Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a3a2f33322d3332203d3e20323731333535.roa
File:                     323830343a376133343a3a2f33322d3332203d3e20323731333535.roa (raw, json)
Hash identifier:          QqVe2r6L9x+R/mbm0imgW+/MxEBoqlqPB/mfEvITbfM=
Subject key identifier:   43:9A:C2:86:E9:11:6F:A5:F9:BE:AD:4B:FC:AB:39:A2:CD:F4:14:F1
Certificate issuer:       /CN=F5A743CB79514A022DEC422535A63FCBFC40185B
Certificate serial:       4C9A131F9EAD5DC7BCB729AD4CE10792D563625F
Authority key identifier: F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a3a2f33322d3332203d3e20323731333535.roa
Signing time:             Thu 07 Nov 2024 16:43:26 +0000
ROA not before:           Thu 07 Nov 2024 16:38:26 +0000
ROA not after:            Thu 06 Nov 2025 16:43:26 +0000
asID:                     271355
IP address blocks:        2804:7a34::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9a:13:1f:9e:ad:5d:c7:bc:b7:29:ad:4c:e1:07:92:d5:63:62:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A743CB79514A022DEC422535A63FCBFC40185B
        Validity
            Not Before: Nov  7 16:38:26 2024 GMT
            Not After : Nov  6 16:43:26 2025 GMT
        Subject: CN=439AC286E9116FA5F9BEAD4BFCAB39A2CDF414F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ac:28:7d:32:29:0c:87:0b:1b:55:6d:65:36:
                    f9:19:88:4c:a8:9e:94:b4:7b:13:ac:73:a6:22:4f:
                    78:92:21:ea:1d:56:92:18:c0:7d:dc:d4:9e:cc:58:
                    5c:7a:ba:1f:1c:db:2a:86:cf:74:bb:44:50:91:fd:
                    2f:70:1a:16:d0:ab:e3:05:35:d3:41:04:8c:4d:de:
                    92:fb:78:ee:cc:bf:4a:65:11:03:02:4d:20:c9:9f:
                    b1:77:d3:ac:57:c6:fa:f6:df:4c:51:be:b1:87:b0:
                    04:b4:c4:43:65:92:fe:e2:47:61:3e:ff:5e:30:9e:
                    27:4d:f4:1e:52:31:e4:1c:14:1c:62:85:b3:f1:a7:
                    4f:41:e8:9e:ef:06:53:65:9c:0c:8a:a5:80:a1:90:
                    d6:ee:8b:22:32:10:a2:86:ca:33:9e:80:ee:da:7b:
                    94:e8:4f:b4:48:cb:87:13:1d:46:fe:7a:c6:b6:ee:
                    36:cb:03:9f:c2:75:65:31:10:12:bd:94:7f:6f:e0:
                    ab:d2:c4:6b:64:ec:53:54:ea:6d:a7:6e:20:4a:89:
                    1a:d5:ff:be:29:45:e9:8f:5d:f4:1d:cb:e2:df:ea:
                    30:2e:dc:41:d6:b1:29:77:16:f7:9c:0f:9f:12:f3:
                    aa:da:19:63:96:5c:02:53:c8:63:b0:a6:2a:53:b3:
                    2f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9A:C2:86:E9:11:6F:A5:F9:BE:AD:4B:FC:AB:39:A2:CD:F4:14:F1
            X509v3 Authority Key Identifier:
                keyid:F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/F5A743CB79514A022DEC422535A63FCBFC40185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a3a2f33322d3332203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a34::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:0c:20:45:50:6c:db:29:52:10:a7:66:0f:bf:7d:5f:b0:49:
         e7:24:fe:dd:db:8b:a2:36:5d:77:d2:6d:7e:c9:c8:ab:a6:f4:
         a8:c3:18:d9:08:01:9d:ec:58:50:58:47:0f:4b:04:bb:5a:75:
         70:bf:ec:c4:a2:8c:04:13:a9:c0:8c:34:64:52:bb:67:7a:76:
         bb:40:64:1d:73:d6:aa:33:d2:d2:6d:0c:31:88:a9:7e:b1:72:
         8b:48:59:5d:a9:1b:c0:0e:eb:ac:a6:4f:46:6b:15:25:82:25:
         1f:ba:b4:0e:ef:c5:9a:e8:66:9a:2a:54:d7:f0:8b:85:21:43:
         d6:70:75:dd:00:92:91:bc:84:80:5a:34:a2:3b:a5:11:65:f1:
         ab:5e:b6:23:0c:7a:10:6a:4b:f1:76:cc:5d:b0:b0:66:ed:e8:
         6f:12:90:22:26:9c:05:48:1b:f6:53:4f:35:f1:45:d8:3f:aa:
         78:99:1e:4c:c6:7c:7c:a9:a6:17:05:04:db:ce:67:7a:0e:ec:
         82:88:aa:0f:9d:b5:13:a2:34:4b:bb:20:17:06:4e:04:23:d3:
         5e:8b:b2:8d:77:44:07:1a:91:54:38:07:9c:e2:8b:58:b6:df:
         bc:5f:09:f0:bd:e4:cc:2b:81:84:d9:58:25:0f:1a:0a:bf:19:
         61:c1:1e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 01:22:05 2024 by rpki-client on console-ams.rpki-client.org