Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/323830343a356665383a3a2f33322d313238203d3e20323639313331.roa
File:                     323830343a356665383a3a2f33322d313238203d3e20323639313331.roa (raw, json)
Hash identifier:          Yg+XIfQmBqcJ1Gn7zaDrEs8LKx+WyBzBkR8oQcGtEcA=
Subject key identifier:   4E:7F:12:62:81:3E:6D:A2:04:5C:CE:48:E2:23:1F:EC:95:71:63:83
Certificate issuer:       /CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520
Certificate serial:       44EC61D9DC8FCF79C6DB131A6AC595ADD680AA3C
Authority key identifier: 29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/323830343a356665383a3a2f33322d313238203d3e20323639313331.roa
Signing time:             Thu 04 Apr 2024 00:33:14 +0000
ROA not before:           Thu 04 Apr 2024 00:28:14 +0000
ROA not after:            Thu 03 Apr 2025 00:33:14 +0000
asID:                     269131
IP address blocks:        2804:5fe8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ec:61:d9:dc:8f:cf:79:c6:db:13:1a:6a:c5:95:ad:d6:80:aa:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520
        Validity
            Not Before: Apr  4 00:28:14 2024 GMT
            Not After : Apr  3 00:33:14 2025 GMT
        Subject: CN=4E7F1262813E6DA2045CCE48E2231FEC95716383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:78:d9:3a:2c:88:6f:0e:c3:f3:eb:9e:fb:51:
                    1a:d1:5d:60:50:e0:4f:75:dd:20:e8:fc:a4:33:a4:
                    b5:2d:a6:ba:cf:af:3e:2e:2c:13:a8:14:93:e6:20:
                    fe:ed:b7:9e:e6:02:27:41:55:64:99:e1:c1:68:90:
                    97:9a:61:c0:06:70:af:86:ed:cd:d6:38:31:0f:5b:
                    ee:7d:79:21:41:7b:84:f3:ec:95:05:5f:3f:14:b8:
                    54:fb:e9:1c:d1:27:ef:a6:ed:56:38:e7:f9:00:d5:
                    02:73:c2:a7:e0:f2:fb:7b:f3:f4:9f:9f:89:e4:22:
                    fb:f7:9a:2e:b5:15:c3:4b:f5:bd:66:ef:2f:e0:9d:
                    3d:c6:d4:64:51:eb:b3:72:19:1e:d8:a7:6c:6f:35:
                    50:b3:fd:08:26:cb:77:74:62:49:4e:9c:0c:2e:52:
                    3d:af:8c:8e:b9:b7:06:62:8e:bc:cf:d7:fa:a0:be:
                    ea:60:e6:47:3b:d6:2f:7b:30:27:04:ae:7f:82:12:
                    72:e4:d4:45:cb:d0:2b:d8:d7:81:39:29:69:5a:e4:
                    f6:85:c8:72:8f:2d:b2:1d:88:92:e0:19:68:b4:58:
                    8a:21:b9:aa:f0:ae:ba:50:58:82:ba:27:ec:3b:ad:
                    34:1b:da:91:2c:98:83:de:c4:09:d9:fa:a8:21:f0:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7F:12:62:81:3E:6D:A2:04:5C:CE:48:E2:23:1F:EC:95:71:63:83
            X509v3 Authority Key Identifier:
                keyid:29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/323830343a356665383a3a2f33322d313238203d3e20323639313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:3e:58:89:60:15:13:b9:61:9f:e2:74:9a:9e:35:f9:ab:2a:
         99:37:d7:68:6c:b8:79:38:b9:47:f0:68:c3:67:3a:88:09:e3:
         aa:61:5d:d2:e1:b6:db:41:69:20:c0:67:d9:0b:02:c4:97:de:
         ec:d0:fc:62:18:28:2d:9b:cf:22:f2:c3:44:74:b9:de:2b:de:
         8e:8b:b3:55:ba:5c:be:d8:e9:67:06:57:f0:16:de:73:88:ee:
         f2:93:64:f8:7e:e0:29:c2:e1:a3:24:1f:bf:5a:8b:7f:14:6b:
         c5:12:e4:69:92:8d:96:b1:3d:90:45:96:0b:74:e3:c1:58:96:
         9a:e3:13:9f:b3:38:73:57:5f:f0:98:66:16:92:e7:07:4d:56:
         b5:cc:a9:3a:19:f2:bd:c1:1a:b4:3a:be:d8:b9:5d:06:a8:87:
         5e:25:a6:63:1c:86:56:d5:ac:2e:de:77:96:70:24:01:04:ae:
         7c:be:1b:8b:66:35:dd:ed:f2:df:22:3c:a4:54:b7:08:2c:15:
         8b:f3:31:cf:10:26:a3:69:69:d1:6b:28:35:42:9d:6f:b6:f2:
         9e:19:ff:54:ad:e1:7a:ff:81:0a:51:ee:43:4f:8a:a4:aa:e2:
         a8:a4:fc:6a:e6:c6:00:07:01:5b:14:c7:ae:f9:01:b3:f4:78:
         e3:7a:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org