Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313130303a3a2f34302d3432203d3e20323731333830.roa
File:                     323830343a376139343a313130303a3a2f34302d3432203d3e20323731333830.roa (raw, json)
Hash identifier:          E1YILzzu3Ss8iacE8EmL3KCHqfMElj03dUzj1BeWP+0=
Subject key identifier:   A2:06:37:A8:84:44:18:BA:FF:8A:77:6A:46:C7:A6:A4:EA:00:B2:01
Certificate issuer:       /CN=CED693561B18E1F15DE112114489E7324E327A34
Certificate serial:       4E06D619F6EE66E20D565599ABC53768B8FE3F04
Authority key identifier: CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313130303a3a2f34302d3432203d3e20323731333830.roa
Signing time:             Wed 05 Apr 2023 19:59:04 +0000
ROA not before:           Wed 05 Apr 2023 19:54:04 +0000
ROA not after:            Wed 03 Apr 2024 19:59:04 +0000
asID:                     271380
IP address blocks:        2804:7a94:1100::/40 maxlen: 42

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:06:d6:19:f6:ee:66:e2:0d:56:55:99:ab:c5:37:68:b8:fe:3f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED693561B18E1F15DE112114489E7324E327A34
        Validity
            Not Before: Apr  5 19:54:04 2023 GMT
            Not After : Apr  3 19:59:04 2024 GMT
        Subject: CN=A20637A8844418BAFF8A776A46C7A6A4EA00B201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:22:ef:f9:75:f9:30:7c:31:54:62:d2:d3:7a:
                    d1:a4:3e:b0:15:4c:e2:d9:1d:5b:9f:13:36:dd:e5:
                    e8:c4:ed:65:dd:6d:9a:f8:bf:9a:d6:a4:50:60:fa:
                    88:80:65:9d:23:0a:59:f9:94:13:dd:69:48:97:f8:
                    4b:a8:1d:39:a5:80:43:b9:f4:57:05:37:7f:3a:61:
                    da:e5:43:9d:49:53:65:ba:00:8a:14:44:f2:af:a6:
                    b9:cf:0f:36:10:e4:96:8b:00:82:31:03:1a:e3:f7:
                    99:29:f7:af:26:02:f7:5c:52:b0:6a:81:55:eb:a9:
                    1b:f3:4c:15:bc:76:b9:35:ec:92:66:9f:a2:6d:d2:
                    b2:44:01:fa:07:db:4b:c0:62:66:74:cc:d2:59:cc:
                    61:e5:01:ed:09:6a:a4:12:4d:8f:07:44:1f:27:30:
                    1f:83:f4:6a:d9:97:79:b5:ac:93:80:4a:65:83:64:
                    e6:ae:32:21:23:e9:da:1b:a5:20:3d:b6:56:e9:ad:
                    2d:88:61:d6:d4:39:05:85:f0:a0:7f:d6:ea:60:69:
                    81:29:eb:06:a0:b5:af:6f:6d:2e:35:e1:64:16:d2:
                    6e:a9:31:f7:45:1d:36:d4:de:18:c4:45:b7:13:a5:
                    b1:c6:1f:18:e3:d0:34:16:9f:03:7c:8a:57:2d:b0:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:06:37:A8:84:44:18:BA:FF:8A:77:6A:46:C7:A6:A4:EA:00:B2:01
            X509v3 Authority Key Identifier:
                keyid:CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/CED693561B18E1F15DE112114489E7324E327A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313130303a3a2f34302d3432203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:34:50:dc:75:e5:ff:bd:cd:ad:fc:b8:35:4b:fc:92:86:
         c3:26:9f:0c:87:6b:a7:a6:b7:9e:1f:93:a3:35:04:2b:62:fd:
         cd:f2:76:32:b0:c6:a0:eb:01:02:9d:71:d5:db:dd:92:cd:b5:
         f5:9c:f1:6d:67:9d:0f:b9:f4:a8:41:7a:a2:39:a9:38:71:77:
         36:86:2f:55:9a:ce:99:a0:a2:46:20:24:a9:74:69:fa:84:51:
         33:0b:b0:2f:f5:93:4c:b5:cc:01:1c:42:c7:fd:e4:69:1f:e5:
         ad:8d:3c:b8:76:94:ed:40:d3:e1:28:4b:7f:c8:82:e9:e9:56:
         c4:fe:fe:58:5d:ef:f3:28:ba:c3:e7:e2:f7:97:9b:cb:dc:b1:
         d5:a7:50:21:c0:e9:32:24:c4:5e:9a:3e:de:6e:4b:c4:35:5b:
         6c:0e:c1:a0:c9:e3:4f:08:b4:a3:6d:02:8c:15:94:56:26:f3:
         22:51:ff:24:6c:5e:36:28:bb:bc:35:2e:53:2c:05:87:b0:42:
         3e:29:6a:69:0f:a2:b2:96:df:fa:99:4c:a3:22:3e:37:85:53:
         de:0c:9a:c4:01:2f:ac:5d:7f:d4:d9:69:a4:10:f0:56:a2:88:
         01:3b:bf:27:41:1b:2f:e7:85:9b:74:f6:64:0f:a0:7a:2e:8e:
         5c:85:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 00:54:48 2024 by rpki-client on console-fra.rpki-client.org