Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a633030353a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a633030353a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          AhYz/JQNANi8A0je4K+OVvD4Zk75F/pTtPb/qdYGc9M=
Subject key identifier:   E8:BF:F5:B4:E5:94:7D:0D:F1:7E:F1:5D:25:2E:F7:44:AE:15:7C:99
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       745C3E143418FB8E865C051B5D254E0C362371EA
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a633030353a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:51 +0000
ROA not before:           Thu 09 Mar 2023 20:12:51 +0000
ROA not after:            Thu 07 Mar 2024 20:17:51 +0000
asID:                     28260
IP address blocks:        2804:28e4:c005::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5c:3e:14:34:18:fb:8e:86:5c:05:1b:5d:25:4e:0c:36:23:71:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:51 2023 GMT
            Not After : Mar  7 20:17:51 2024 GMT
        Subject: CN=E8BFF5B4E5947D0DF17EF15D252EF744AE157C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:49:48:f6:b9:3d:9f:9c:7d:66:00:0d:dd:
                    89:4d:b1:0d:97:e9:ab:01:50:1a:68:73:99:fd:c3:
                    33:42:96:c7:3a:7d:03:04:ce:f4:a2:54:4a:57:03:
                    66:e5:01:1d:5e:c2:6a:5a:fa:83:29:01:67:46:91:
                    18:77:04:94:c5:de:54:d0:3a:7e:2f:69:5e:8f:9f:
                    85:e2:28:42:75:ec:3a:68:c8:96:b9:13:c2:22:13:
                    38:c0:1a:69:89:f7:5c:da:80:3f:b0:e5:c0:3e:57:
                    d2:95:79:56:e4:62:96:dd:48:ec:e2:1a:18:72:5e:
                    a9:dd:53:34:75:45:0b:bb:cf:84:8b:0b:c2:f6:11:
                    fe:72:8d:32:89:74:12:76:3a:5e:e0:81:e2:66:9d:
                    96:0d:2c:6b:b7:fb:2b:1f:d8:d8:27:c0:e2:60:c1:
                    db:57:dd:78:23:75:2b:55:72:33:7e:9d:ba:5b:e9:
                    1f:e9:d9:27:67:a0:67:55:07:f4:0b:8f:27:e9:69:
                    9e:63:d5:e8:ce:d4:95:cf:3b:a8:5b:92:3c:e0:d7:
                    88:4e:ce:b1:7b:e3:9b:2e:54:d2:34:eb:e0:df:0e:
                    d2:60:71:bc:da:bd:2a:41:ad:b0:1e:68:74:da:46:
                    35:4e:80:59:4d:72:32:33:77:1b:96:1f:f3:f2:53:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BF:F5:B4:E5:94:7D:0D:F1:7E:F1:5D:25:2E:F7:44:AE:15:7C:99
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a633030353a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:c005::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:f2:36:73:a6:b4:e6:ff:ae:79:78:8a:22:90:03:86:e3:bc:
         e4:21:e6:63:72:25:7b:b9:de:60:28:b9:0b:6c:d0:8a:5a:84:
         36:85:c0:2e:2a:19:82:f8:d9:13:a5:88:2d:f7:4b:34:6c:50:
         4f:c8:23:2d:12:28:3f:c9:3b:af:27:04:12:a6:f1:6c:18:5e:
         5e:b0:c1:11:52:c8:3f:e3:7a:4c:8d:43:70:4a:30:ea:a4:1c:
         bb:ec:5f:96:22:32:1d:41:58:50:4a:11:ad:ee:78:a6:dd:b7:
         23:bf:08:7a:17:84:a2:ac:f3:30:58:c8:08:8e:7a:2f:f6:94:
         2d:a3:e8:b2:ce:7d:0d:4f:cb:be:f5:42:95:3f:53:17:e3:97:
         85:be:0c:db:4b:5c:b3:09:11:1c:d0:46:c8:64:6f:de:9c:fe:
         02:1f:ab:b2:95:ca:36:83:85:35:a3:d6:22:e2:33:f9:ba:1b:
         5c:69:44:28:6b:75:f3:f0:e6:6a:b5:17:f1:54:b1:58:d1:e7:
         06:07:24:22:86:6c:df:2f:84:cc:0b:60:63:f2:77:1d:e1:70:
         6b:77:cb:13:c8:a8:c3:8d:ff:c2:c8:62:25:f8:1f:5a:5f:ab:
         49:1e:7e:44:89:1c:0c:1b:7b:1b:b9:c6:15:40:63:5c:69:1a:
         8b:6d:3c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 14:19:02 2024 by rpki-client on console-fra.rpki-client.org