Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a383030303a3a2f33332d3333203d3e20323732323532.roa
File:                     323830343a383434633a383030303a3a2f33332d3333203d3e20323732323532.roa (raw, json)
Hash identifier:          wfEUuMGIDDTtNcoFz/hkeihTTe7VN9h83M17PqumJx8=
Subject key identifier:   BA:C8:89:87:04:D4:8B:D1:3B:99:9B:CF:EE:CF:03:BA:B4:65:7C:A0
Certificate issuer:       /CN=B311265851863315C392E69266B2EF149F1B2CAF
Certificate serial:       4DFE6B470E310B09EC5C22C98266182A1A4730A2
Authority key identifier: B3:11:26:58:51:86:33:15:C3:92:E6:92:66:B2:EF:14:9F:1B:2C:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B311265851863315C392E69266B2EF149F1B2CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a383030303a3a2f33332d3333203d3e20323732323532.roa
Signing time:             Fri 18 Oct 2024 14:54:49 +0000
ROA not before:           Fri 18 Oct 2024 14:49:49 +0000
ROA not after:            Fri 17 Oct 2025 14:54:49 +0000
asID:                     272252
IP address blocks:        2804:844c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fe:6b:47:0e:31:0b:09:ec:5c:22:c9:82:66:18:2a:1a:47:30:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B311265851863315C392E69266B2EF149F1B2CAF
        Validity
            Not Before: Oct 18 14:49:49 2024 GMT
            Not After : Oct 17 14:54:49 2025 GMT
        Subject: CN=BAC8898704D48BD13B999BCFEECF03BAB4657CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:ce:b9:7a:9c:d8:10:98:00:51:1e:c3:8a:
                    79:d1:0c:d9:4c:6d:09:82:ff:c6:0f:54:80:0b:ce:
                    88:ce:9f:60:9a:9c:fb:29:21:60:da:9a:a3:a2:e1:
                    3e:47:63:c3:ea:04:4d:8c:22:8b:8d:fe:f1:8c:98:
                    fb:2f:b5:a1:0e:cf:cb:be:c9:49:91:d7:61:5e:72:
                    6a:e8:c9:f1:67:1a:71:fa:5e:c8:c2:7f:51:57:1e:
                    54:a4:60:c7:4c:ab:f6:c8:ba:f4:26:25:b5:46:f5:
                    99:04:da:38:76:e9:90:81:7b:8e:b8:11:fc:d8:5e:
                    d9:b0:a3:14:3c:5d:66:9f:69:d3:7d:b1:55:48:1d:
                    38:8f:27:bb:6c:ed:74:35:a9:ea:34:96:48:a6:c4:
                    71:ca:35:6d:84:a8:d9:47:0c:e5:ba:48:af:2e:86:
                    48:43:6a:c1:70:cc:84:a2:ee:77:63:af:e5:99:64:
                    51:65:03:e7:eb:db:56:97:a8:15:f3:fb:d7:dc:c7:
                    29:ee:4a:7c:cc:21:69:78:39:d8:c1:8c:41:de:d5:
                    bb:41:41:20:93:ad:ad:61:02:f6:40:35:95:73:ee:
                    74:ab:78:0c:a9:d3:82:59:94:f5:2a:5a:ff:2c:e9:
                    2d:66:5f:98:5a:9b:6d:ea:7a:5e:ba:e0:e6:7a:9b:
                    fa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C8:89:87:04:D4:8B:D1:3B:99:9B:CF:EE:CF:03:BA:B4:65:7C:A0
            X509v3 Authority Key Identifier:
                keyid:B3:11:26:58:51:86:33:15:C3:92:E6:92:66:B2:EF:14:9F:1B:2C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/B311265851863315C392E69266B2EF149F1B2CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B311265851863315C392E69266B2EF149F1B2CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a383030303a3a2f33332d3333203d3e20323732323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:844c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:d3:f1:87:dc:63:9e:e3:75:eb:b6:63:f3:c6:97:72:a8:df:
         d1:63:c1:d7:51:98:39:41:18:13:89:5c:17:72:fd:03:8a:8e:
         14:df:da:86:b7:27:7b:a9:95:b1:76:42:03:9c:6c:a7:42:db:
         bd:8f:62:a5:96:89:0c:5e:59:1a:ce:88:88:c9:11:5c:6c:ef:
         f4:70:79:68:68:79:49:c9:9f:30:fb:09:97:ab:70:ed:f7:e7:
         7f:3d:6a:17:6f:61:a5:2a:43:66:a2:c1:f4:8f:8b:d7:ff:70:
         39:dd:3e:e4:62:03:f4:d7:3f:c0:bc:a8:4f:7a:7a:2a:1b:82:
         39:26:b6:0f:b1:8f:64:6f:3e:1b:5b:d9:7f:c0:f6:1b:ec:c9:
         84:6e:36:dd:ea:44:7d:f0:97:a4:f0:8b:49:47:c6:78:70:05:
         91:2a:a5:c3:52:ce:44:8e:d3:9f:a7:23:f5:38:75:fe:03:be:
         14:9c:19:11:82:63:6c:61:63:f4:05:7a:24:bd:bd:0b:3e:c4:
         bc:62:25:77:13:e3:19:16:0c:cd:77:2e:27:b6:94:c4:3d:51:
         5a:3a:9d:ad:76:45:c5:c4:c9:8d:d9:cc:c3:71:37:2b:c2:0f:
         15:97:9b:b5:12:3a:fb:11:43:99:29:5c:a2:23:9c:21:0d:c7:
         b3:f7:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 07:36:16 2024 by rpki-client on console-ams.rpki-client.org