Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a363a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a363a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          M0Q3AMNTWQSIkaJI+ZybU2XSp9vase7w/FR/rQFrkcE=
Subject key identifier:   D8:D6:73:1F:62:55:48:7A:34:89:DE:E2:8C:F7:E2:FD:17:15:36:1C
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       3228E113634B0442FB9EFDCF306DC28055D06220
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a363a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:52 +0000
ROA not before:           Thu 09 Mar 2023 20:12:52 +0000
ROA not after:            Thu 07 Mar 2024 20:17:52 +0000
asID:                     28260
IP address blocks:        2804:28e4:6::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:28:e1:13:63:4b:04:42:fb:9e:fd:cf:30:6d:c2:80:55:d0:62:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:52 2023 GMT
            Not After : Mar  7 20:17:52 2024 GMT
        Subject: CN=D8D6731F6255487A3489DEE28CF7E2FD1715361C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:d3:c0:f7:12:48:08:97:35:a2:c3:5d:2e:
                    fd:6b:fd:2e:80:f8:46:10:91:4f:9f:86:63:d6:41:
                    d2:37:90:07:31:99:d4:9d:07:c1:4e:b9:ba:dd:e2:
                    b4:52:aa:f8:b7:9d:6e:d3:0c:7c:be:36:77:4d:f5:
                    f6:b1:cd:50:09:3e:51:8e:99:00:a2:25:51:d1:86:
                    2e:1a:77:f3:1f:51:00:f5:cb:36:b1:01:6e:93:d9:
                    69:a2:cf:d9:b6:39:2d:b0:ad:4e:15:6b:21:d2:ba:
                    c0:fa:d2:5f:1a:97:d3:93:90:b4:3a:a7:11:b9:e8:
                    32:3c:06:97:d3:c0:96:75:f9:5f:76:80:7e:30:25:
                    69:df:ae:89:41:e6:6d:7a:a6:de:7d:6a:c1:5f:a1:
                    db:94:e1:e0:ce:b6:f5:0a:4e:71:f2:8c:e9:18:e6:
                    46:84:4c:86:9c:48:3c:c6:c0:c4:44:8e:19:22:df:
                    0d:c4:95:60:83:7c:5d:cd:72:7d:15:bb:c8:a4:7e:
                    37:d9:82:3d:d1:71:3b:22:89:9a:7d:38:b8:48:80:
                    d4:6e:0c:02:de:40:90:6e:71:86:4a:69:5b:17:13:
                    b8:87:5a:78:0e:e8:1f:f6:04:78:7c:3b:50:0f:c5:
                    ac:82:a7:2a:eb:fc:03:1a:37:c5:bc:4c:bb:6b:fa:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:73:1F:62:55:48:7A:34:89:DE:E2:8C:F7:E2:FD:17:15:36:1C
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a363a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:b8:a1:8c:d7:ec:77:a9:85:7e:18:e6:6c:93:a7:6f:b8:36:
         f4:cd:97:ac:a3:d1:67:be:60:90:ae:0f:6d:aa:d3:f7:72:26:
         e1:0b:eb:4b:ec:f8:2c:f2:e9:47:13:2e:4c:21:a0:0e:3c:f1:
         6a:b6:80:9d:84:03:00:ec:d5:a0:d4:30:74:85:a0:f8:a3:f3:
         f4:d3:3b:72:24:4c:84:72:c9:ea:84:5b:13:3d:38:86:fc:d3:
         56:97:5c:36:dd:a9:57:e8:16:29:a0:cc:3a:c8:99:9e:e1:3b:
         ca:e9:a5:31:20:24:c5:61:b8:89:b1:1c:c7:90:c0:aa:8c:fe:
         52:a9:7c:08:3b:87:2c:b3:69:a0:c7:4c:e9:ab:7b:12:24:26:
         66:d6:7b:f2:f9:0e:70:b7:5c:51:da:93:ce:5f:2b:cd:30:11:
         0d:06:96:fc:d6:db:a4:1f:e6:6c:53:36:e8:22:34:fa:45:c9:
         01:62:96:5d:ae:98:2b:30:9c:34:2b:1e:51:10:73:34:ec:69:
         88:a6:68:04:d8:0f:95:a4:5a:5f:0f:d5:d2:37:c3:e6:76:cf:
         91:b0:a4:ad:0a:3e:2d:da:21:90:4c:b8:b6:3c:f0:90:2e:f4:
         98:d6:6a:af:f1:52:93:fe:6e:30:4b:5d:1c:f0:55:08:ab:b5:
         6e:0a:82:de
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUMijhE2NLBEL7nv3PMG3CgFXQYiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREOEVCRTA3NjVDQURGODIyNEI0NDU2NDM5MkU2RTZD
NkU2QUVGNTAeFw0yMzAzMDkyMDEyNTJaFw0yNDAzMDcyMDE3NTJaMDMxMTAvBgNV
BAMTKEQ4RDY3MzFGNjI1NTQ4N0EzNDg5REVFMjhDRjdFMkZEMTcxNTM2MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCakNPA9xJICJc1osNdLv1r/S6A
+EYQkU+fhmPWQdI3kAcxmdSdB8FOubrd4rRSqvi3nW7TDHy+NndN9faxzVAJPlGO
mQCiJVHRhi4ad/MfUQD1yzaxAW6T2Wmiz9m2OS2wrU4VayHSusD60l8al9OTkLQ6
pxG56DI8BpfTwJZ1+V92gH4wJWnfrolB5m16pt59asFfoduU4eDOtvUKTnHyjOkY
5kaETIacSDzGwMREjhki3w3ElWCDfF3Ncn0Vu8ikfjfZgj3RcTsiiZp9OLhIgNRu
DALeQJBucYZKaVsXE7iHWngO6B/2BHh8O1APxayCpyrr/AMaN8W8TLtr+sVtAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQU2NZzH2JVSHo0id7ijPfi/RcVNhwwHwYDVR0j
BBgwFoAUpNjr4HZcrfgiS0RWQ5Lm5sbmrvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9BNEQ4RUJFMDc2NUNBREY4MjI0QjQ0NTY0MzkyRTZFNkM2RTZBRUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RDhFQkUwNzY1Q0FERjgy
MjRCNDQ1NjQzOTJFNkU2QzZFNkFFRjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzIzODMwMzQzYTMyMzg2NTM0M2EzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzgzMjM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBCjkAAYwDQYJKoZIhvcNAQELBQADggEBACq4
oYzX7HephX4Y5myTp2+4NvTNl6yj0We+YJCuD22q0/dyJuEL60vs+Czy6UcTLkwh
oA488Wq2gJ2EAwDs1aDUMHSFoPij8/TTO3IkTIRyyeqEWxM9OIb801aXXDbdqVfo
FimgzDrImZ7hO8rppTEgJMVhuImxHMeQwKqM/lKpfAg7hyyzaaDHTOmrexIkJmbW
e/L5DnC3XFHak85fK80wEQ0GlvzW26Qf5mxTNugiNPpFyQFill2umCswnDQrHlEQ
czTsaYimaATYD5WkWl8P1dI3w+Z2z5GwpK0KPi3aIZBMuLY88JAu9JjWaq/xUpP+
bjBLXRzwVQirtW4Kgt4=
-----END CERTIFICATE-----
Generated at Mon Jan 15 14:19:02 2024 by rpki-client on console-fra.rpki-client.org