Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/1/323830343a363234383a3a2f33322d3334203d3e20323639323838.roa
File:                     323830343a363234383a3a2f33322d3334203d3e20323639323838.roa (raw, json)
Hash identifier:          sJkWOI+h990+xm9XWb8VF0aL7EHzWTKFomVJoaoJq1Q=
Subject key identifier:   21:C8:41:15:6D:4A:A8:E8:C4:61:F7:BB:D9:03:3F:3B:3A:C0:F9:BA
Certificate issuer:       /CN=0AD419187EE22733AD61156D6DE766ECFC0666F0
Certificate serial:       3125A7281497D38EEE1692CC15CDDB5AD837B2F1
Authority key identifier: 0A:D4:19:18:7E:E2:27:33:AD:61:15:6D:6D:E7:66:EC:FC:06:66:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AD419187EE22733AD61156D6DE766ECFC0666F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/1/323830343a363234383a3a2f33322d3334203d3e20323639323838.roa
Signing time:             Wed 03 Apr 2024 20:42:06 +0000
ROA not before:           Wed 03 Apr 2024 20:37:06 +0000
ROA not after:            Wed 02 Apr 2025 20:42:06 +0000
asID:                     269288
IP address blocks:        2804:6248::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:25:a7:28:14:97:d3:8e:ee:16:92:cc:15:cd:db:5a:d8:37:b2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD419187EE22733AD61156D6DE766ECFC0666F0
        Validity
            Not Before: Apr  3 20:37:06 2024 GMT
            Not After : Apr  2 20:42:06 2025 GMT
        Subject: CN=21C841156D4AA8E8C461F7BBD9033F3B3AC0F9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:88:27:fb:44:51:49:21:13:a2:7d:74:47:
                    87:ab:28:ab:85:26:5c:e1:61:d8:fd:83:71:3a:36:
                    fb:51:7a:94:c3:57:ab:6c:c2:f3:a2:e7:ff:d2:a3:
                    ea:82:8b:00:18:0c:da:0c:6d:2b:a3:52:50:6e:47:
                    0f:41:3d:02:e5:c2:e2:14:04:e9:02:25:fd:d9:74:
                    df:91:ef:88:af:53:2e:4d:ce:f2:0c:bf:12:32:a0:
                    0e:60:fa:e1:07:67:db:d6:6b:00:b0:49:e2:50:25:
                    f0:32:f8:d3:f0:c0:98:3c:9f:53:27:24:f9:c4:2f:
                    e5:fc:2e:c1:10:9c:9f:1e:4a:fb:8f:fd:66:5a:0d:
                    a5:25:e4:e9:e6:8c:fb:c4:93:c6:8e:71:fc:d4:08:
                    4a:4d:5d:2d:03:9f:67:4d:c3:5e:5c:36:3a:8a:94:
                    fc:9d:30:3a:d3:15:7d:b5:08:2e:bd:9a:3f:2f:f6:
                    ec:ff:b7:80:70:d5:49:f8:4d:72:8d:e3:c7:4c:4e:
                    3f:a5:f8:2f:49:29:3d:77:54:c1:dd:db:a0:f5:ff:
                    ef:60:c7:2e:04:2c:08:15:d7:68:9a:af:6a:ad:c5:
                    e0:80:d2:5d:cc:0b:e3:47:65:4a:06:c5:5e:84:4c:
                    b6:1b:67:62:46:f8:a1:70:ff:e4:de:b4:7a:26:80:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C8:41:15:6D:4A:A8:E8:C4:61:F7:BB:D9:03:3F:3B:3A:C0:F9:BA
            X509v3 Authority Key Identifier:
                keyid:0A:D4:19:18:7E:E2:27:33:AD:61:15:6D:6D:E7:66:EC:FC:06:66:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/1/0AD419187EE22733AD61156D6DE766ECFC0666F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AD419187EE22733AD61156D6DE766ECFC0666F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/1/323830343a363234383a3a2f33322d3334203d3e20323639323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6248::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:16:34:cf:e4:f2:39:d6:2f:bf:26:e8:39:e6:e1:ef:6f:dc:
         6c:f8:79:ee:47:e1:1a:de:a8:8d:d2:e1:86:4a:97:d2:33:09:
         8c:b7:de:aa:25:59:54:50:bb:3c:21:48:70:37:11:47:14:52:
         70:6c:73:96:ad:49:4e:d3:fb:f7:df:cd:71:bd:98:50:71:b5:
         16:53:4c:9e:2f:91:4f:36:8d:6b:61:a0:7c:09:e8:1d:92:56:
         fd:f7:0d:94:0c:58:d1:ac:a7:ea:ae:d6:7b:81:ac:18:d1:19:
         7e:54:7a:d5:08:af:5a:12:a8:13:c3:3f:71:49:a0:f2:22:a9:
         81:59:b3:7c:60:15:f2:b2:75:9a:e1:04:3e:5c:33:b0:7e:36:
         c9:c8:ae:5f:18:09:dd:eb:9c:c2:1f:28:5c:7f:74:a1:2d:f2:
         be:65:f4:2f:46:58:6c:06:d9:2a:2f:40:3e:eb:e1:9f:cb:38:
         46:c9:97:d9:80:7c:ed:0d:65:9c:62:a8:32:ec:e4:7b:1f:ee:
         3c:6e:ae:8c:b3:1a:f3:f6:0c:d8:31:d2:61:03:0a:c3:67:d6:
         34:ab:7d:f2:a8:50:e0:51:d3:99:03:4b:4b:cb:07:85:6c:86:
         ca:ae:7e:ec:09:64:a2:a7:00:80:87:f7:e8:3e:21:89:53:ca:
         59:86:d5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 13:14:06 2024 by rpki-client on console-fra.rpki-client.org