Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a3a2f34382d3438203d3e20323731333535.roa
File:                     323830343a376133343a3a2f34382d3438203d3e20323731333535.roa (raw, json)
Hash identifier:          NuuNQJjWw5pknFfktHd4CFWH6J1KFUoOnu/nn9KFHhY=
Subject key identifier:   BA:94:94:66:E5:B8:6F:F6:57:B9:41:55:DC:11:01:1B:49:76:88:3F
Certificate issuer:       /CN=F5A743CB79514A022DEC422535A63FCBFC40185B
Certificate serial:       4BEC242A83290FA03851A5C46ACD255C69C17A1C
Authority key identifier: F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a3a2f34382d3438203d3e20323731333535.roa
Signing time:             Thu 07 Nov 2024 16:43:27 +0000
ROA not before:           Thu 07 Nov 2024 16:38:27 +0000
ROA not after:            Thu 06 Nov 2025 16:43:27 +0000
asID:                     271355
IP address blocks:        2804:7a34::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ec:24:2a:83:29:0f:a0:38:51:a5:c4:6a:cd:25:5c:69:c1:7a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A743CB79514A022DEC422535A63FCBFC40185B
        Validity
            Not Before: Nov  7 16:38:27 2024 GMT
            Not After : Nov  6 16:43:27 2025 GMT
        Subject: CN=BA949466E5B86FF657B94155DC11011B4976883F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:76:1f:53:11:6e:ec:b9:b7:9f:43:b0:a6:
                    68:95:4c:0b:a6:fa:0b:c9:20:2d:e5:8d:64:51:b1:
                    72:e6:4b:d1:88:86:06:b7:e6:71:06:c8:74:55:c2:
                    04:02:a7:6f:55:e4:37:60:06:db:96:63:8a:d8:57:
                    82:44:1c:95:8e:33:0b:b1:43:6a:16:29:ea:0a:7a:
                    d8:5f:da:91:54:ac:89:bb:ca:45:a7:f5:63:06:85:
                    d3:72:78:90:39:4c:ab:e6:1e:a7:21:33:d2:90:47:
                    ff:e3:95:16:6c:cc:66:01:9b:d7:19:99:64:7b:e6:
                    0a:ed:a8:c0:89:28:73:5e:b9:9f:55:ae:26:69:1d:
                    cd:6c:7f:65:88:cc:2e:ab:90:f7:88:a5:be:82:ed:
                    34:a7:c2:44:bb:8f:46:52:50:06:cf:71:91:ac:7c:
                    98:de:3e:6d:66:ed:d7:71:53:39:a1:cf:dd:d5:dd:
                    74:c7:4c:f3:49:0f:89:9c:12:27:b7:55:14:94:ad:
                    9a:e1:52:42:4f:79:43:53:ae:55:d5:1c:63:71:1c:
                    66:ac:bd:ee:b5:26:d6:32:7f:0c:85:31:a2:85:ab:
                    ee:7f:3d:3b:56:8d:e1:09:b2:1c:fb:69:19:28:0d:
                    0f:19:3c:1b:88:8e:ae:8c:14:00:15:48:12:9c:08:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:94:94:66:E5:B8:6F:F6:57:B9:41:55:DC:11:01:1B:49:76:88:3F
            X509v3 Authority Key Identifier:
                keyid:F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/F5A743CB79514A022DEC422535A63FCBFC40185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/323830343a376133343a3a2f34382d3438203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a34::/48

    Signature Algorithm: sha256WithRSAEncryption
         d5:4c:c8:37:e8:12:c8:1e:b2:c2:bd:5a:d7:bc:85:83:fc:72:
         a2:de:89:b0:a0:8f:7d:3a:85:d3:4e:6b:b0:de:db:2a:1b:31:
         68:a5:f8:0f:04:a5:9e:eb:a3:64:09:c4:a8:ec:19:72:60:8c:
         c3:0b:c8:87:03:d0:b4:81:38:dd:6a:8e:87:0a:fe:ca:74:e3:
         5f:9a:2d:33:c8:ad:db:19:c1:b1:fb:36:85:9f:97:97:44:b7:
         a1:99:e8:6f:c1:71:db:69:22:16:1c:ab:21:b1:fe:37:d7:4d:
         1d:aa:a4:7a:10:db:65:ab:f0:b9:ea:c5:53:c4:29:e7:24:4a:
         9d:a7:32:41:0a:4c:de:da:9d:c1:93:1e:c6:94:f8:3e:65:cc:
         a5:14:11:ef:22:8f:05:71:e9:e0:94:a9:a9:89:6d:02:47:c1:
         13:2c:c4:d5:0a:70:9d:58:ae:f4:f8:33:13:76:f7:a4:c8:75:
         ed:57:33:07:2c:07:4b:db:5c:ab:8c:36:d7:11:b2:a0:fa:74:
         16:c0:95:03:2f:fd:9d:05:f2:58:89:44:ae:68:1e:2d:8a:91:
         c2:a5:23:29:15:7e:8b:8a:06:f2:8b:58:29:1b:f8:17:c4:50:
         ac:19:85:f9:85:3c:c6:42:bf:0c:c3:76:56:8f:7b:20:e2:91:
         96:ab:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 00:34:44 2024 by rpki-client on console-fra.rpki-client.org