Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2/323830343a323431633a3a2f33322d313238203d3e20323634323032.roa
File:                     323830343a323431633a3a2f33322d313238203d3e20323634323032.roa (raw, json)
Hash identifier:          uGfzH5RwB5HS6a9VRMpPW3ilhouG+QbLlbIOLMp+WlQ=
Subject key identifier:   99:29:60:D6:84:00:D6:A9:80:5F:9C:8F:AC:D9:85:E2:E5:34:70:67
Certificate issuer:       /CN=4178BB74E28D29CBC8D123A4F3CE26B160CC5C82
Certificate serial:       4411B0F771EC2CBF64B7EA2051FFC0E22CB091B6
Authority key identifier: 41:78:BB:74:E2:8D:29:CB:C8:D1:23:A4:F3:CE:26:B1:60:CC:5C:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2/323830343a323431633a3a2f33322d313238203d3e20323634323032.roa
Signing time:             Thu 04 Apr 2024 01:52:34 +0000
ROA not before:           Thu 04 Apr 2024 01:47:34 +0000
ROA not after:            Thu 03 Apr 2025 01:52:34 +0000
asID:                     264202
IP address blocks:        2804:241c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:11:b0:f7:71:ec:2c:bf:64:b7:ea:20:51:ff:c0:e2:2c:b0:91:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4178BB74E28D29CBC8D123A4F3CE26B160CC5C82
        Validity
            Not Before: Apr  4 01:47:34 2024 GMT
            Not After : Apr  3 01:52:34 2025 GMT
        Subject: CN=992960D68400D6A9805F9C8FACD985E2E5347067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:00:2c:47:ad:73:b3:49:bc:3d:c6:8c:f2:
                    a6:7d:a2:dd:f0:68:23:49:95:a3:51:84:70:86:7d:
                    56:5c:63:33:25:83:c8:8d:45:a9:b0:29:5c:89:b3:
                    d7:1d:6c:ae:88:88:df:a9:39:0a:52:5c:5b:84:8c:
                    52:f1:80:59:45:9e:7a:17:1f:22:df:1a:01:10:7c:
                    6c:73:71:04:e0:2c:be:13:13:3c:ee:9b:f4:90:81:
                    5b:71:0e:6e:ae:c0:09:56:b9:4f:95:05:48:cf:0e:
                    ac:b1:af:97:e2:11:61:bb:32:4e:2c:54:73:7a:80:
                    1a:37:13:85:63:24:c5:7e:40:84:36:84:1b:19:c4:
                    bd:3c:04:ce:9d:57:18:42:7b:9d:64:8e:ce:16:43:
                    fd:87:ff:3c:59:8b:b0:89:a9:9a:41:68:f8:19:87:
                    f1:2d:d1:2f:76:e4:b9:1c:ad:5b:f6:dd:65:59:1b:
                    23:39:3c:16:60:ad:4f:d1:dd:3b:f2:a8:d6:bb:73:
                    6a:29:a1:1f:28:ef:ac:9b:b8:63:6d:e6:19:52:b0:
                    e9:29:c2:48:b9:ee:5c:19:fe:18:d1:80:f5:eb:09:
                    3d:20:c5:78:50:c8:b8:b5:4a:80:81:14:6b:61:4f:
                    76:4f:f5:69:5f:83:2b:93:c2:47:cc:ec:25:19:98:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:29:60:D6:84:00:D6:A9:80:5F:9C:8F:AC:D9:85:E2:E5:34:70:67
            X509v3 Authority Key Identifier:
                keyid:41:78:BB:74:E2:8D:29:CB:C8:D1:23:A4:F3:CE:26:B1:60:CC:5C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2/4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2/323830343a323431633a3a2f33322d313238203d3e20323634323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:241c::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:91:9b:92:e5:89:e7:60:46:6a:d9:5d:ad:a1:01:f0:c3:6d:
         07:ce:c9:71:58:e1:19:ca:69:8e:15:6f:10:a2:53:22:90:63:
         50:39:76:65:1f:b5:3b:d2:4b:c2:ec:ab:a2:49:0d:cd:be:bd:
         e6:06:b3:53:62:7d:5a:6c:f5:6c:f5:df:50:d8:b5:13:ab:b6:
         10:8a:f2:26:3b:3f:cb:b2:91:1a:67:fb:2f:6c:cd:91:0d:ad:
         08:99:c5:ab:7b:ac:22:9c:c9:19:9d:d1:d2:07:33:80:ac:ea:
         2b:f2:84:76:da:7f:8c:40:a4:0d:08:34:20:ac:af:7a:07:7a:
         f1:d7:7f:1b:d9:d2:b6:73:62:ca:54:f5:3b:a8:97:c5:9e:4f:
         e0:0e:2a:47:e9:ef:28:7b:e2:ff:55:d0:fd:af:fc:66:32:db:
         36:46:1d:ee:0e:5d:31:e7:c2:e2:c8:21:b0:68:0c:3c:01:05:
         89:1d:b0:be:f0:87:98:0a:51:2b:3b:59:15:2f:eb:1a:d6:d1:
         cc:8f:eb:7b:1a:38:0b:17:eb:4b:be:0c:52:ab:6b:62:0e:5b:
         61:39:ec:9c:b9:27:a2:4a:98:03:fe:9f:c5:62:5d:5c:16:92:
         0c:c0:ef:b4:db:ed:62:13:67:97:16:34:32:fe:ce:54:30:69:
         8d:a2:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 22:31:05 2024 by rpki-client on console-fra.rpki-client.org