Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a393a3a2f34382d3438203d3e20323731333535.roa
File:                     323830343a376133343a393a3a2f34382d3438203d3e20323731333535.roa (raw, json)
Hash identifier:          DYrX2ANPHQHVCq7VS88W5iTEMgO+ookY5BMC2LVOGko=
Subject key identifier:   2A:53:28:22:D1:E5:D6:72:5A:A3:E3:4A:0E:7D:DA:87:59:15:DD:23
Certificate issuer:       /CN=F5A743CB79514A022DEC422535A63FCBFC40185B
Certificate serial:       2C5558953BE59A24FDD267A7B8AA70190BDF4BC0
Authority key identifier: F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a393a3a2f34382d3438203d3e20323731333535.roa
Signing time:             Thu 07 Nov 2024 16:43:26 +0000
ROA not before:           Thu 07 Nov 2024 16:38:26 +0000
ROA not after:            Thu 06 Nov 2025 16:43:26 +0000
asID:                     271355
IP address blocks:        2804:7a34:9::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:55:58:95:3b:e5:9a:24:fd:d2:67:a7:b8:aa:70:19:0b:df:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A743CB79514A022DEC422535A63FCBFC40185B
        Validity
            Not Before: Nov  7 16:38:26 2024 GMT
            Not After : Nov  6 16:43:26 2025 GMT
        Subject: CN=2A532822D1E5D6725AA3E34A0E7DDA875915DD23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:88:0b:e6:5f:fd:df:00:47:64:2f:40:4f:
                    67:b9:63:15:0d:23:fb:a0:82:4e:bd:52:e5:4b:28:
                    c5:59:a3:48:19:bb:d3:d3:c6:a9:12:0e:60:6b:1f:
                    86:c6:a5:1c:d2:67:46:ec:e3:d5:fe:00:87:aa:9a:
                    4e:66:91:ff:36:5b:0c:06:a3:80:80:d8:06:be:f6:
                    1e:b2:bb:3a:41:5a:cc:05:41:5f:2a:71:4e:79:c5:
                    6b:67:bc:e0:0f:3e:5f:10:d0:b4:0c:97:84:58:3c:
                    8f:38:35:d3:91:c8:ee:d9:05:3d:29:70:ab:25:57:
                    6b:32:cc:f5:be:de:da:a8:1a:d0:c3:f0:09:14:c0:
                    85:5a:ad:46:00:9d:fb:60:11:81:91:bd:97:2c:9d:
                    7d:1e:48:48:52:1a:64:bc:99:14:ed:c5:4c:7c:7d:
                    5a:de:0e:2b:c4:ea:27:b5:de:db:29:28:85:cf:9e:
                    1b:8b:12:ae:08:29:c6:30:c2:7b:6a:cd:f0:96:d2:
                    86:43:3d:df:e1:1e:49:5d:25:e8:c3:c5:52:7a:65:
                    90:67:d5:8c:45:46:d6:26:15:d4:64:a6:eb:1d:d0:
                    16:52:c8:51:c2:54:e9:2f:44:86:6e:30:82:b1:22:
                    2b:32:18:d6:b2:d9:37:2d:16:3b:c8:b5:a6:82:99:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:53:28:22:D1:E5:D6:72:5A:A3:E3:4A:0E:7D:DA:87:59:15:DD:23
            X509v3 Authority Key Identifier:
                keyid:F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/F5A743CB79514A022DEC422535A63FCBFC40185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a393a3a2f34382d3438203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a34:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:8d:59:bd:7a:49:ff:b7:d6:7b:df:45:c5:10:1e:12:94:1b:
         da:0b:9a:fe:7a:7b:98:cd:9c:61:f9:99:0c:b0:12:ef:7f:c1:
         55:53:eb:58:ba:f5:eb:34:cc:b9:2a:16:13:ea:50:7e:a2:fc:
         68:6d:53:4c:f0:f9:7a:ec:09:fe:82:aa:13:53:ee:78:ad:8d:
         54:93:ed:ab:28:dd:75:a8:b1:d9:8f:10:0a:a5:12:7e:77:63:
         bd:64:3a:65:8e:14:43:6a:3f:43:15:c7:cd:f4:66:f0:49:29:
         44:d5:91:68:8c:e1:1b:be:21:49:9c:10:b2:bb:f4:10:41:7d:
         6c:9d:7e:18:05:5e:6f:1f:2b:25:21:f2:c3:07:e6:5a:6a:34:
         ce:29:cd:97:92:6a:d1:a0:d0:94:8f:8c:5b:e4:6a:12:58:20:
         9d:ac:57:da:23:f8:2e:c6:dd:47:1c:e0:a9:b1:d9:86:91:55:
         58:0f:2a:9f:40:95:57:fb:0f:32:e1:fe:bf:c5:b6:bb:ca:95:
         ef:7b:46:10:80:03:3f:d4:f5:21:17:70:68:2f:30:41:6c:6e:
         a6:5b:a0:17:fc:75:bd:cf:6e:c3:e7:1d:9e:fe:39:6b:c2:97:
         48:c7:17:4c:0a:33:49:e5:f0:41:bd:18:a6:7d:f7:3e:81:6e:
         75:a1:6f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----