Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a333138343a3a2f33322d3438203d3e20323635303231.roa
File:                     323830343a333138343a3a2f33322d3438203d3e20323635303231.roa (raw, json)
Hash identifier:          MwQvJOZXzyCyMyvk/RW9iBNHLa+ZlhT38oOVoKA+HNo=
Subject key identifier:   FF:22:B0:E4:AF:D8:18:5D:17:E3:4B:38:71:36:FB:4C:3F:56:7F:03
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       40B78B95242752055A253DF7215EC3E9EE1050E3
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a333138343a3a2f33322d3438203d3e20323635303231.roa
Signing time:             Thu 04 Apr 2024 19:59:28 +0000
ROA not before:           Thu 04 Apr 2024 19:54:28 +0000
ROA not after:            Thu 03 Apr 2025 19:59:28 +0000
asID:                     265021
IP address blocks:        2804:3184::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b7:8b:95:24:27:52:05:5a:25:3d:f7:21:5e:c3:e9:ee:10:50:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:28 2024 GMT
            Not After : Apr  3 19:59:28 2025 GMT
        Subject: CN=FF22B0E4AFD8185D17E34B387136FB4C3F567F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:0b:2a:f4:fb:e2:f2:49:6e:54:09:7d:a0:
                    83:6c:c4:aa:5f:50:f3:a5:e4:8a:59:ae:30:cf:43:
                    77:8e:29:6f:5a:92:72:ce:e1:ef:80:b3:0a:38:89:
                    b1:6d:e3:3a:93:e2:92:ad:2a:a9:9e:ca:53:78:f1:
                    ec:13:40:2d:85:3a:9c:85:34:34:dd:80:a9:64:65:
                    20:a3:89:66:24:ad:b1:8d:ce:30:83:7b:2b:da:36:
                    43:25:67:1a:87:70:98:6c:8a:55:2c:52:fb:6c:a6:
                    44:64:f5:99:33:de:e4:44:b5:35:55:67:cb:41:9d:
                    48:6d:ba:64:9f:af:66:61:52:bb:1a:f1:ee:14:49:
                    76:ed:1e:4b:64:9d:18:2d:7d:ac:5b:fe:9c:05:7f:
                    cd:b1:13:80:84:c2:64:11:2e:dd:3a:bf:7b:77:fa:
                    8b:2d:b3:a7:f3:7e:26:ff:21:f2:2b:5c:98:5f:75:
                    3f:d2:0b:d5:34:e0:c2:cf:9a:80:20:f9:3e:78:d1:
                    14:84:c4:48:47:dd:b7:8b:80:8a:a5:5d:ee:dd:d5:
                    99:34:13:4b:e4:de:15:e3:6e:8d:80:ea:c4:57:43:
                    a0:69:15:c1:75:be:e3:56:2c:77:dc:bd:a4:5a:c7:
                    e0:4c:03:4a:22:e2:7f:e4:ed:b5:0f:7a:37:ad:84:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:22:B0:E4:AF:D8:18:5D:17:E3:4B:38:71:36:FB:4C:3F:56:7F:03
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a333138343a3a2f33322d3438203d3e20323635303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3184::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:df:66:05:71:68:5f:ea:de:b0:e7:f1:8d:65:f2:21:46:81:
         89:ea:69:7b:49:9f:84:27:dd:42:0f:42:cf:58:a4:56:22:e7:
         57:b7:62:9f:ec:b4:c6:3d:e7:7d:c0:6e:91:99:5e:ea:e3:cd:
         22:88:dd:c2:12:d3:38:56:5d:1a:c4:71:b2:b2:41:2e:79:d8:
         b3:8c:c6:5f:10:63:b8:ae:2b:7f:48:76:e4:76:9a:e2:5b:c7:
         f5:a0:1d:b8:01:b5:43:2a:c3:d4:34:6b:86:19:c7:5e:e2:84:
         d7:3d:40:c9:b7:af:56:bd:be:13:41:93:5e:6c:a7:d4:40:e6:
         e1:a2:9c:b1:eb:22:c5:09:5b:17:f7:50:b7:15:f6:a6:08:37:
         ea:27:1c:0b:a8:c0:65:65:fc:84:58:42:c6:ad:2a:47:5d:b7:
         45:3d:b7:9c:ac:73:86:8d:d6:1a:d9:ea:0e:4c:ff:e7:f7:67:
         71:0b:70:ae:84:c4:fb:14:71:ab:c8:37:cd:40:86:8f:82:58:
         cb:a4:56:b1:c4:b9:83:02:27:3c:3f:85:2d:52:ce:b9:b7:35:
         da:78:65:a9:f9:cf:c0:84:96:31:86:69:0b:70:07:1f:39:bc:
         62:ff:59:d0:46:b6:33:0c:fd:f5:c2:6e:38:f8:cb:09:9e:92:
         95:6e:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 13:11:10 2024 by rpki-client on console-ams.rpki-client.org