Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32643a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a32643a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          wl0hpJJ/W7CwLkXA3VRgkpeZQSs+8BV9UU06+Lmleyc=
Subject key identifier:   A7:AC:1C:47:FD:C5:8D:4B:B6:94:C3:AF:9C:3D:D8:2C:EF:A7:BB:22
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       37C6E651EE23F3CD0BF548B1C00E3035B150CB06
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32643a3a2f34382d3438203d3e203631383332.roa
Signing time:             Wed 07 Jun 2023 16:38:13 +0000
ROA not before:           Wed 07 Jun 2023 16:33:13 +0000
ROA not after:            Wed 05 Jun 2024 16:38:13 +0000
asID:                     61832
IP address blocks:        2804:1a04:2d::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c6:e6:51:ee:23:f3:cd:0b:f5:48:b1:c0:0e:30:35:b1:50:cb:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Jun  7 16:33:13 2023 GMT
            Not After : Jun  5 16:38:13 2024 GMT
        Subject: CN=A7AC1C47FDC58D4BB694C3AF9C3DD82CEFA7BB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:64:b8:61:d8:95:06:6a:f8:ef:62:b8:12:
                    8c:37:43:7e:9c:7b:4d:79:30:91:e6:da:b4:ac:b1:
                    dd:ca:b3:ab:a5:00:af:42:20:c3:1f:0b:00:09:48:
                    18:6b:65:57:cc:61:73:0e:37:e3:e8:6c:5a:4e:93:
                    aa:d4:08:8b:90:a4:85:14:10:79:da:aa:ff:88:c0:
                    4c:4f:43:93:e8:06:20:57:fe:6c:fd:49:fc:96:e7:
                    ab:1e:5c:43:69:43:80:38:5e:5d:88:51:67:87:83:
                    e1:d8:77:5d:11:cb:9a:a9:cf:cd:7d:14:d1:d0:e7:
                    11:d0:bd:be:1c:39:91:1d:67:08:4c:fa:eb:5f:4f:
                    d0:cd:39:4f:42:ed:b8:b1:fd:7a:97:6a:86:b5:24:
                    ed:88:57:ff:94:f1:a8:b9:ae:e8:01:45:90:93:2d:
                    58:c6:51:35:10:4a:5c:c5:d6:8c:72:62:d9:8f:14:
                    56:fc:80:4d:3b:9e:ef:30:e6:bb:c6:47:d3:10:a4:
                    4f:73:eb:0b:c4:6f:0f:18:95:3e:4a:d4:a3:fc:70:
                    6b:82:fd:c0:55:f5:fd:e9:ba:bb:b7:3b:c7:56:db:
                    a4:74:75:f9:0c:5d:97:fd:89:0b:62:5b:8a:3f:45:
                    c5:9c:eb:f1:45:29:68:e8:0d:13:5b:87:4f:4b:b9:
                    f0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AC:1C:47:FD:C5:8D:4B:B6:94:C3:AF:9C:3D:D8:2C:EF:A7:BB:22
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32643a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:2d::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:e0:56:3f:3e:80:6a:4f:e3:33:0f:f2:4f:64:8d:03:df:e6:
         d3:97:8d:8b:99:4e:37:22:a3:d5:06:76:a6:9e:ce:da:59:11:
         0a:26:fb:f1:8f:95:22:10:55:bb:06:0b:17:a7:54:ea:bc:38:
         0d:d9:ff:4d:83:f3:60:c4:2c:89:c0:af:ca:e1:2e:ef:68:fd:
         e2:8f:85:9c:d8:a2:0f:48:35:f2:1a:fc:05:4f:a3:8f:5a:1b:
         41:07:ce:bd:0b:9d:3c:fb:bc:8d:d4:9f:7f:94:85:84:5a:01:
         d8:c9:e6:ac:29:81:2b:10:d3:b8:cb:45:e1:01:3c:e8:af:93:
         ef:bd:67:a3:7e:55:cd:97:ba:ba:b6:90:f9:d9:65:06:6b:b2:
         15:bb:47:c4:a9:78:e7:07:4e:f4:31:d2:89:28:f5:b7:46:06:
         74:50:ec:bc:57:8c:25:38:d2:3f:a9:5f:30:8e:c0:d2:9c:41:
         33:0b:71:83:b7:ea:d9:e1:33:3d:29:06:c0:94:ca:9f:91:5a:
         35:58:56:e0:2d:0a:6d:33:29:bd:3e:91:86:db:8e:bb:60:32:
         cb:bd:f6:94:27:a3:15:b4:a8:33:75:6d:69:5c:d9:07:67:3d:
         2f:24:f5:a1:c1:3c:06:62:d2:58:8b:14:48:a2:3b:25:fa:77:
         d7:38:64:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:17 2024 by rpki-client on console-fra.rpki-client.org