Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a6164353a3a2f34382d3438203d3e20323632393737.roa
File:                     323830343a313661343a6164353a3a2f34382d3438203d3e20323632393737.roa (raw, json)
Hash identifier:          NWYjitgwZIQsDnIXV/Ht00TCF6yHp6PuiC5mjA++CF4=
Subject key identifier:   39:66:74:8B:43:EE:C6:DB:A7:83:3C:C1:33:79:AC:8A:C7:3E:C5:96
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       132DAA6842EC0CEFC8E3CD5BBB5D7ACD2C2ABB3F
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a6164353a3a2f34382d3438203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:45:34 +0000
ROA not before:           Wed 22 May 2024 17:40:34 +0000
ROA not after:            Wed 21 May 2025 17:45:34 +0000
asID:                     262977
IP address blocks:        2804:16a4:ad5::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2d:aa:68:42:ec:0c:ef:c8:e3:cd:5b:bb:5d:7a:cd:2c:2a:bb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:40:34 2024 GMT
            Not After : May 21 17:45:34 2025 GMT
        Subject: CN=3966748B43EEC6DBA7833CC13379AC8AC73EC596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b0:4c:fc:a2:a1:19:64:c8:9f:d0:ff:5f:b1:
                    05:c9:f2:30:16:ba:9e:c2:7c:85:7d:65:7c:0d:83:
                    47:e0:5f:74:45:96:e5:2b:a7:b7:a4:e3:da:f5:7a:
                    36:04:31:98:4b:5e:3d:ff:38:77:86:8c:5d:1b:9a:
                    2f:e2:02:5f:ba:c1:62:3c:0c:9b:28:5d:18:c0:7a:
                    31:93:cd:84:3f:c8:50:06:15:9c:e8:b2:f3:cc:42:
                    81:4a:d1:98:8e:f8:17:26:98:5f:29:39:96:43:dc:
                    67:73:4c:10:4e:80:f5:ed:19:f6:7c:78:9a:4f:30:
                    71:ba:91:87:e3:9b:f3:8f:cf:25:ae:b1:88:1c:1a:
                    bc:91:0d:c1:2d:5b:6f:a7:5f:9f:44:0b:68:c0:e2:
                    61:09:a5:7e:76:8b:80:8f:79:22:41:02:17:4a:c7:
                    0e:db:38:e6:d7:65:ec:7b:6d:6c:85:f9:70:b2:01:
                    ca:83:c0:c7:f2:ff:73:f4:fd:f9:e3:59:16:38:cc:
                    4f:1c:bb:5a:3a:57:dd:33:7b:ce:25:17:2d:8d:ef:
                    81:88:ca:e3:bb:b9:a4:eb:93:1c:02:f6:79:7f:31:
                    84:04:ab:03:88:10:1b:e1:fe:4c:b5:4b:bf:e5:e9:
                    6c:31:46:38:60:9e:49:4f:d2:58:68:3f:0e:75:e2:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:66:74:8B:43:EE:C6:DB:A7:83:3C:C1:33:79:AC:8A:C7:3E:C5:96
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a6164353a3a2f34382d3438203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16a4:ad5::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:cc:b0:ec:ac:1b:ce:84:b7:5b:88:be:e9:e8:1e:2e:6b:2a:
         5b:ac:13:ef:28:d7:c7:a6:f6:5b:3e:1a:70:c9:ab:f8:b9:0d:
         76:f3:50:fc:1b:cd:1f:e3:89:15:00:3b:bd:63:74:db:dd:44:
         31:73:6c:ec:2a:4a:c5:d0:22:da:1e:fe:2f:bb:ec:ab:d8:97:
         5a:24:3d:de:1c:8b:df:00:f4:12:6f:d7:49:80:f5:e9:1a:99:
         8c:95:63:be:67:1c:75:71:96:7d:76:c3:34:b4:5c:15:20:8d:
         a7:29:c0:c2:87:62:55:69:1d:fc:e0:c9:89:59:f9:d3:2e:69:
         cd:bb:ef:4c:e8:9a:d3:80:03:f7:24:26:f5:fa:3c:e4:b1:1a:
         b3:86:81:7d:e6:0d:d4:7d:05:db:98:b9:6f:da:b7:46:00:39:
         1e:30:30:3c:9d:62:46:b9:9b:60:c2:4c:b2:eb:cb:1c:97:44:
         04:c0:21:86:8c:86:9f:08:3d:cc:6e:1e:29:ee:06:54:5d:33:
         1d:f1:6e:3a:24:c1:4e:f7:f8:3d:10:59:ff:12:dc:fa:ae:54:
         c6:b7:20:72:17:a9:46:ee:28:3d:4b:c4:b7:ff:f4:d2:90:fc:
         d9:66:e2:5d:95:5e:07:43:c9:12:4c:e1:58:cb:22:64:50:21:
         83:fd:6f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 23:22:52 2024 by rpki-client on console-fra.rpki-client.org