Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/323830343a373935303a383130303a3a2f34302d3430203d3e20323731323938.roa
File:                     323830343a373935303a383130303a3a2f34302d3430203d3e20323731323938.roa (raw, json)
Hash identifier:          DQ0lHjWRmyUolQOBO9G/yihJXuaxvteAOFX4o5jCOSs=
Subject key identifier:   63:BD:D9:21:AD:AF:33:75:4C:49:5B:5F:93:B8:DF:80:1C:CA:1D:B4
Certificate issuer:       /CN=4151665D0EB84AB3092E3766EA6EA61155041F3D
Certificate serial:       15403D53F7D34E38B9B8B72E4FC3468D5EC34DDC
Authority key identifier: 41:51:66:5D:0E:B8:4A:B3:09:2E:37:66:EA:6E:A6:11:55:04:1F:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/323830343a373935303a383130303a3a2f34302d3430203d3e20323731323938.roa
Signing time:             Wed 03 Apr 2024 23:04:42 +0000
ROA not before:           Wed 03 Apr 2024 22:59:42 +0000
ROA not after:            Wed 02 Apr 2025 23:04:42 +0000
asID:                     271298
IP address blocks:        2804:7950:8100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:40:3d:53:f7:d3:4e:38:b9:b8:b7:2e:4f:c3:46:8d:5e:c3:4d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4151665D0EB84AB3092E3766EA6EA61155041F3D
        Validity
            Not Before: Apr  3 22:59:42 2024 GMT
            Not After : Apr  2 23:04:42 2025 GMT
        Subject: CN=63BDD921ADAF33754C495B5F93B8DF801CCA1DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:13:57:f3:4b:d2:c1:ae:b8:1d:ef:ec:48:
                    40:33:fb:40:2f:e5:c7:82:93:ea:b8:e6:b5:8d:84:
                    5a:b4:74:da:54:22:4f:9a:dd:95:f6:af:8b:d2:11:
                    3d:37:88:08:5a:24:16:ec:b4:08:45:53:67:33:e1:
                    1c:63:bf:46:22:d9:56:96:15:8a:0e:97:9a:b2:2b:
                    7e:53:74:5c:c0:09:48:8f:93:c1:40:dc:da:15:d1:
                    c1:a4:3f:9b:7c:b5:f9:67:cd:c4:f9:f4:f6:f1:1f:
                    55:82:46:78:e1:72:7c:85:76:bf:59:0d:fb:4c:a9:
                    57:bd:8d:38:66:c6:53:ab:a2:18:c3:10:21:bd:d9:
                    e8:aa:ae:36:61:aa:6d:af:da:d5:ec:b9:91:e3:37:
                    4c:02:ee:2d:47:4f:ee:79:6c:c1:c0:7b:7d:46:f5:
                    7b:fa:ed:09:2a:5b:74:43:8c:db:56:c4:c1:0b:e6:
                    0f:89:41:f7:e6:69:06:55:8b:b2:a1:25:b8:5e:19:
                    8d:b8:e0:30:21:b9:dc:61:d2:1c:62:ef:08:4c:f8:
                    d3:e4:aa:ce:82:31:c4:f8:03:de:b4:88:03:d1:72:
                    94:60:70:86:21:71:61:cb:95:ce:60:4d:4c:11:44:
                    8d:4f:1f:57:69:b8:78:4b:6f:77:01:cf:67:e8:14:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BD:D9:21:AD:AF:33:75:4C:49:5B:5F:93:B8:DF:80:1C:CA:1D:B4
            X509v3 Authority Key Identifier:
                keyid:41:51:66:5D:0E:B8:4A:B3:09:2E:37:66:EA:6E:A6:11:55:04:1F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/323830343a373935303a383130303a3a2f34302d3430203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:8e:b7:bf:3c:9e:ac:ef:f4:d7:a6:c1:a5:c2:c1:9d:ad:37:
         4b:06:28:69:a1:10:cc:a3:06:ff:d8:b8:de:36:ec:be:90:9b:
         36:10:80:77:cd:9c:17:14:b7:bf:63:b5:fb:e3:e8:82:63:de:
         5b:c3:d4:39:c0:58:ff:fc:83:78:91:28:8d:63:1e:6c:a3:37:
         62:fa:19:d7:2d:f2:0f:f0:0a:cf:22:35:c1:c9:95:10:50:92:
         2a:15:ba:f6:f5:69:4c:93:05:6f:90:6c:63:09:ea:43:a4:3d:
         89:9f:dd:c2:b1:5c:41:0a:18:74:46:b0:92:cc:a0:15:36:32:
         c7:22:99:c2:ce:d7:c7:83:80:2e:7c:24:15:71:1b:50:af:ef:
         9c:97:88:e6:49:43:cf:fd:d0:5e:bc:5a:d3:21:66:b2:48:31:
         04:89:96:a3:89:4b:01:93:1a:4c:94:a2:ef:35:54:fa:0d:4c:
         db:ca:0f:e3:2c:7e:ee:06:22:24:fa:21:20:16:dc:79:bb:5d:
         b1:28:f7:53:d9:7a:97:0a:f6:85:c3:f1:6a:f4:8a:97:e6:15:
         82:7c:ee:b7:a1:c5:06:4a:e3:d5:d3:17:b9:27:b7:37:83:8b:
         93:60:a6:44:e2:64:05:a2:86:e6:e0:82:a7:40:4c:35:e7:11:
         f1:6e:f2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 14:08:36 2024 by rpki-client on console-fra.rpki-client.org