Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a356639633a3a2f33322d3438203d3e20323639313132.roa
File:                     323830343a356639633a3a2f33322d3438203d3e20323639313132.roa (raw, json)
Hash identifier:          x3N+swIz3+JSJTtIZrtFGBjohkOw4CjqLeSQ0AsOAcc=
Subject key identifier:   4C:BA:98:A5:CA:7B:2F:6B:E5:09:1D:DD:2A:AA:79:01:3F:2E:1C:20
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       4D6D9FD157B3031E44E16A5684C2649919472974
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a356639633a3a2f33322d3438203d3e20323639313132.roa
Signing time:             Thu 04 Apr 2024 19:59:32 +0000
ROA not before:           Thu 04 Apr 2024 19:54:32 +0000
ROA not after:            Thu 03 Apr 2025 19:59:32 +0000
asID:                     269112
IP address blocks:        2804:5f9c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6d:9f:d1:57:b3:03:1e:44:e1:6a:56:84:c2:64:99:19:47:29:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:32 2024 GMT
            Not After : Apr  3 19:59:32 2025 GMT
        Subject: CN=4CBA98A5CA7B2F6BE5091DDD2AAA79013F2E1C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:12:00:2c:46:96:6c:a3:00:e0:29:46:41:
                    ff:5b:20:f6:22:7c:4a:e5:13:5a:6f:67:37:9c:11:
                    46:f4:0e:d8:cb:9f:dc:b1:6e:7e:0b:11:9b:b4:82:
                    c1:b5:4b:ed:d4:b9:42:11:7b:9d:a9:5c:63:65:74:
                    74:ad:cb:d1:09:24:45:65:30:b7:94:e2:31:83:31:
                    e8:15:a5:e2:32:18:2b:11:0b:47:5d:6a:de:16:01:
                    00:6b:11:0f:71:e3:92:f8:2c:96:55:9e:63:d5:45:
                    86:09:56:7b:b4:c1:77:03:d2:f3:fe:6d:93:f0:48:
                    c1:2d:a3:59:e2:cd:2a:21:db:be:96:80:ad:e3:2d:
                    79:6b:f2:46:8c:a6:ce:7b:a6:e7:ef:3d:e0:41:27:
                    be:c0:8e:0b:6c:c8:db:9f:9b:07:e9:04:ac:d0:eb:
                    b6:4c:f1:32:22:07:2d:dd:83:ee:8e:ec:28:e3:fd:
                    ed:8d:44:b5:d2:ca:5e:e7:be:0d:25:a7:92:4c:dc:
                    53:51:4a:ca:5a:45:ec:f8:98:8f:3c:99:09:34:d6:
                    1b:60:8e:42:38:84:62:3d:97:c5:c4:6f:5b:4c:ed:
                    12:59:6a:60:98:fe:3e:29:3e:18:a1:26:18:b7:33:
                    5f:5b:8e:40:2e:fc:4e:f5:e0:38:d0:a6:bb:69:a1:
                    54:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BA:98:A5:CA:7B:2F:6B:E5:09:1D:DD:2A:AA:79:01:3F:2E:1C:20
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a356639633a3a2f33322d3438203d3e20323639313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:a1:51:49:e8:a2:49:8e:72:62:09:5a:e2:15:d3:d1:a3:2b:
         9e:16:b5:ee:3e:22:c3:1e:a0:6f:63:15:94:c3:9b:e9:e0:c1:
         33:58:51:dd:a5:75:83:3e:1e:47:30:76:d8:42:f9:ef:d3:83:
         23:d1:8c:28:bd:6b:91:ee:af:de:fa:0c:53:81:91:aa:c3:60:
         b6:1c:cc:fe:58:09:73:4e:8d:ae:dc:0b:7f:52:72:b5:6c:81:
         76:71:63:3b:c3:17:7c:30:98:53:62:a9:e6:ec:c8:52:f2:43:
         7d:ae:30:86:ba:19:4d:05:f1:0b:e9:88:eb:b9:b2:ce:40:00:
         2e:4a:a4:7d:ac:81:67:8c:59:b3:be:92:34:10:d3:b2:3f:24:
         55:a3:1f:bf:6e:bd:01:65:dd:c6:c1:4f:58:ad:a4:78:7f:87:
         4a:a5:33:30:5c:82:6e:15:c5:5b:52:30:b0:f9:fe:f6:6c:87:
         6b:51:85:b4:83:50:8c:0e:8c:71:29:68:5e:df:b7:72:4f:ed:
         79:fb:29:c4:18:c6:4f:ac:b2:5c:b8:30:10:ef:c2:c0:a0:20:
         d9:d1:e6:47:30:69:8e:e5:88:68:db:43:70:ad:af:3c:1a:c9:
         19:7d:1b:00:6c:cc:1e:92:b9:67:aa:d0:90:d9:10:01:38:bb:
         b7:4e:13:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org