Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653832633a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a653832633a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          7x9sWflAm9HE0qcNWpSC4J7OgJvf3hqbYpGxyalmBZ8=
Subject key identifier:   14:4B:4F:2D:96:D4:EC:BC:13:F4:A4:36:F8:46:5C:FD:1B:C6:1B:4A
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       09300A5694460B0346697E1B805CC5096D24BBF4
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653832633a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:44 +0000
ROA not before:           Thu 09 Mar 2023 20:12:44 +0000
ROA not after:            Thu 07 Mar 2024 20:17:44 +0000
asID:                     28260
IP address blocks:        2804:28e4:e82c::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:30:0a:56:94:46:0b:03:46:69:7e:1b:80:5c:c5:09:6d:24:bb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:44 2023 GMT
            Not After : Mar  7 20:17:44 2024 GMT
        Subject: CN=144B4F2D96D4ECBC13F4A436F8465CFD1BC61B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:1d:31:e9:28:c0:ef:08:2f:dc:75:a7:05:
                    9f:48:17:fc:5c:d9:c6:e2:bd:0b:f1:73:1c:f7:e2:
                    4f:62:93:b8:5e:5c:ef:44:09:8c:85:93:30:5f:0b:
                    db:da:f2:b3:84:81:cf:41:0f:ef:03:98:86:e7:43:
                    ed:11:c2:42:bf:b7:3d:0d:01:a1:0e:8a:c6:44:36:
                    01:86:38:12:be:39:18:76:77:bd:be:54:4d:1b:95:
                    1c:4a:52:29:2c:e8:d5:73:02:f4:79:2a:de:ce:fd:
                    a2:07:fe:ec:5a:ae:03:85:63:77:b3:69:ef:a2:8e:
                    b8:5f:7f:c1:dc:d5:47:e7:db:d5:17:4d:b3:37:b0:
                    3d:fe:bc:1d:83:89:19:72:15:a4:63:4a:1e:e9:7f:
                    2e:6e:fd:e6:cb:93:f6:1b:80:46:cc:17:d5:a7:0a:
                    cf:eb:21:d9:d1:54:03:3b:ee:30:b5:48:b9:cd:ac:
                    ae:69:bd:d2:e7:35:33:b3:5b:71:47:f2:b8:97:eb:
                    32:2e:fc:79:4f:9d:6d:84:5f:a0:51:8d:5d:21:41:
                    ad:a9:37:29:94:95:8b:28:59:16:75:d0:36:8c:7b:
                    4f:8e:1f:88:6b:0d:28:0f:81:6c:30:b1:f3:3c:22:
                    71:44:65:2a:2c:49:8c:95:81:b4:24:ce:1b:12:ce:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4B:4F:2D:96:D4:EC:BC:13:F4:A4:36:F8:46:5C:FD:1B:C6:1B:4A
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653832633a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:e82c::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:d7:c0:c8:86:16:3f:ed:97:03:31:2c:f4:c6:ad:78:6d:
         02:b3:18:b9:12:df:d2:f3:ce:aa:d2:61:df:c1:bd:ec:df:e8:
         fa:55:45:87:0f:2b:9f:e4:4f:9c:d8:7f:d3:1f:60:cf:96:94:
         6d:d7:4b:f2:01:04:a2:89:38:ae:10:3b:12:c5:b8:37:0a:5f:
         03:d0:3a:7b:aa:24:0b:cb:15:b9:f6:59:1a:70:f0:31:2c:16:
         6b:9e:f1:b2:09:a6:ba:bf:2c:50:d2:f6:b2:82:bb:57:5b:23:
         2f:8a:7d:1b:c3:85:9a:29:be:1b:e3:19:85:d0:a0:ff:b1:d4:
         aa:d1:96:88:66:d3:e5:c6:0f:de:a5:4b:a1:80:be:a5:55:4b:
         8f:94:68:a0:c7:29:06:80:37:80:b4:d2:93:79:f7:4f:e2:83:
         19:20:7d:8f:f2:55:6a:ae:d1:4f:63:3e:d1:08:80:32:dc:cc:
         57:0f:2a:23:3e:7f:9c:a9:39:43:bb:7c:c2:e0:80:f3:ba:f0:
         37:1a:5a:78:cd:43:be:37:87:a8:1f:00:f0:60:95:8b:bb:86:
         f2:33:0c:4e:98:bb:d4:42:89:62:29:7d:2a:b2:89:0d:c9:d4:
         69:99:a4:e3:06:d8:3c:ee:c2:78:55:66:0c:17:23:a4:d4:92:
         8d:79:39:9d
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUCTAKVpRGCwNGaX4bgFzFCW0ku/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREOEVCRTA3NjVDQURGODIyNEI0NDU2NDM5MkU2RTZD
NkU2QUVGNTAeFw0yMzAzMDkyMDEyNDRaFw0yNDAzMDcyMDE3NDRaMDMxMTAvBgNV
BAMTKDE0NEI0RjJEOTZENEVDQkMxM0Y0QTQzNkY4NDY1Q0ZEMUJDNjFCNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqsh0x6SjA7wgv3HWnBZ9IF/xc
2cbivQvxcxz34k9ik7heXO9ECYyFkzBfC9va8rOEgc9BD+8DmIbnQ+0RwkK/tz0N
AaEOisZENgGGOBK+ORh2d72+VE0blRxKUiks6NVzAvR5Kt7O/aIH/uxargOFY3ez
ae+ijrhff8Hc1Ufn29UXTbM3sD3+vB2DiRlyFaRjSh7pfy5u/ebLk/YbgEbMF9Wn
Cs/rIdnRVAM77jC1SLnNrK5pvdLnNTOzW3FH8riX6zIu/HlPnW2EX6BRjV0hQa2p
NymUlYsoWRZ10DaMe0+OH4hrDSgPgWwwsfM8InFEZSosSYyVgbQkzhsSzhXNAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUFEtPLZbU7LwT9KQ2+EZc/RvGG0owHwYDVR0j
BBgwFoAUpNjr4HZcrfgiS0RWQ5Lm5sbmrvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9BNEQ4RUJFMDc2NUNBREY4MjI0QjQ0NTY0MzkyRTZFNkM2RTZBRUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RDhFQkUwNzY1Q0FERjgy
MjRCNDQ1NjQzOTJFNkU2QzZFNkFFRjUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzIzODMwMzQzYTMyMzg2NTM0M2E2NTM4MzI2MzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzgzMjM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBCjk6CwwDQYJKoZIhvcNAQELBQAD
ggEBABLI18DIhhY/7ZcDMSz0xq14bQKzGLkS39LzzqrSYd/Bvezf6PpVRYcPK5/k
T5zYf9MfYM+WlG3XS/IBBKKJOK4QOxLFuDcKXwPQOnuqJAvLFbn2WRpw8DEsFmue
8bIJprq/LFDS9rKCu1dbIy+KfRvDhZopvhvjGYXQoP+x1KrRlohm0+XGD96lS6GA
vqVVS4+UaKDHKQaAN4C00pN590/igxkgfY/yVWqu0U9jPtEIgDLczFcPKiM+f5yp
OUO7fMLggPO68DcaWnjNQ743h6gfAPBglYu7hvIzDE6Yu9RCiWIpfSqyiQ3J1GmZ
pOMG2DzuwnhVZgwXI6TUko15OZ0=
-----END CERTIFICATE-----
Generated at Mon Jan 15 14:19:02 2024 by rpki-client on console-fra.rpki-client.org