Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a633030343a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a633030343a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          0UNr61cDyCne7+/w9vXWY9bTQNEI1OSUapuh8qbOcqk=
Subject key identifier:   9A:06:7E:46:2B:47:7D:A7:E0:1F:31:B2:8B:1A:7F:22:9C:9F:AB:B8
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       0DB7B6EE86D173A52CC440C573522FBDFC8E6979
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a633030343a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:57 +0000
ROA not before:           Thu 09 Mar 2023 20:12:57 +0000
ROA not after:            Thu 07 Mar 2024 20:17:57 +0000
asID:                     28260
IP address blocks:        2804:28e4:c004::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b7:b6:ee:86:d1:73:a5:2c:c4:40:c5:73:52:2f:bd:fc:8e:69:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:57 2023 GMT
            Not After : Mar  7 20:17:57 2024 GMT
        Subject: CN=9A067E462B477DA7E01F31B28B1A7F229C9FABB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f3:74:08:ae:c3:88:22:c5:f5:dd:c8:5b:1f:
                    21:1e:61:ce:5f:e5:57:a0:00:52:c9:f5:10:f8:15:
                    ba:f5:96:a1:4f:fb:b4:88:67:1d:54:94:20:c4:cb:
                    15:25:49:95:ec:1f:67:a8:50:34:62:ae:1e:86:55:
                    8f:22:fa:7c:0b:7e:84:40:37:5e:0c:d3:c1:a9:a5:
                    a7:ba:35:63:64:34:0c:ef:cd:23:15:9b:2e:f1:94:
                    60:28:f7:38:85:1e:33:b5:88:24:d0:97:e6:dd:e1:
                    0a:a3:8c:01:ba:e1:28:80:bc:5e:9a:fe:5c:66:3f:
                    57:0b:65:c2:03:31:4f:31:fa:c6:44:77:40:79:f1:
                    62:e6:dc:c8:b8:fb:96:9d:97:d7:39:58:3b:f9:38:
                    44:7a:0c:6b:57:32:7e:a4:3c:0a:05:44:0d:de:38:
                    6b:8c:37:90:86:17:64:2a:7a:51:e3:cc:e8:10:b6:
                    26:0d:52:4d:5b:9f:d1:29:67:ba:e6:40:fa:fe:5e:
                    7c:75:aa:d6:40:93:53:1c:a5:73:ae:cc:b3:a1:83:
                    bf:6d:c2:82:8f:03:1a:7f:17:74:4e:fb:de:80:3a:
                    ef:de:07:4f:75:fb:43:dd:ec:55:ba:ba:81:4f:cb:
                    46:0b:7a:1f:32:fe:4a:96:72:f4:ca:45:16:5d:30:
                    36:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:06:7E:46:2B:47:7D:A7:E0:1F:31:B2:8B:1A:7F:22:9C:9F:AB:B8
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a633030343a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:c004::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:2b:40:f5:2f:81:e3:33:be:1d:00:00:20:43:e5:60:71:63:
         e7:53:89:d4:27:b4:0b:22:ca:e8:45:96:e1:a1:d4:af:f1:b1:
         ab:3b:4f:b3:6b:07:a4:9a:d0:34:ae:db:4d:1a:21:cd:dc:69:
         10:78:05:ee:90:1e:9c:f7:40:99:48:b3:9e:3f:a4:24:40:3f:
         d6:b4:dd:63:d8:ce:71:2b:a0:5c:9a:32:30:aa:c5:1b:73:27:
         8d:0f:6f:dc:2d:8f:ec:2e:4d:9b:8d:90:9a:f0:31:a0:1a:6a:
         fe:16:69:18:1f:d7:9a:aa:c4:03:26:e8:30:a7:65:46:9d:fe:
         b4:27:86:cd:73:39:47:d4:8b:82:7e:b2:27:4c:b8:f2:de:85:
         70:36:78:85:0c:7c:80:2a:20:36:12:76:48:87:e9:dc:2e:fa:
         51:62:c9:b4:65:0c:ce:1c:09:3d:45:77:19:74:99:5b:d9:93:
         bd:02:f5:b2:d4:45:29:92:87:58:d7:9d:35:02:b9:cf:ee:95:
         2d:40:a8:8c:1b:aa:c3:57:26:f4:fd:44:a3:1d:34:b4:7f:86:
         ea:1f:bc:4f:90:e8:39:64:48:40:01:12:eb:7a:4c:9a:84:98:
         11:40:0a:91:c2:0e:ec:cc:46:ba:d4:5b:e8:de:6f:1a:4c:ff:
         b6:bd:72:5a
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUDbe27obRc6UsxEDFc1IvvfyOaXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREOEVCRTA3NjVDQURGODIyNEI0NDU2NDM5MkU2RTZD
NkU2QUVGNTAeFw0yMzAzMDkyMDEyNTdaFw0yNDAzMDcyMDE3NTdaMDMxMTAvBgNV
BAMTKDlBMDY3RTQ2MkI0NzdEQTdFMDFGMzFCMjhCMUE3RjIyOUM5RkFCQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY83QIrsOIIsX13chbHyEeYc5f
5VegAFLJ9RD4Fbr1lqFP+7SIZx1UlCDEyxUlSZXsH2eoUDRirh6GVY8i+nwLfoRA
N14M08Gppae6NWNkNAzvzSMVmy7xlGAo9ziFHjO1iCTQl+bd4QqjjAG64SiAvF6a
/lxmP1cLZcIDMU8x+sZEd0B58WLm3Mi4+5adl9c5WDv5OER6DGtXMn6kPAoFRA3e
OGuMN5CGF2QqelHjzOgQtiYNUk1bn9EpZ7rmQPr+Xnx1qtZAk1McpXOuzLOhg79t
woKPAxp/F3RO+96AOu/eB091+0Pd7FW6uoFPy0YLeh8y/kqWcvTKRRZdMDb7AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUmgZ+RitHfafgHzGyixp/Ipyfq7gwHwYDVR0j
BBgwFoAUpNjr4HZcrfgiS0RWQ5Lm5sbmrvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9BNEQ4RUJFMDc2NUNBREY4MjI0QjQ0NTY0MzkyRTZFNkM2RTZBRUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RDhFQkUwNzY1Q0FERjgy
MjRCNDQ1NjQzOTJFNkU2QzZFNkFFRjUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzIzODMwMzQzYTMyMzg2NTM0M2E2MzMwMzAzNDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzgzMjM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBCjkwAQwDQYJKoZIhvcNAQELBQAD
ggEBAGcrQPUvgeMzvh0AACBD5WBxY+dTidQntAsiyuhFluGh1K/xsas7T7NrB6Sa
0DSu200aIc3caRB4Be6QHpz3QJlIs54/pCRAP9a03WPYznEroFyaMjCqxRtzJ40P
b9wtj+wuTZuNkJrwMaAaav4WaRgf15qqxAMm6DCnZUad/rQnhs1zOUfUi4J+sidM
uPLehXA2eIUMfIAqIDYSdkiH6dwu+lFiybRlDM4cCT1Fdxl0mVvZk70C9bLURSmS
h1jXnTUCuc/ulS1AqIwbqsNXJvT9RKMdNLR/huofvE+Q6DlkSEABEut6TJqEmBFA
CpHCDuzMRrrUW+jebxpM/7a9clo=
-----END CERTIFICATE-----
Generated at Mon Jan 15 14:32:51 2024 by rpki-client on console-ams.rpki-client.org