Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/323830343a316633633a3a2f33362d313238203d3e203532393130.roa
File:                     323830343a316633633a3a2f33362d313238203d3e203532393130.roa (raw, json)
Hash identifier:          m6iF7y981LtMdJWVgjGuqtUZidFcoGVyHt2MRQeHpeI=
Subject key identifier:   21:B4:F7:AB:52:2E:24:10:3E:9F:76:29:B1:9B:E7:3B:15:CC:28:22
Certificate issuer:       /CN=0A81FA7160395D5A9A91E83E7E60BEC8D1DA645D
Certificate serial:       118209AA815122570354C64B19C62FAF440E47D5
Authority key identifier: 0A:81:FA:71:60:39:5D:5A:9A:91:E8:3E:7E:60:BE:C8:D1:DA:64:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A81FA7160395D5A9A91E83E7E60BEC8D1DA645D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/323830343a316633633a3a2f33362d313238203d3e203532393130.roa
Signing time:             Wed 17 Apr 2024 13:44:28 +0000
ROA not before:           Wed 17 Apr 2024 13:39:28 +0000
ROA not after:            Wed 16 Apr 2025 13:44:28 +0000
asID:                     52910
IP address blocks:        2804:1f3c::/36 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:82:09:aa:81:51:22:57:03:54:c6:4b:19:c6:2f:af:44:0e:47:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A81FA7160395D5A9A91E83E7E60BEC8D1DA645D
        Validity
            Not Before: Apr 17 13:39:28 2024 GMT
            Not After : Apr 16 13:44:28 2025 GMT
        Subject: CN=21B4F7AB522E24103E9F7629B19BE73B15CC2822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:99:74:6b:38:69:22:90:2c:71:e4:2f:80:c9:
                    44:68:3e:ac:f2:ed:96:17:90:e7:84:a1:f7:2d:2c:
                    e3:1d:23:7c:47:46:5d:f4:0e:ec:78:ca:79:ed:b4:
                    7b:23:84:0c:b1:65:b9:15:29:5f:37:c0:e3:aa:68:
                    44:77:74:ac:b2:e6:1a:54:a0:b8:16:a5:2a:47:f6:
                    fb:62:66:5c:f9:0f:4c:e7:03:9c:26:2d:74:46:a5:
                    f5:38:43:fb:45:f0:d2:79:17:02:a4:ae:a2:09:ff:
                    c5:06:1e:ea:1f:4c:1f:d1:ad:a0:83:23:50:96:76:
                    63:6a:53:8c:a0:b0:72:19:3e:90:c6:90:f2:7a:fd:
                    fa:3b:27:b3:e3:1f:15:58:18:ed:a9:23:48:74:44:
                    a5:1d:74:3d:14:49:94:17:7f:79:89:c0:16:1b:bd:
                    75:87:0c:19:8b:f3:85:98:88:79:4e:df:98:bb:8d:
                    b0:c1:91:8c:75:a6:10:07:b5:c7:a9:73:08:a8:a4:
                    76:eb:89:a4:3c:61:65:af:f5:49:20:2a:7d:f7:86:
                    01:cc:ec:58:76:eb:e3:09:9e:74:13:15:cf:9e:46:
                    06:2b:e3:09:1a:5c:93:e7:7c:41:10:0d:54:bc:fb:
                    0a:b3:d6:17:1d:63:c6:36:6c:b8:f5:91:4f:1b:12:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B4:F7:AB:52:2E:24:10:3E:9F:76:29:B1:9B:E7:3B:15:CC:28:22
            X509v3 Authority Key Identifier:
                keyid:0A:81:FA:71:60:39:5D:5A:9A:91:E8:3E:7E:60:BE:C8:D1:DA:64:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/0A81FA7160395D5A9A91E83E7E60BEC8D1DA645D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A81FA7160395D5A9A91E83E7E60BEC8D1DA645D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/323830343a316633633a3a2f33362d313238203d3e203532393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f3c::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:44:89:ea:77:27:25:bd:2a:56:d5:c9:8a:1d:15:bc:ed:ca:
         9c:0c:6d:02:18:b0:9f:ce:2a:28:f5:de:d3:cd:a4:03:47:ca:
         a8:a1:c1:d3:9b:12:fd:e8:37:00:8c:a6:ce:de:54:e4:62:12:
         f9:35:79:f2:95:a9:53:ad:c9:05:e0:c5:b0:1d:d1:41:cc:6c:
         cf:49:fe:69:e8:83:ef:4a:c4:ef:d7:c3:d7:59:1e:c7:70:90:
         ea:1e:33:d3:7c:6a:2c:40:30:89:82:6d:4f:43:81:68:99:37:
         2d:1c:26:8b:60:62:00:b7:3b:bb:fb:32:5b:58:52:f3:07:85:
         ea:71:15:3d:68:7d:93:83:8d:74:b0:45:95:09:1a:61:98:20:
         be:41:15:03:46:34:b1:d0:c9:3a:a2:fe:46:f0:7b:b8:ac:73:
         35:7e:6d:26:11:a9:07:e5:91:a8:3e:0a:fc:0a:e5:ed:47:b6:
         58:b3:ef:dc:9f:0f:f4:7d:39:38:a9:c8:cd:bd:b3:6c:6e:6b:
         8b:80:bf:9d:90:40:ec:09:3e:03:10:fc:67:53:86:24:de:93:
         43:5f:1c:70:dc:cf:3d:a4:28:70:b9:b7:d5:fd:ec:d1:aa:ef:
         53:76:9c:79:6d:06:1a:b8:4a:e4:37:08:61:2d:29:95:24:9f:
         32:e9:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 13:19:02 2024 by rpki-client on console-fra.rpki-client.org