Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a373a3a2f34382d3438203d3e20323731333535.roa
File:                     323830343a376133343a373a3a2f34382d3438203d3e20323731333535.roa (raw, json)
Hash identifier:          Fl735nv2As2OpH9b5oS7xaPnrVwSfCQeO1UIXK0KROw=
Subject key identifier:   5C:0A:4C:6B:D7:BD:33:C6:CB:91:A9:03:EC:7C:37:D7:19:57:F7:F9
Certificate issuer:       /CN=F5A743CB79514A022DEC422535A63FCBFC40185B
Certificate serial:       474096AEAC0AE9526021435E7384B31D651E864B
Authority key identifier: F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a373a3a2f34382d3438203d3e20323731333535.roa
Signing time:             Thu 07 Nov 2024 16:43:28 +0000
ROA not before:           Thu 07 Nov 2024 16:38:28 +0000
ROA not after:            Thu 06 Nov 2025 16:43:28 +0000
asID:                     271355
IP address blocks:        2804:7a34:7::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:40:96:ae:ac:0a:e9:52:60:21:43:5e:73:84:b3:1d:65:1e:86:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A743CB79514A022DEC422535A63FCBFC40185B
        Validity
            Not Before: Nov  7 16:38:28 2024 GMT
            Not After : Nov  6 16:43:28 2025 GMT
        Subject: CN=5C0A4C6BD7BD33C6CB91A903EC7C37D71957F7F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:54:2f:d7:fa:c7:4c:3a:9e:71:40:98:3e:
                    ca:6c:ab:60:10:b4:5a:4c:ce:e2:d0:f8:77:d6:52:
                    19:65:bc:20:cd:dd:1c:5a:26:0f:5c:9f:c3:35:3c:
                    81:c3:66:e7:4d:14:40:8d:5d:d8:b6:2b:da:4e:eb:
                    75:9d:6a:85:94:7c:24:36:ce:f5:cb:2b:8b:44:ef:
                    d6:71:62:49:43:1b:0b:73:d1:11:14:a4:e8:d5:d6:
                    4d:6e:40:9f:61:e1:e7:3c:00:1e:48:e1:f5:5d:ee:
                    62:09:fd:08:25:00:a3:09:d8:55:b5:cc:06:01:05:
                    37:a7:68:01:84:c8:1b:17:a3:a5:fb:09:f6:f4:76:
                    73:af:57:41:3f:89:9f:58:d7:1f:dc:76:93:23:8e:
                    36:63:68:a4:3b:60:68:8b:bd:47:f5:f5:63:b6:2f:
                    09:12:8c:68:a8:08:05:3a:f0:ca:35:af:49:4b:f2:
                    1a:36:29:1b:f7:ab:3c:52:68:9b:32:31:8a:77:d1:
                    fe:d5:c2:c2:59:97:4f:6c:6f:f2:02:19:66:f7:4e:
                    17:76:ec:52:44:27:e8:18:e4:ef:54:bc:eb:77:f7:
                    b7:85:2d:e7:c7:62:4a:37:9a:a1:09:42:6f:de:4e:
                    5d:44:9d:6d:33:1d:a1:d2:23:7c:84:03:2a:1a:8b:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0A:4C:6B:D7:BD:33:C6:CB:91:A9:03:EC:7C:37:D7:19:57:F7:F9
            X509v3 Authority Key Identifier:
                keyid:F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/F5A743CB79514A022DEC422535A63FCBFC40185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a373a3a2f34382d3438203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a34:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:59:cc:5a:da:41:b3:fa:c6:de:d4:53:3a:33:dc:bf:0d:ab:
         74:10:87:11:e7:f5:0a:70:86:46:82:b6:ae:f2:08:36:69:ad:
         bb:2f:de:5a:02:d2:28:83:7c:25:20:89:0b:5e:5f:e9:b9:33:
         41:86:4b:75:9d:2d:1d:d7:1e:60:1a:23:ac:5f:35:31:eb:46:
         c5:b3:0d:45:3d:78:3d:e8:c2:4d:eb:8e:38:a3:c7:7c:76:6c:
         06:bc:fa:1d:21:e0:b3:b1:8f:90:fd:ea:09:db:ac:ca:da:74:
         d0:d1:21:5f:ef:be:a4:e2:0e:e5:9d:4b:ec:e0:d4:06:4a:06:
         53:f2:ff:60:75:29:7d:95:6f:c9:93:37:70:b3:a0:b7:31:2d:
         63:ec:a0:42:3f:e7:a7:47:2b:c3:71:61:90:64:4d:2c:c4:ca:
         72:24:34:13:e4:61:07:c6:e6:cc:c4:d7:82:76:6c:02:cc:b8:
         72:e2:3f:56:ef:08:12:0a:5a:31:21:6d:9b:bc:90:05:99:25:
         55:d1:37:59:8b:77:e0:a6:f1:a1:f1:69:03:a9:da:5c:12:bf:
         38:33:14:d4:7f:b6:34:f7:f4:00:95:e6:24:c2:a9:41:31:c8:
         fc:4e:43:db:47:7c:d8:1d:04:35:84:f0:a5:54:f9:fa:c8:54:
         8e:b9:af:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 00:34:44 2024 by rpki-client on console-fra.rpki-client.org