Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a3a2f33332d3333203d3e203533313533.roa
File:                     323830343a3733383a3a2f33332d3333203d3e203533313533.roa (raw, json)
Hash identifier:          Pt2H6fuYke58CwrttZ+/gCCPhf4nYlaI6UR66nm5PMc=
Subject key identifier:   84:8A:69:F3:84:15:64:A8:51:6E:02:D0:F5:6A:7E:FA:23:23:89:27
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       3F9D103EEBE2F563114DCFD8046734BA38ED215D
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a3a2f33332d3333203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:19:50 +0000
ROA not before:           Fri 24 May 2024 14:14:50 +0000
ROA not after:            Fri 23 May 2025 14:19:50 +0000
asID:                     53153
IP address blocks:        2804:738::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9d:10:3e:eb:e2:f5:63:11:4d:cf:d8:04:67:34:ba:38:ed:21:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:14:50 2024 GMT
            Not After : May 23 14:19:50 2025 GMT
        Subject: CN=848A69F3841564A8516E02D0F56A7EFA23238927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:72:6a:c3:d6:e3:a5:e7:1b:4e:99:af:53:
                    4c:fc:1b:e3:a2:fd:6b:e0:fd:0a:00:a3:73:ba:6f:
                    37:cd:d6:09:ab:f1:49:9c:ba:a3:1a:70:3f:8c:9a:
                    c7:8f:74:1b:84:34:c8:44:79:25:df:db:65:7d:7e:
                    82:a0:05:c8:ec:69:6c:f5:ae:41:89:66:7a:6c:23:
                    56:84:cb:9f:dc:46:05:bd:b5:79:53:95:f3:a9:4f:
                    82:41:d9:cc:ec:b3:ba:4d:a8:ea:33:2f:7c:2a:06:
                    da:cd:ad:e6:8e:f1:6d:18:2a:56:6b:4e:a3:95:07:
                    93:eb:5a:f8:13:e2:e9:c2:04:98:3d:82:f8:9a:1e:
                    35:fd:17:15:c9:29:8f:25:dc:bb:d0:35:02:1e:14:
                    1b:5e:30:44:e5:59:1c:cd:26:20:d1:26:97:0a:f8:
                    62:07:de:ff:84:6b:50:00:36:9d:be:a2:f8:c0:c9:
                    53:12:f8:01:bd:42:c0:c6:94:61:e2:20:29:b6:17:
                    a6:af:94:38:23:9e:c2:ad:bf:3b:66:df:fd:e4:22:
                    f3:88:af:38:d1:0b:d3:8e:dc:e9:da:90:52:1f:68:
                    0b:d4:f3:26:b9:19:4d:a5:4f:b5:06:d9:76:79:32:
                    77:b1:ed:22:ae:8e:49:57:21:4e:4c:9f:c5:ba:73:
                    fa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8A:69:F3:84:15:64:A8:51:6E:02:D0:F5:6A:7E:FA:23:23:89:27
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a3a2f33332d3333203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:738::/33

    Signature Algorithm: sha256WithRSAEncryption
         93:0d:31:dc:2b:f0:dc:72:fe:72:c1:c8:9e:56:55:df:58:ac:
         63:04:d1:d5:96:99:d9:07:f7:a5:11:b0:ea:26:ae:1a:51:61:
         73:27:10:0c:a9:f9:44:16:81:a7:be:09:4e:53:39:fb:30:ac:
         9f:52:d6:53:46:4c:01:c3:f3:fd:c0:d0:8f:d6:18:0b:0f:db:
         8d:48:a9:40:11:03:27:9e:48:3f:a0:e8:2c:38:b2:07:bd:05:
         d3:0f:2b:bd:fa:f4:ff:28:8e:6a:4b:1e:75:67:76:1e:dd:d6:
         21:a6:61:23:cf:b0:72:db:f5:38:12:34:b1:ff:e5:96:51:33:
         7f:3d:3c:e4:e5:2e:95:d4:2e:75:1b:2f:ab:f8:2f:63:7e:5e:
         79:dc:7a:59:7d:8f:a3:a4:5e:4b:4c:51:0f:90:1e:01:f0:3e:
         73:db:00:9c:9d:7c:74:4d:84:9c:84:7d:c5:5b:d6:fe:8d:8d:
         62:44:37:bf:5a:9f:74:e4:bf:bf:1d:58:37:e8:1b:e8:7b:21:
         ee:1c:21:25:4c:c3:ab:e3:4c:6a:7e:14:e9:8c:ca:17:1c:20:
         c6:51:cb:61:fb:94:88:0a:e2:3e:44:a2:99:9d:32:75:59:d6:
         5f:2c:b5:c2:65:e8:57:a4:9b:96:97:3c:f6:ca:6a:b0:7b:f9:
         32:37:ad:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:59:36 2024 by rpki-client on console-fra.rpki-client.org