Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/1/323830343a323939343a3a2f33322d313238203d3e20323634303233.roa
File:                     323830343a323939343a3a2f33322d313238203d3e20323634303233.roa (raw, json)
Hash identifier:          jXMMkEXGKjSp8y/Vpby4a6Ysq2zucS6IHLTEwT/oz3w=
Subject key identifier:   EC:D5:6F:AE:5A:5F:03:BB:10:C3:BA:1A:E0:C9:29:3B:FF:55:8D:38
Certificate issuer:       /CN=4A01B315CFDF750EB9AD5F631FF29C981C461C0C
Certificate serial:       14DB4298500DA5ED988C666C9924B76EF36D8759
Authority key identifier: 4A:01:B3:15:CF:DF:75:0E:B9:AD:5F:63:1F:F2:9C:98:1C:46:1C:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A01B315CFDF750EB9AD5F631FF29C981C461C0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/1/323830343a323939343a3a2f33322d313238203d3e20323634303233.roa
Signing time:             Thu 04 Apr 2024 01:50:58 +0000
ROA not before:           Thu 04 Apr 2024 01:45:58 +0000
ROA not after:            Thu 03 Apr 2025 01:50:58 +0000
asID:                     264023
IP address blocks:        2804:2994::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:db:42:98:50:0d:a5:ed:98:8c:66:6c:99:24:b7:6e:f3:6d:87:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A01B315CFDF750EB9AD5F631FF29C981C461C0C
        Validity
            Not Before: Apr  4 01:45:58 2024 GMT
            Not After : Apr  3 01:50:58 2025 GMT
        Subject: CN=ECD56FAE5A5F03BB10C3BA1AE0C9293BFF558D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:f7:c0:8b:aa:39:64:62:e1:d4:e9:77:78:
                    c0:eb:a3:53:d8:e2:b3:77:35:73:38:d7:5e:1a:c5:
                    a7:87:5a:f1:6a:fa:46:f8:d8:7d:e9:31:38:0d:ab:
                    71:87:47:c2:6c:a1:b2:20:f1:4e:87:17:54:d1:ea:
                    5d:75:40:78:d3:6b:77:ac:c8:6f:11:e6:bb:74:f0:
                    a3:46:ed:54:52:83:7f:fe:bf:b7:05:88:0a:6a:1c:
                    dc:21:fe:c1:53:df:6b:47:be:7a:aa:1b:21:5d:f9:
                    0e:f9:d7:2c:6a:7b:be:21:1b:a0:91:26:16:73:ce:
                    39:54:07:82:c8:34:43:90:1b:ad:ed:47:9f:c6:bd:
                    16:46:d9:17:30:cb:5a:cd:c5:ad:be:56:9b:03:53:
                    ef:16:36:df:4f:68:f5:ff:05:79:6d:f0:a2:bc:2d:
                    94:60:53:1e:ce:f2:49:0c:af:a8:45:d9:17:ac:70:
                    44:75:4f:20:c7:88:9a:0a:10:a3:07:f1:b9:23:5c:
                    f3:92:4d:9f:f8:b3:46:79:1f:5b:8a:18:0b:a8:7d:
                    5f:2f:e8:2a:b0:78:a7:a6:7f:d3:c7:c6:93:0d:e5:
                    7a:60:ec:12:41:d4:21:e3:aa:bb:f8:31:7a:78:76:
                    a9:36:16:07:85:ee:c6:18:da:17:41:b1:28:4a:5a:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D5:6F:AE:5A:5F:03:BB:10:C3:BA:1A:E0:C9:29:3B:FF:55:8D:38
            X509v3 Authority Key Identifier:
                keyid:4A:01:B3:15:CF:DF:75:0E:B9:AD:5F:63:1F:F2:9C:98:1C:46:1C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/1/4A01B315CFDF750EB9AD5F631FF29C981C461C0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A01B315CFDF750EB9AD5F631FF29C981C461C0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/1/323830343a323939343a3a2f33322d313238203d3e20323634303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2994::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:a8:d4:30:0f:84:47:cb:a8:2e:ba:3b:de:92:dc:bf:e8:
         f2:d6:c7:0f:27:e5:9c:a8:94:eb:0d:9b:66:79:72:b1:41:06:
         1f:2e:17:72:90:af:00:1a:a9:6d:9a:91:da:5f:5b:c4:2d:2d:
         20:ba:ad:9e:d2:22:ed:e9:73:24:7c:63:95:1f:03:0b:b0:3d:
         0f:70:20:ce:b1:75:10:a9:fc:c2:cd:e1:ba:e1:b1:e1:a0:e9:
         9e:fd:c9:71:6c:81:4e:ae:94:8c:a9:f8:15:3d:3f:36:c5:c9:
         17:be:de:37:74:31:45:c4:22:e4:78:d8:96:cb:f7:ec:73:8e:
         e6:28:b3:eb:71:9c:5c:0b:4f:c0:a5:c0:16:eb:e8:a3:bc:fa:
         f6:b5:ea:e2:83:7b:50:c3:88:9c:fc:cd:7a:6e:a7:7b:26:fb:
         8d:25:59:99:19:41:59:1b:7b:17:06:a8:1a:51:a4:36:c7:27:
         53:77:5d:7c:99:ea:5c:0d:35:3f:b4:92:6f:e0:85:76:dc:7b:
         4a:fe:7a:db:17:06:7c:a8:06:a1:dc:f0:be:65:d3:c3:9b:08:
         e3:a3:4b:e4:81:94:46:33:a7:44:6c:a3:ee:ad:42:ef:3a:5d:
         e3:11:af:2e:47:e0:78:53:6a:40:d6:e3:7d:25:17:1e:af:ae:
         5e:b9:65:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 06:46:00 2024 by rpki-client on console-fra.rpki-client.org