Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/323830343a323931383a3a2f33322d313238203d3e20323633393937.roa
File:                     323830343a323931383a3a2f33322d313238203d3e20323633393937.roa (raw, json)
Hash identifier:          Vb8lI3hw7JlfuL+wqq2+Odq+/DUbVKwDQTIJLEAPbSw=
Subject key identifier:   73:69:BA:F5:43:03:69:DC:56:44:80:7A:B6:2E:28:DC:AA:BD:6A:11
Certificate issuer:       /CN=4F8329C8BBD7CAFE38A6294270189F534E12126A
Certificate serial:       17BC55C53B2C6B50D3C3C950246897125753E092
Authority key identifier: 4F:83:29:C8:BB:D7:CA:FE:38:A6:29:42:70:18:9F:53:4E:12:12:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F8329C8BBD7CAFE38A6294270189F534E12126A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/323830343a323931383a3a2f33322d313238203d3e20323633393937.roa
Signing time:             Fri 06 Dec 2024 18:15:30 +0000
ROA not before:           Fri 06 Dec 2024 18:10:30 +0000
ROA not after:            Fri 05 Dec 2025 18:15:30 +0000
asID:                     263997
IP address blocks:        2804:2918::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bc:55:c5:3b:2c:6b:50:d3:c3:c9:50:24:68:97:12:57:53:e0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F8329C8BBD7CAFE38A6294270189F534E12126A
        Validity
            Not Before: Dec  6 18:10:30 2024 GMT
            Not After : Dec  5 18:15:30 2025 GMT
        Subject: CN=7369BAF5430369DC5644807AB62E28DCAABD6A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:71:cf:40:34:15:14:f9:d4:3e:30:53:30:74:
                    d3:f9:69:63:0f:1c:44:d6:90:cd:8b:c7:6b:44:3d:
                    34:a2:76:e0:cc:fa:b8:27:f1:91:6b:3c:97:37:62:
                    ed:e0:47:ff:61:fe:e4:5f:82:2b:94:ab:17:40:51:
                    24:11:94:3c:ee:61:c1:5a:9b:41:2f:ae:01:0f:d5:
                    bf:cd:30:42:77:99:97:d7:7e:a4:d0:32:95:94:a7:
                    c9:fb:32:ec:05:f7:0e:bf:5d:68:13:f6:0f:66:b9:
                    2f:20:64:d4:14:26:d4:b7:f4:a4:5c:ca:15:6f:85:
                    16:70:c0:dd:83:76:68:08:b5:9a:d6:f3:7a:70:96:
                    0c:33:00:d8:b2:d7:3f:89:cf:f0:c8:79:df:71:97:
                    b9:ee:1f:44:e2:d8:ad:7a:e6:fa:d7:ba:c5:2e:88:
                    11:9c:98:7f:b3:a1:17:e5:81:fb:fe:dc:14:6d:21:
                    23:ce:25:58:3f:d7:16:31:98:14:f3:f6:47:02:f4:
                    30:a1:b2:42:de:88:bf:5c:b5:08:38:14:04:dc:4c:
                    27:ac:cc:69:9e:96:0e:c8:ad:c5:28:ae:25:15:57:
                    e8:2b:6e:f8:35:59:89:e3:e8:68:d6:a7:2d:85:8c:
                    19:6f:ff:63:73:49:8e:c5:1c:2a:31:b0:8c:49:e1:
                    5f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:69:BA:F5:43:03:69:DC:56:44:80:7A:B6:2E:28:DC:AA:BD:6A:11
            X509v3 Authority Key Identifier:
                keyid:4F:83:29:C8:BB:D7:CA:FE:38:A6:29:42:70:18:9F:53:4E:12:12:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/4F8329C8BBD7CAFE38A6294270189F534E12126A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F8329C8BBD7CAFE38A6294270189F534E12126A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/323830343a323931383a3a2f33322d313238203d3e20323633393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2918::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:9d:82:b1:f6:20:25:fe:85:2c:d2:7f:57:16:04:e0:1e:e8:
         d4:90:50:82:6a:13:85:e3:d8:db:dc:f8:00:f0:b5:75:fa:fd:
         ab:98:8d:60:21:b3:e3:ef:e7:ce:80:62:57:3f:db:28:f0:10:
         27:3e:8e:88:21:92:c9:60:f2:eb:04:65:97:7f:83:e8:12:96:
         d3:e5:b3:aa:c2:60:b6:c6:60:88:69:d0:e6:f4:0e:c8:14:58:
         df:f1:a2:84:29:2a:2f:d3:da:f3:b2:e4:92:cd:25:fe:9e:be:
         75:89:67:b9:dc:df:86:f2:7d:0d:12:7a:29:fb:77:a7:84:a8:
         ed:61:30:50:70:13:a9:72:e8:0a:1e:1f:a1:d9:d9:7a:fd:cb:
         76:c6:77:ca:6d:2b:c3:55:fc:1e:29:01:37:ca:8a:26:2b:37:
         e6:74:db:3a:1e:5d:03:aa:23:d3:11:33:f5:56:e8:30:10:6a:
         5d:f2:fa:63:d0:70:02:6d:a4:de:e9:8d:e1:08:be:3a:d9:bb:
         9e:4c:3d:f0:c9:6e:9f:09:8f:81:e6:a8:d6:3e:18:87:ee:8f:
         c7:91:ff:dd:35:a2:85:30:cd:4d:ef:a3:6b:8a:53:c0:77:0b:
         ce:a7:4b:67:9f:64:c2:be:dc:52:ee:d7:c1:fc:43:22:ea:4e:
         87:13:a9:7b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUF7xVxTssa1DTw8lQJGiXEldT4JIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY4MzI5QzhCQkQ3Q0FGRTM4QTYyOTQyNzAxODlGNTM0
RTEyMTI2QTAeFw0yNDEyMDYxODEwMzBaFw0yNTEyMDUxODE1MzBaMDMxMTAvBgNV
BAMTKDczNjlCQUY1NDMwMzY5REM1NjQ0ODA3QUI2MkUyOERDQUFCRDZBMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlcc9ANBUU+dQ+MFMwdNP5aWMP
HETWkM2Lx2tEPTSiduDM+rgn8ZFrPJc3Yu3gR/9h/uRfgiuUqxdAUSQRlDzuYcFa
m0EvrgEP1b/NMEJ3mZfXfqTQMpWUp8n7MuwF9w6/XWgT9g9muS8gZNQUJtS39KRc
yhVvhRZwwN2DdmgItZrW83pwlgwzANiy1z+Jz/DIed9xl7nuH0Ti2K165vrXusUu
iBGcmH+zoRflgfv+3BRtISPOJVg/1xYxmBTz9kcC9DChskLeiL9ctQg4FATcTCes
zGmelg7IrcUoriUVV+grbvg1WYnj6GjWpy2FjBlv/2NzSY7FHCoxsIxJ4V/lAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUc2m69UMDadxWRIB6ti4o3Kq9ahEwHwYDVR0j
BBgwFoAUT4MpyLvXyv44pilCcBifU04SEmowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdudDJvQkZ3MW5rajZwM3BFS1dLekZYSjhYbnBUaGRmdGpKYUtuOVBV
VmQvMC80RjgzMjlDOEJCRDdDQUZFMzhBNjI5NDI3MDE4OUY1MzRFMTIxMjZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGODMyOUM4QkJEN0NBRkUz
OEE2Mjk0MjcwMTg5RjUzNEUxMjEyNkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHbnQyb0JGdzFua2o2cDNwRUtXS3pGWEo4WG5wVGhkZnRqSmFLbjlQVVZkLzAv
MzIzODMwMzQzYTMyMzkzMTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzOTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCkYMA0GCSqGSIb3DQEBCwUAA4IBAQA0nYKx
9iAl/oUs0n9XFgTgHujUkFCCahOF49jb3PgA8LV1+v2rmI1gIbPj7+fOgGJXP9so
8BAnPo6IIZLJYPLrBGWXf4PoEpbT5bOqwmC2xmCIadDm9A7IFFjf8aKEKSov09rz
suSSzSX+nr51iWe53N+G8n0NEnop+3enhKjtYTBQcBOpcugKHh+h2dl6/ct2xnfK
bSvDVfweKQE3yoomKzfmdNs6Hl0DqiPTETP1VugwEGpd8vpj0HACbaTe6Y3hCL46
2bueTD3wyW6fCY+B5qjWPhiH7o/Hkf/dNaKFMM1N76NrilPAdwvOp0tnn2TCvtxS
7tfB/EMi6k6HE6l7
-----END CERTIFICATE-----
Generated at Thu Dec 12 06:59:45 2024 by rpki-client on console.sobornost.net