b3:ac:a3:
         6a:5e:58:63:48:d6:29:4d:56:a4:3e:df:26:c6:35:c3:f0:69:
         21:1e:79:3b:0b:1b:75:54:25:eb:f4:7f:2f:04:2c:5d:fe:5f:
         59:fa:a3:78:64:7a:32:11:d3:0d:1f:44:78:b1:dc:12:ba:a2:
         6e:a3:e5:64:db:fc:98:95:a6:d2:c5:68:eb:62:7e:cc:3a:1b:
         a1:90:96:63:82:65:e3:b2:bb:8f:ba:0b:4e:cd:65:2e:3b:eb:
         70:ef:ab:07:d4:be:13:40:e5:ff:e9:b7:33:1e:fe:ad:3f:cf:
         15:37:77:b9:b2:88:f8:40:79:72:02:55:c0:f0:8f:68:1e:30:
         96:d7:16:b0:fb:ce:46:b6:f0:23:59:76:b3:84:15:af:a2:19:
         24:dc:cf:8f:73:b3:c4:01:bb:ae:8d:8c:5f:c3:ac:cd:61:a6:
         a5:f4:bb:0b:4f:41:8a:63:37:1f:78:d5:e9:9b:db:29:0e:b8:
         62:f1:d6:99:b3:72:c9:9f:9c:8a:97:c2:ab:6b:9e:5d:a5:43:
         7d:dc:d5:c9:2e:80:16:22:1c:ff:07:71:87:20:7a:93:66:95:
         9b:9f:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net