Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a3a2f33342d3334203d3e20323633363631.roa
File:                     323830343a313132383a3a2f33342d3334203d3e20323633363631.roa (raw, json)
Hash identifier:          jafMT3jLETv6xsKcA9Xlo1I5CSbeMqyzkiwsx/9Vq7g=
Subject key identifier:   AB:CB:F8:EF:2E:76:07:C5:5A:96:8B:EB:EE:B2:F8:36:09:EA:C5:EE
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       5475D58CA213AE2190BDD250DF0DD5D30C20B311
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a3a2f33342d3334203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:22:55 +0000
ROA not before:           Mon 04 Mar 2024 21:17:55 +0000
ROA not after:            Mon 03 Mar 2025 21:22:55 +0000
asID:                     263661
IP address blocks:        2804:1128::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:75:d5:8c:a2:13:ae:21:90:bd:d2:50:df:0d:d5:d3:0c:20:b3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:17:55 2024 GMT
            Not After : Mar  3 21:22:55 2025 GMT
        Subject: CN=ABCBF8EF2E7607C55A968BEBEEB2F83609EAC5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:cc:cb:e2:4b:b9:20:b2:ba:4c:6b:db:a7:
                    d9:41:1d:0c:14:e5:b0:a6:08:6a:da:dd:37:6d:70:
                    88:45:cb:f9:11:78:d9:ce:21:57:1c:96:07:c2:3f:
                    92:b7:05:35:14:4b:79:35:e3:d4:d9:2f:aa:df:0f:
                    37:2f:01:b7:52:0b:65:88:28:e1:de:ed:f3:a5:d9:
                    49:65:01:bf:03:e5:87:88:34:6f:68:08:49:d7:83:
                    25:ae:b8:17:b5:14:74:b3:9b:9e:10:6c:5c:8e:be:
                    0b:bc:f7:26:c1:80:b6:25:6a:e8:d1:17:3c:da:83:
                    2c:46:27:a1:0c:a5:14:64:af:5b:f3:14:f6:d2:33:
                    fb:af:91:a2:5d:fd:29:8b:58:46:be:6f:02:6b:05:
                    e0:62:8e:48:36:f6:1f:04:38:16:75:98:4c:54:46:
                    cf:13:31:02:5b:9c:57:5d:ba:b0:e1:41:95:7a:f7:
                    e2:87:53:1a:97:5e:5a:4c:c9:1a:fa:db:a1:aa:56:
                    e6:ea:cf:73:1e:29:10:0c:8b:5f:b8:07:bd:c7:f5:
                    67:11:65:51:11:fc:64:90:6a:18:71:26:63:df:6f:
                    2d:23:c0:98:02:e0:ea:dc:65:53:5e:79:b2:09:45:
                    c9:6c:a2:87:3e:65:b6:cd:be:c3:cf:b6:a0:19:27:
                    da:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CB:F8:EF:2E:76:07:C5:5A:96:8B:EB:EE:B2:F8:36:09:EA:C5:EE
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a3a2f33342d3334203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:b3:82:88:da:02:95:ae:dc:dd:c4:d5:52:12:da:2e:88:ab:
         7d:c9:38:24:01:c1:cb:61:19:80:d4:bf:d2:14:e4:77:77:04:
         58:f7:76:82:3d:25:75:69:73:0b:81:bb:f0:11:d2:07:33:33:
         a2:17:c0:59:18:93:38:6d:af:73:7e:ab:fd:5f:14:b0:62:76:
         72:e9:d0:c4:fd:24:71:c9:4e:61:e5:0c:c7:3c:2c:fe:94:70:
         30:b9:0b:aa:ba:65:08:bb:64:99:a0:ff:95:be:c6:49:bd:ec:
         57:69:17:90:52:30:20:f0:f0:d9:7e:94:57:ac:e6:0e:b2:fc:
         e1:2d:cc:fa:a9:3a:47:00:f4:db:eb:a3:49:bc:dc:2d:57:4a:
         e9:67:1e:ae:e4:cc:fb:f2:9e:88:df:e6:c5:1e:25:5b:c3:60:
         5b:89:fc:e7:77:6f:f2:48:32:fc:5e:08:11:9f:70:90:bb:dc:
         b7:1e:8e:dd:74:59:16:13:00:09:b1:a3:5e:d2:36:aa:18:a0:
         ef:ee:70:40:03:a9:28:01:a3:a5:1e:38:07:5e:98:ac:ef:a4:
         b7:c7:c8:e2:90:95:d6:a2:8a:62:c1:de:22:82:e3:34:c2:30:
         60:13:64:11:d6:1e:e2:28:73:9e:29:25:75:0e:83:10:e9:f9:
         25:cb:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net