Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/323830343a323566383a3a2f33322d313238203d3e20323634333135.roa
File:                     323830343a323566383a3a2f33322d313238203d3e20323634333135.roa (raw, json)
Hash identifier:          cIV4a3EBnmu/73K05OpOaPb4TeXkmb5wih2MmEPl7+g=
Subject key identifier:   53:93:9F:0F:D7:FE:56:43:BB:6F:5C:7D:8D:19:19:F7:FE:29:9A:FD
Certificate issuer:       /CN=B39237C922AB415B1B0A259FD32B278A7AC32631
Certificate serial:       39C1BE434CB51563E2EDC967ECA843B80938C347
Authority key identifier: B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/323830343a323566383a3a2f33322d313238203d3e20323634333135.roa
Signing time:             Wed 21 Aug 2024 19:23:35 +0000
ROA not before:           Wed 21 Aug 2024 19:18:35 +0000
ROA not after:            Wed 20 Aug 2025 19:23:35 +0000
asID:                     264315
IP address blocks:        2804:25f8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c1:be:43:4c:b5:15:63:e2:ed:c9:67:ec:a8:43:b8:09:38:c3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39237C922AB415B1B0A259FD32B278A7AC32631
        Validity
            Not Before: Aug 21 19:18:35 2024 GMT
            Not After : Aug 20 19:23:35 2025 GMT
        Subject: CN=53939F0FD7FE5643BB6F5C7D8D1919F7FE299AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d4:f2:80:2f:1a:e8:4c:2c:ee:f9:d2:48:29:
                    cf:f6:15:33:a1:45:f4:a2:74:f4:43:1c:f1:aa:6a:
                    ee:5e:2f:96:c6:cc:cc:d6:37:9d:23:26:78:34:c4:
                    67:5e:a9:64:45:9b:08:a6:3f:a2:11:3b:5d:52:84:
                    ee:47:b6:83:47:fb:b1:01:4d:79:4f:21:a9:30:1a:
                    a2:76:86:ef:6c:c2:45:30:ab:e0:64:29:61:cf:15:
                    fa:d0:33:b3:e9:9c:6d:28:54:8b:d2:71:7f:fb:0c:
                    0c:fe:c4:14:2f:90:c0:24:fc:70:09:0f:a3:08:79:
                    fd:d1:a5:3c:e0:94:b0:5b:6f:ba:34:be:df:c8:81:
                    b3:a9:d8:0c:04:bb:db:4b:0a:1f:6f:da:b5:9b:78:
                    2e:54:51:7b:0a:f9:e8:eb:f5:5e:61:a0:92:6f:9f:
                    bf:e6:fc:1b:be:99:00:b4:98:a5:80:b2:b1:f9:02:
                    76:fb:b7:91:f0:24:87:e6:09:cc:ce:d1:f1:73:a1:
                    ae:b4:54:14:1a:88:2a:3a:0a:51:a6:27:67:71:b4:
                    bb:6e:b8:22:7c:f3:93:9b:70:7c:26:7a:d5:ff:61:
                    6d:82:f8:46:ed:3f:a7:07:29:52:26:24:43:30:f3:
                    51:72:41:cb:7a:dc:ae:e2:8b:d8:05:be:42:e8:3d:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:93:9F:0F:D7:FE:56:43:BB:6F:5C:7D:8D:19:19:F7:FE:29:9A:FD
            X509v3 Authority Key Identifier:
                keyid:B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/B39237C922AB415B1B0A259FD32B278A7AC32631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/323830343a323566383a3a2f33322d313238203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:7b:4d:7c:8f:48:59:31:32:4d:fd:d8:fd:5e:0e:8a:0f:44:
         8e:3b:d0:f5:8e:0d:df:d8:2a:9d:a3:92:9e:a6:19:35:45:8e:
         60:22:13:65:c8:3e:0d:27:4b:f7:5d:7b:1d:6f:9c:91:be:8f:
         61:39:6a:d8:3c:94:79:f3:72:f7:1b:14:f9:6d:ba:a2:47:d3:
         83:06:cf:8a:fe:eb:43:33:28:92:32:8d:64:79:96:ae:77:ed:
         08:06:dc:e4:0c:54:ea:73:2f:14:82:c7:ae:77:64:f2:81:e8:
         73:12:ea:35:75:7f:45:e9:63:66:69:a8:9a:29:07:4d:02:34:
         0c:f1:58:18:2f:a8:9a:30:67:d1:63:ae:1d:cd:33:b9:c0:1d:
         dc:b3:2a:00:07:18:2b:66:a7:19:51:08:27:92:00:3c:68:1b:
         23:64:d5:bd:81:0f:0f:25:3f:3a:41:7b:f9:f2:db:37:ad:41:
         47:6b:25:ab:8a:45:4f:79:7e:32:6c:03:86:8a:16:ba:ce:f8:
         57:09:85:8c:dc:e5:12:4c:39:f6:cc:14:92:69:19:3f:a8:fa:
         db:ab:88:3a:78:df:5f:ce:95:f1:69:e8:fe:f7:de:55:8f:d4:
         6e:8f:44:29:78:d7:90:14:3b:f1:ff:84:12:0c:83:c5:c6:46:
         a2:d6:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 13:20:47 2024 by rpki-client on console-fra.rpki-client.org