Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/323830343a363933343a3a2f33322d3438203d3e20323730323535.roa
File:                     323830343a363933343a3a2f33322d3438203d3e20323730323535.roa (raw, json)
Hash identifier:          Qlu8mU0aSvT/u/5VUNoAcIuqrGHXw9uRMa1EBQQEyac=
Subject key identifier:   1B:56:13:28:DC:06:F7:59:AF:9C:85:DE:7E:79:C3:F8:05:F1:10:6D
Certificate issuer:       /CN=51C2EC2E8985040FA85C26651E67991D969C7E20
Certificate serial:       2FE3E03408DDBDBA42F6D7D4D8171BBFB06E9C61
Authority key identifier: 51:C2:EC:2E:89:85:04:0F:A8:5C:26:65:1E:67:99:1D:96:9C:7E:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C2EC2E8985040FA85C26651E67991D969C7E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/323830343a363933343a3a2f33322d3438203d3e20323730323535.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     270255
IP address blocks:        2804:6934::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e3:e0:34:08:dd:bd:ba:42:f6:d7:d4:d8:17:1b:bf:b0:6e:9c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C2EC2E8985040FA85C26651E67991D969C7E20
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject: CN=1B561328DC06F759AF9C85DE7E79C3F805F1106D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:83:4d:cb:87:4d:17:9f:28:2e:a3:95:68:
                    d8:8a:01:91:69:d9:21:63:26:88:b2:56:fb:83:bd:
                    07:18:de:5b:ce:52:ed:5d:ec:03:e9:65:99:cb:d9:
                    cd:e6:a6:e0:8f:4d:c5:8e:3f:f5:31:e8:cf:7e:14:
                    87:72:ae:4a:5f:86:bc:dd:2b:a7:34:9f:b7:8e:09:
                    de:bf:53:73:ca:05:6c:83:97:48:6a:c3:4b:41:fb:
                    50:67:05:aa:18:79:a4:89:b1:fe:2f:b1:d6:ad:5b:
                    ca:47:f8:bf:50:d1:80:f5:b2:25:38:83:36:08:de:
                    7d:38:c2:60:8e:af:01:a8:90:25:4b:ae:ce:c7:66:
                    a2:f1:4e:de:b1:6b:0f:a2:de:0a:a7:88:79:41:c6:
                    f2:3a:4b:ba:65:0f:43:cb:81:59:8e:19:d2:c2:13:
                    f7:c0:8c:e9:62:90:54:f4:3f:1a:7b:08:2f:05:0e:
                    61:a0:d3:b5:d5:63:11:ee:79:82:82:37:34:fa:cc:
                    f8:86:b6:bf:00:fc:9b:bf:69:85:f6:8a:1f:01:c1:
                    16:d7:8e:d9:7b:1b:fa:5e:a2:61:55:94:02:ee:74:
                    68:be:f8:59:ec:24:d4:79:c0:f2:81:3d:2a:94:d5:
                    5f:3d:96:f5:bc:37:53:b6:a1:07:f9:44:4a:3c:a7:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:56:13:28:DC:06:F7:59:AF:9C:85:DE:7E:79:C3:F8:05:F1:10:6D
            X509v3 Authority Key Identifier:
                keyid:51:C2:EC:2E:89:85:04:0F:A8:5C:26:65:1E:67:99:1D:96:9C:7E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/51C2EC2E8985040FA85C26651E67991D969C7E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C2EC2E8985040FA85C26651E67991D969C7E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/323830343a363933343a3a2f33322d3438203d3e20323730323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6934::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:e0:91:1a:b4:9d:9b:19:68:f5:f6:17:7b:99:ee:72:51:56:
         28:46:f3:90:33:8d:08:1e:4b:42:e5:69:a2:75:a4:7d:1b:46:
         01:e4:aa:e7:ac:b5:50:d5:e7:9c:d7:70:62:86:e5:56:ff:95:
         36:12:36:c6:cc:29:56:a4:5f:57:87:f6:a7:a4:b8:92:32:44:
         82:a7:80:29:fd:0f:84:bb:6f:9e:5c:3d:cc:ac:8d:48:ee:3e:
         38:9c:60:c9:60:1b:ce:99:ba:9e:af:9e:42:35:c0:09:65:8a:
         3c:df:57:06:16:b9:2b:e7:b5:fa:dc:76:5b:5c:54:9d:75:f2:
         f3:80:21:56:ab:7d:a8:e7:9a:69:8d:61:b9:8b:23:db:41:0e:
         52:56:e2:40:13:a5:7d:8e:12:f7:3b:65:23:df:95:28:32:75:
         60:b9:56:94:d8:08:0d:cc:a5:49:4c:65:f2:30:ae:e4:b7:56:
         ec:99:78:c5:20:f1:bc:2c:73:01:bc:cb:ef:ed:ee:0c:80:45:
         bd:72:40:d7:c0:bc:9c:f2:06:6f:12:e7:91:21:55:a5:b1:d1:
         50:1a:aa:26:7f:d6:e2:f6:7a:31:b3:89:cc:3e:f4:d0:20:48:
         8a:ef:fd:85:13:60:c4:03:de:17:39:10:09:f7:8d:f9:de:67:
         bf:a0:b8:4d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUL+PgNAjdvbpC9tfU2Bcbv7BunGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFDMkVDMkU4OTg1MDQwRkE4NUMyNjY1MUU2Nzk5MUQ5
NjlDN0UyMDAeFw0yNDA0MDMxODI1MDlaFw0yNTA0MDIxODMwMDlaMDMxMTAvBgNV
BAMTKDFCNTYxMzI4REMwNkY3NTlBRjlDODVERTdFNzlDM0Y4MDVGMTEwNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXYNNy4dNF58oLqOVaNiKAZFp
2SFjJoiyVvuDvQcY3lvOUu1d7APpZZnL2c3mpuCPTcWOP/Ux6M9+FIdyrkpfhrzd
K6c0n7eOCd6/U3PKBWyDl0hqw0tB+1BnBaoYeaSJsf4vsdatW8pH+L9Q0YD1siU4
gzYI3n04wmCOrwGokCVLrs7HZqLxTt6xaw+i3gqniHlBxvI6S7plD0PLgVmOGdLC
E/fAjOlikFT0Pxp7CC8FDmGg07XVYxHueYKCNzT6zPiGtr8A/Ju/aYX2ih8BwRbX
jtl7G/peomFVlALudGi++FnsJNR5wPKBPSqU1V89lvW8N1O2oQf5REo8p3wDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUG1YTKNwG91mvnIXefnnD+AXxEG0wHwYDVR0j
BBgwFoAUUcLsLomFBA+oXCZlHmeZHZacfiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREVDUGd3YWNkUU0yeURRZnNZTlVzR3VHV0F6QkJYeENQZmpkV05SUTdR
czMvMS81MUMyRUMyRTg5ODUwNDBGQTg1QzI2NjUxRTY3OTkxRDk2OUM3RTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxQzJFQzJFODk4NTA0MEZB
ODVDMjY2NTFFNjc5OTFEOTY5QzdFMjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RFQ1Bnd2FjZFFNMnlEUWZzWU5Vc0d1R1dBekJCWHhDUGZqZFdOUlE3UXMzLzEv
MzIzODMwMzQzYTM2MzkzMzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzIzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARpNDANBgkqhkiG9w0BAQsFAAOCAQEAHeCRGrSd
mxlo9fYXe5nuclFWKEbzkDONCB5LQuVponWkfRtGAeSq56y1UNXnnNdwYoblVv+V
NhI2xswpVqRfV4f2p6S4kjJEgqeAKf0PhLtvnlw9zKyNSO4+OJxgyWAbzpm6nq+e
QjXACWWKPN9XBha5K+e1+tx2W1xUnXXy84AhVqt9qOeaaY1huYsj20EOUlbiQBOl
fY4S9ztlI9+VKDJ1YLlWlNgIDcylSUxl8jCu5LdW7Jl4xSDxvCxzAbzL7+3uDIBF
vXJA18C8nPIGbxLnkSFVpbHRUBqqJn/W4vZ6MbOJzD700CBIiu/9hRNgxAPeFzkQ
CfeN+d5nv6C4TQ==
-----END CERTIFICATE-----
Generated at Fri Sep 6 10:58:44 2024 by rpki-client on console-fra.rpki-client.org