Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/323830343a333132633a3a2f33322d3332203d3e20323634393938.roa
File:                     323830343a333132633a3a2f33322d3332203d3e20323634393938.roa (raw, json)
Hash identifier:          LQTnOPlEr3tQ5FRvCDL+9QpLbX1U5Y4osVCyybsIELk=
Subject key identifier:   9B:7D:FC:B7:5E:04:EA:3D:CC:51:61:5F:72:03:A2:AC:BA:F1:D8:1C
Certificate issuer:       /CN=25EDB6C3E464C5AB7F8A83569425555FE9A89E2C
Certificate serial:       1EB375B7BF76D4C170661E00679E63E157D66705
Authority key identifier: 25:ED:B6:C3:E4:64:C5:AB:7F:8A:83:56:94:25:55:5F:E9:A8:9E:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/323830343a333132633a3a2f33322d3332203d3e20323634393938.roa
Signing time:             Thu 04 Apr 2024 12:58:03 +0000
ROA not before:           Thu 04 Apr 2024 12:53:03 +0000
ROA not after:            Thu 03 Apr 2025 12:58:03 +0000
asID:                     264998
IP address blocks:        2804:312c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b3:75:b7:bf:76:d4:c1:70:66:1e:00:67:9e:63:e1:57:d6:67:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25EDB6C3E464C5AB7F8A83569425555FE9A89E2C
        Validity
            Not Before: Apr  4 12:53:03 2024 GMT
            Not After : Apr  3 12:58:03 2025 GMT
        Subject: CN=9B7DFCB75E04EA3DCC51615F7203A2ACBAF1D81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:c0:23:dd:cd:2f:1f:af:96:b7:a8:13:70:
                    a7:3a:60:de:18:3b:99:f9:c7:70:8a:90:4b:4c:c4:
                    58:a6:a6:1b:b5:c7:d9:6f:44:62:46:c5:50:d6:a0:
                    a7:26:64:e1:76:a2:74:66:ee:01:1c:73:f2:1c:18:
                    c7:04:3f:15:7f:ba:8d:bc:72:3b:27:5c:22:27:2b:
                    99:d9:88:a3:f0:0d:ff:a4:ce:6e:e0:99:6d:cb:71:
                    63:48:18:70:35:20:2a:40:d2:ab:d5:9a:bb:e6:e5:
                    77:f0:78:9a:5e:fa:aa:ae:2c:51:9c:f4:13:ec:a6:
                    28:d1:72:57:e6:b5:56:31:03:94:93:bf:ef:e5:8b:
                    3c:cf:b1:9a:87:63:aa:51:e7:b9:f1:34:29:f4:b7:
                    1c:f4:b9:08:e7:ec:19:f6:6b:09:14:18:80:12:ed:
                    10:56:6d:e2:d1:30:11:2e:33:a6:12:88:06:b1:a9:
                    fa:a8:b7:27:64:e3:c8:e6:5c:84:21:5a:08:e9:53:
                    cc:e6:08:72:8f:31:53:d5:b7:9e:c4:53:03:4e:68:
                    98:e0:5d:cb:d9:5f:c6:d2:6c:c5:17:3e:1f:0f:66:
                    92:9c:9e:55:eb:11:5d:70:02:7b:26:97:5a:b8:2d:
                    2c:12:46:90:a8:7d:90:67:0c:36:54:77:a4:1f:f8:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7D:FC:B7:5E:04:EA:3D:CC:51:61:5F:72:03:A2:AC:BA:F1:D8:1C
            X509v3 Authority Key Identifier:
                keyid:25:ED:B6:C3:E4:64:C5:AB:7F:8A:83:56:94:25:55:5F:E9:A8:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/323830343a333132633a3a2f33322d3332203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:312c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:bb:87:fc:ce:d6:8f:36:b7:82:27:80:73:b7:e0:d3:01:c6:
         9e:4f:b8:7a:19:53:dc:52:4e:e7:d7:0e:37:05:63:ea:b4:f8:
         11:d7:4c:6b:4f:70:08:ea:fd:41:b3:b8:a0:35:3f:15:6c:cd:
         5f:26:e1:38:de:b2:9c:9e:be:08:36:35:1d:fb:ba:f9:ec:e2:
         32:0f:0a:cc:b6:a5:25:5d:c4:2f:57:05:e7:dc:db:ce:65:08:
         41:c3:df:c7:99:04:e7:ff:9d:73:01:f6:98:6f:88:58:ea:e6:
         1d:69:1d:66:31:b7:9e:6b:14:ad:10:6a:6e:d7:b4:e9:77:64:
         be:0d:c9:6f:c9:1e:67:ac:ef:86:8b:7c:e6:d8:f4:7f:10:98:
         71:3b:c1:31:18:4d:12:43:c3:b1:f0:1a:de:af:e3:dc:66:e8:
         ae:24:ea:6b:4f:f0:50:3b:a2:61:b4:8e:ef:95:f3:f6:43:56:
         e2:53:68:e8:6e:9a:c2:90:2a:df:d8:fa:a3:9a:da:48:ef:85:
         9d:4a:63:00:69:62:44:a5:3b:49:3a:41:fb:85:fc:26:2f:6f:
         5b:0e:9f:01:a2:2e:5a:c7:67:61:64:f0:63:8b:bd:a6:30:0b:
         dc:8c:ef:1b:88:a1:f6:d9:b6:e7:72:92:2d:d1:3f:c5:03:f7:
         65:50:60:ff
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHrN1t7921MFwZh4AZ55j4VfWZwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVFREI2QzNFNDY0QzVBQjdGOEE4MzU2OTQyNTU1NUZF
OUE4OUUyQzAeFw0yNDA0MDQxMjUzMDNaFw0yNTA0MDMxMjU4MDNaMDMxMTAvBgNV
BAMTKDlCN0RGQ0I3NUUwNEVBM0RDQzUxNjE1RjcyMDNBMkFDQkFGMUQ4MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspMAj3c0vH6+Wt6gTcKc6YN4Y
O5n5x3CKkEtMxFimphu1x9lvRGJGxVDWoKcmZOF2onRm7gEcc/IcGMcEPxV/uo28
cjsnXCInK5nZiKPwDf+kzm7gmW3LcWNIGHA1ICpA0qvVmrvm5XfweJpe+qquLFGc
9BPspijRclfmtVYxA5STv+/lizzPsZqHY6pR57nxNCn0txz0uQjn7Bn2awkUGIAS
7RBWbeLRMBEuM6YSiAaxqfqotydk48jmXIQhWgjpU8zmCHKPMVPVt57EUwNOaJjg
XcvZX8bSbMUXPh8PZpKcnlXrEV1wAnsml1q4LSwSRpCofZBnDDZUd6Qf+D1XAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUm338t14E6j3MUWFfcgOirLrx2BwwHwYDVR0j
BBgwFoAUJe22w+Rkxat/ioNWlCVVX+moniwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3RMeEJGdEJIak1KWUxVWVBhTjRXSzlBVWJDc2ZLZFNrZTZ2RlA0WXJX
eFkvMS8yNUVEQjZDM0U0NjRDNUFCN0Y4QTgzNTY5NDI1NTU1RkU5QTg5RTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1RURCNkMzRTQ2NEM1QUI3
RjhBODM1Njk0MjU1NTVGRTlBODlFMkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d0THhCRnRCSGpNSllMVVlQYU40V0s5QVViQ3NmS2RTa2U2dkZQNFlyV3hZLzEv
MzIzODMwMzQzYTMzMzEzMjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzkzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQxLDANBgkqhkiG9w0BAQsFAAOCAQEAOruH/M7W
jza3gieAc7fg0wHGnk+4ehlT3FJO59cONwVj6rT4EddMa09wCOr9QbO4oDU/FWzN
XybhON6ynJ6+CDY1Hfu6+eziMg8KzLalJV3EL1cF59zbzmUIQcPfx5kE5/+dcwH2
mG+IWOrmHWkdZjG3nmsUrRBqbte06Xdkvg3Jb8keZ6zvhot85tj0fxCYcTvBMRhN
EkPDsfAa3q/j3GboriTqa0/wUDuiYbSO75Xz9kNW4lNo6G6awpAq39j6o5raSO+F
nUpjAGliRKU7STpB+4X8Ji9vWw6fAaIuWsdnYWTwY4u9pjAL3IzvG4ih9tm253KS
LdE/xQP3ZVBg/w==
-----END CERTIFICATE-----
Generated at Sun Aug 11 08:03:48 2024 by rpki-client on console-ams.rpki-client.org