Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/323830343a376232343a3a2f33322d3336203d3e20323731343133.roa
File:                     323830343a376232343a3a2f33322d3336203d3e20323731343133.roa (raw, json)
Hash identifier:          NJZU51eeK5/qUDRm3RLszXu368Wy92vGl02f6RyAZ3M=
Subject key identifier:   52:57:48:9B:EE:EC:CA:C0:CA:FF:DF:5F:FB:07:72:36:BC:30:77:8C
Certificate issuer:       /CN=D18D5B5ED3CD83789651F1623AFD2FD4D2C5D022
Certificate serial:       2C7C669562415DF5E190F43984D7F378AA0DFA7A
Authority key identifier: D1:8D:5B:5E:D3:CD:83:78:96:51:F1:62:3A:FD:2F:D4:D2:C5:D0:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18D5B5ED3CD83789651F1623AFD2FD4D2C5D022.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/323830343a376232343a3a2f33322d3336203d3e20323731343133.roa
Signing time:             Wed 22 May 2024 13:49:59 +0000
ROA not before:           Wed 22 May 2024 13:44:59 +0000
ROA not after:            Wed 21 May 2025 13:49:59 +0000
asID:                     271413
IP address blocks:        2804:7b24::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7c:66:95:62:41:5d:f5:e1:90:f4:39:84:d7:f3:78:aa:0d:fa:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18D5B5ED3CD83789651F1623AFD2FD4D2C5D022
        Validity
            Not Before: May 22 13:44:59 2024 GMT
            Not After : May 21 13:49:59 2025 GMT
        Subject: CN=5257489BEEECCAC0CAFFDF5FFB077236BC30778C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:ab:d5:d6:c9:d2:4e:86:8d:07:22:f7:69:
                    5b:f2:df:9d:9a:2f:bb:f7:9a:93:05:cb:91:14:53:
                    b2:2d:78:8f:83:00:a2:ba:a8:65:d0:41:de:57:49:
                    e5:b2:00:58:1c:be:6e:a9:77:ce:65:b5:25:42:8b:
                    a8:03:ea:7d:a0:c1:22:c2:90:3f:c2:0f:c5:3d:0a:
                    20:be:05:04:23:35:6e:8c:f2:e9:50:f6:20:1a:ac:
                    5f:53:d5:da:5b:da:db:7b:b9:34:1c:d0:90:f0:d7:
                    03:c0:a0:f0:33:d3:8f:f5:4a:dc:5b:1e:46:04:55:
                    4b:1f:61:86:76:47:43:65:d5:8e:64:1c:e0:1d:bf:
                    cc:7c:4f:be:54:04:78:89:d5:4d:0d:d1:b1:5a:86:
                    e8:bb:99:e7:11:f0:26:5a:44:c4:50:ac:19:0b:3d:
                    25:1b:6e:7a:b5:f8:19:87:c4:78:b0:23:42:a5:c2:
                    9c:78:61:98:c3:44:cd:f9:32:74:9c:f1:9f:b3:86:
                    46:8a:f9:63:68:60:12:f2:e7:82:38:d3:9b:23:d0:
                    62:b8:22:2b:a4:f0:6d:df:31:dd:5e:1f:a0:b6:a4:
                    8e:9f:33:3a:88:1e:9f:46:61:ab:1b:14:e6:f3:bf:
                    f9:43:da:a2:58:82:33:db:3a:37:df:74:7a:67:c2:
                    ca:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:57:48:9B:EE:EC:CA:C0:CA:FF:DF:5F:FB:07:72:36:BC:30:77:8C
            X509v3 Authority Key Identifier:
                keyid:D1:8D:5B:5E:D3:CD:83:78:96:51:F1:62:3A:FD:2F:D4:D2:C5:D0:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/D18D5B5ED3CD83789651F1623AFD2FD4D2C5D022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18D5B5ED3CD83789651F1623AFD2FD4D2C5D022.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/323830343a376232343a3a2f33322d3336203d3e20323731343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b24::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:3d:0b:6b:27:8a:34:8c:48:72:4f:a3:5b:82:79:84:09:88:
         4a:f7:3e:4a:5a:e8:e6:d4:26:e0:ec:b6:6c:91:b0:81:16:87:
         a4:cc:d3:bb:57:89:2b:49:b6:74:fc:0d:94:13:2c:0d:2a:30:
         3b:bc:4f:9d:ce:82:7b:44:7b:bb:b4:23:86:56:e7:0b:f8:e0:
         00:1e:01:cf:d0:64:78:ad:5f:8c:ae:3f:48:a2:d9:50:03:e2:
         18:c0:62:2d:b1:91:a3:79:97:f9:4e:d0:ff:3b:a9:f3:a6:5c:
         72:88:c8:72:ba:79:3d:b2:50:bd:66:3e:a3:44:ff:e3:29:f8:
         1b:22:d4:f1:64:f1:aa:84:4a:09:13:6b:c9:f5:d6:4f:2d:53:
         02:57:48:2c:7e:b3:77:f9:46:ea:3e:01:d5:7c:25:77:3a:57:
         ca:19:b9:bf:56:b5:ed:bf:13:fd:01:7b:cf:d1:d4:7f:da:62:
         4b:fe:fe:a9:90:55:6c:6f:f9:24:1d:a4:16:85:f0:84:bc:d4:
         09:e1:d4:98:da:32:f6:65:24:b4:f8:df:b7:14:18:67:27:b4:
         29:80:19:aa:a5:ce:3f:f6:08:b8:b1:ce:0f:27:41:fc:45:d2:
         b5:2e:47:7f:ec:aa:2d:97:19:be:f3:73:73:34:6d:56:44:7b:
         93:35:3e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 16:30:15 2024 by rpki-client on console-ams.rpki-client.org