Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/323830343a373935303a3a2f33332d3438203d3e20323731323938.roa
File:                     323830343a373935303a3a2f33332d3438203d3e20323731323938.roa (raw, json)
Hash identifier:          LyQ+Zk6YTLVZ9SmMTRUi4rBn+IP3EjvLY6SuhqBEQrM=
Subject key identifier:   63:A2:92:E5:45:78:C8:7C:00:2D:72:B5:E2:AF:5D:0F:E4:02:E6:06
Certificate issuer:       /CN=4151665D0EB84AB3092E3766EA6EA61155041F3D
Certificate serial:       54933534563B61048D5B32CB8618760C121577A7
Authority key identifier: 41:51:66:5D:0E:B8:4A:B3:09:2E:37:66:EA:6E:A6:11:55:04:1F:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/323830343a373935303a3a2f33332d3438203d3e20323731323938.roa
Signing time:             Wed 03 Apr 2024 23:04:42 +0000
ROA not before:           Wed 03 Apr 2024 22:59:42 +0000
ROA not after:            Wed 02 Apr 2025 23:04:42 +0000
asID:                     271298
IP address blocks:        2804:7950::/33 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:93:35:34:56:3b:61:04:8d:5b:32:cb:86:18:76:0c:12:15:77:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4151665D0EB84AB3092E3766EA6EA61155041F3D
        Validity
            Not Before: Apr  3 22:59:42 2024 GMT
            Not After : Apr  2 23:04:42 2025 GMT
        Subject: CN=63A292E54578C87C002D72B5E2AF5D0FE402E606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c6:f1:89:63:b3:f7:1e:23:5f:5b:7b:1e:b4:
                    99:a4:46:e2:db:e4:29:53:bc:15:84:2c:7b:10:5f:
                    45:10:6d:f7:3f:b7:6c:5a:27:1b:ba:54:8d:7d:ea:
                    7a:f2:94:ee:4c:c0:d8:57:7d:80:18:4b:e4:95:fc:
                    d2:cf:d2:cf:00:b6:bc:29:27:1e:79:38:c6:74:7c:
                    a3:26:04:dd:a7:af:5d:ca:f5:61:ab:95:bd:4e:58:
                    53:52:0c:82:f1:9f:f4:51:6d:63:d0:9b:cd:ea:c2:
                    a0:93:c1:3e:65:8a:ec:c1:29:57:13:18:34:e3:cc:
                    47:dd:e1:30:4b:d1:72:05:26:61:f2:6d:3b:85:50:
                    20:f6:8b:d9:1c:69:4d:32:c1:2b:44:be:81:24:ea:
                    1f:1c:85:6c:59:0c:3f:9d:32:d2:d9:b8:35:f2:a7:
                    04:64:a0:4a:ce:53:18:57:5d:fc:35:d7:03:4a:1c:
                    3d:31:90:91:3d:a9:92:29:60:e6:cb:46:31:7b:a3:
                    53:17:97:bc:8b:65:7a:e2:78:06:05:5f:33:e4:2d:
                    06:09:60:a8:ae:9c:02:e5:95:92:80:db:be:e6:d6:
                    ef:93:31:d3:2a:9a:47:c1:c7:1b:3e:fc:13:83:1e:
                    bc:0c:c4:47:4f:55:f7:24:21:95:7e:8a:ea:50:ca:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A2:92:E5:45:78:C8:7C:00:2D:72:B5:E2:AF:5D:0F:E4:02:E6:06
            X509v3 Authority Key Identifier:
                keyid:41:51:66:5D:0E:B8:4A:B3:09:2E:37:66:EA:6E:A6:11:55:04:1F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/323830343a373935303a3a2f33332d3438203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:5d:3e:78:51:de:e6:b3:87:dc:e1:ce:1f:8e:fb:8b:2b:3a:
         2c:9f:25:50:ac:01:90:81:cc:70:0c:8d:fb:e4:94:2d:de:a3:
         40:2a:b9:72:42:74:e5:3f:99:7b:18:16:60:dd:1b:a2:80:7b:
         85:55:7c:33:11:45:db:eb:b3:40:a2:99:4e:2e:19:53:e2:4b:
         50:1a:ee:bf:36:53:bb:7a:25:85:a3:7d:a5:ae:cd:dc:43:e2:
         48:dd:09:4e:8d:be:91:6b:c6:12:f5:30:97:4f:9d:a7:d6:59:
         88:c3:23:0d:7d:17:17:77:2a:cb:2a:f3:a1:6d:dd:79:9d:78:
         53:4b:81:56:7a:23:12:32:6f:04:d9:24:cb:12:a4:3f:94:2a:
         ba:be:4f:9b:f8:bb:92:04:2a:8c:c2:47:3b:7b:c0:46:e3:86:
         26:97:4f:29:dd:ff:3a:83:7d:d2:c4:dd:a1:17:31:ff:cf:26:
         bf:d6:da:c9:b4:ec:24:cd:83:83:18:1d:86:cf:c4:89:3e:4d:
         57:98:d3:f8:86:a8:53:bd:b6:7d:0c:23:53:c7:f1:2c:cf:32:
         52:f4:aa:44:a8:2a:80:ff:ff:7d:0f:ff:49:b0:9d:10:1d:4f:
         93:ff:e6:87:54:47:1b:ac:6e:de:69:56:9f:f5:42:d0:b5:b3:
         08:92:2a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 14:08:36 2024 by rpki-client on console-fra.rpki-client.org