Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/323830343a373966303a3a2f33322d313238203d3e20323731333337.roa
File:                     323830343a373966303a3a2f33322d313238203d3e20323731333337.roa (raw, json)
Hash identifier:          MK0ePfGd3Mr8DF59Y6ecAFM3EH23uRfQzrTD9Ia6oK8=
Subject key identifier:   7B:82:A7:2D:35:72:84:E5:FA:B5:37:98:AB:BC:85:CA:9F:9C:BF:71
Certificate issuer:       /CN=FED7E42E4E4C7A8F6B2C7D9E39364835717365C1
Certificate serial:       29CBC0D522E211FF0E3AFA612445F9F046852DE0
Authority key identifier: FE:D7:E4:2E:4E:4C:7A:8F:6B:2C:7D:9E:39:36:48:35:71:73:65:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED7E42E4E4C7A8F6B2C7D9E39364835717365C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/323830343a373966303a3a2f33322d313238203d3e20323731333337.roa
Signing time:             Tue 08 Oct 2024 18:14:17 +0000
ROA not before:           Tue 08 Oct 2024 18:09:17 +0000
ROA not after:            Tue 07 Oct 2025 18:14:17 +0000
asID:                     271337
IP address blocks:        2804:79f0::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:cb:c0:d5:22:e2:11:ff:0e:3a:fa:61:24:45:f9:f0:46:85:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED7E42E4E4C7A8F6B2C7D9E39364835717365C1
        Validity
            Not Before: Oct  8 18:09:17 2024 GMT
            Not After : Oct  7 18:14:17 2025 GMT
        Subject: CN=7B82A72D357284E5FAB53798ABBC85CA9F9CBF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:09:99:3e:ac:11:47:95:74:5e:3f:15:f4:
                    23:0b:fb:29:3e:2f:5b:f3:ea:5c:c8:c6:b6:b2:ab:
                    ce:b4:33:90:45:bc:9e:fc:c9:af:89:a8:32:b4:f2:
                    46:0e:67:7b:d3:89:89:b0:19:3d:62:47:f0:f7:8c:
                    57:43:75:7a:14:18:5c:7d:57:cb:ff:1c:42:16:15:
                    26:08:9d:3c:52:a8:9f:35:49:0d:e8:a8:c6:f2:95:
                    34:f0:29:c1:96:b5:01:be:25:96:f7:1f:5c:6a:90:
                    eb:db:b5:f3:cd:82:3a:28:40:3d:b6:92:64:94:64:
                    d7:0d:19:d0:bf:18:08:00:98:77:92:8f:eb:cb:59:
                    48:c6:62:06:74:95:93:1f:c0:47:76:2a:a2:a3:9e:
                    e0:db:3f:3d:e1:e0:6a:c4:4b:9a:ca:f0:05:ab:da:
                    8d:2b:e2:74:d9:dd:08:bd:3a:3e:3a:9b:3b:2d:fc:
                    ab:49:ba:17:ec:5e:ea:5d:b5:e5:91:1e:37:02:30:
                    a4:6d:36:f0:44:6c:f5:8c:bd:ee:94:bc:f2:9f:80:
                    9c:1f:3d:7d:f0:95:4a:64:e8:b6:02:a5:e7:96:90:
                    38:78:b2:b6:1a:e7:86:f6:77:f5:9c:db:e9:a2:a8:
                    8b:a4:9a:58:61:75:df:fa:89:a7:1b:e0:3d:24:a4:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:82:A7:2D:35:72:84:E5:FA:B5:37:98:AB:BC:85:CA:9F:9C:BF:71
            X509v3 Authority Key Identifier:
                keyid:FE:D7:E4:2E:4E:4C:7A:8F:6B:2C:7D:9E:39:36:48:35:71:73:65:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/FED7E42E4E4C7A8F6B2C7D9E39364835717365C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED7E42E4E4C7A8F6B2C7D9E39364835717365C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/323830343a373966303a3a2f33322d313238203d3e20323731333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:28:13:c0:e2:94:17:65:1d:5c:9c:22:4a:f6:21:62:45:ca:
         a8:d4:e0:1b:27:f8:8d:50:a7:86:bc:ac:7d:d2:60:d3:40:55:
         ae:5d:ce:0a:a6:a7:a3:e6:e0:58:20:77:ad:db:c2:4e:46:8a:
         e4:5a:38:87:72:ea:39:d9:b1:c9:42:ba:92:f0:5d:37:cf:ef:
         d2:20:5e:d1:b8:96:65:87:ad:dd:60:43:59:b9:64:91:a6:11:
         43:8f:2d:93:03:e8:eb:cd:35:66:4b:61:40:2d:55:4d:63:4a:
         e7:bd:fd:28:3b:4f:62:71:76:7f:c1:82:79:53:6a:04:b3:34:
         22:4b:1c:bb:65:2b:cd:49:de:18:ab:09:0e:ff:a8:b7:dc:01:
         c2:3d:4b:31:b4:f4:77:58:14:b1:26:c0:f4:01:5c:88:6e:aa:
         76:73:eb:22:5e:4b:da:ac:6b:32:1a:ec:ac:c0:7a:e6:a9:79:
         de:2c:03:8f:17:36:21:6e:0a:38:c3:96:24:36:1f:d1:e2:07:
         75:98:6d:70:e2:bf:3c:cd:7d:3e:fa:5b:64:66:cc:70:29:42:
         4b:15:45:18:89:61:0d:91:c1:dd:ba:67:c9:f4:03:7e:e8:a7:
         5c:5d:79:e2:12:e7:16:3d:59:19:1b:25:5d:cb:f1:f0:10:e4:
         a9:eb:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 00:01:59 2024 by rpki-client on console-fra.rpki-client.org