Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/323830343a6666343a3a2f33322d313238203d3e203533323138.roa
File:                     323830343a6666343a3a2f33322d313238203d3e203533323138.roa (raw, json)
Hash identifier:          eY/Sz2AkgLkXQgWuad+tXB25Qv52mKC8yZLgRR9ykQM=
Subject key identifier:   CA:57:FB:60:F6:1A:F9:88:A4:C3:A2:3E:64:DF:8F:3A:1A:9D:CC:B4
Certificate issuer:       /CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D
Certificate serial:       7A292460064C5E00392E0D0F96ED4649B4E96FD5
Authority key identifier: 2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/323830343a6666343a3a2f33322d313238203d3e203533323138.roa
Signing time:             Thu 04 Apr 2024 18:29:57 +0000
ROA not before:           Thu 04 Apr 2024 18:24:57 +0000
ROA not after:            Thu 03 Apr 2025 18:29:57 +0000
asID:                     53218
IP address blocks:        2804:ff4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:29:24:60:06:4c:5e:00:39:2e:0d:0f:96:ed:46:49:b4:e9:6f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D
        Validity
            Not Before: Apr  4 18:24:57 2024 GMT
            Not After : Apr  3 18:29:57 2025 GMT
        Subject: CN=CA57FB60F61AF988A4C3A23E64DF8F3A1A9DCCB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:e7:f2:2d:fd:50:cd:b5:61:36:92:b9:7d:
                    6f:46:b6:d7:b8:d8:6a:c7:5b:d8:07:d5:69:c1:cb:
                    70:68:d5:07:5e:49:97:e3:6d:17:42:40:10:ba:4f:
                    b8:d5:f1:b2:39:d7:65:24:ef:ce:d3:e9:cd:3b:32:
                    42:d9:1e:c2:63:6f:08:50:54:bd:69:f2:dd:8b:db:
                    4f:b3:21:1e:7e:e4:de:c3:28:ee:3e:5f:ad:b7:9c:
                    f2:44:8c:b2:8d:e6:a4:70:29:07:6a:b3:02:71:01:
                    10:40:b8:2b:86:9e:90:f0:a2:c8:e6:23:b9:d6:cf:
                    f1:65:69:00:25:46:2c:d5:26:62:b0:53:13:b1:c4:
                    c6:03:16:23:d7:83:09:d3:ca:6a:a9:65:2b:fc:ce:
                    64:2a:da:6d:ea:ef:35:cf:34:be:a0:f0:29:02:de:
                    54:18:3a:64:91:e2:19:d8:d5:bc:c0:0e:85:7d:31:
                    ad:a0:81:b1:05:3a:4e:6a:29:b3:b2:b0:65:65:0c:
                    de:56:bb:99:46:19:0f:e3:3c:24:00:86:f4:77:87:
                    2a:5b:b4:9d:0f:d4:44:90:39:34:23:e3:52:35:51:
                    77:12:82:a6:1f:c4:5a:b8:91:a5:6c:4b:4f:01:2c:
                    d8:59:41:b7:ec:45:08:0a:f3:0d:39:f3:3e:a7:21:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:57:FB:60:F6:1A:F9:88:A4:C3:A2:3E:64:DF:8F:3A:1A:9D:CC:B4
            X509v3 Authority Key Identifier:
                keyid:2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/323830343a6666343a3a2f33322d313238203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ff4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:ef:ab:2d:59:d4:c8:69:cd:f8:da:39:1e:01:65:95:86:45:
         e3:c0:09:ba:17:3f:d1:14:e4:60:13:81:4d:89:d8:62:65:83:
         70:2b:7b:81:4b:86:f9:8b:18:f3:c3:eb:af:e0:71:f9:b2:32:
         58:5b:f6:4f:74:78:14:f7:0d:3f:25:9b:58:9e:9c:98:5f:0b:
         d2:4e:9c:86:84:87:aa:49:0f:52:51:a3:50:8f:bd:d7:5d:08:
         90:4f:3d:fc:f5:d4:0f:d9:66:ff:70:c8:d1:d5:48:39:5c:0c:
         5f:61:cb:cf:15:63:37:af:d0:44:c8:91:ea:f1:0e:a6:54:cd:
         f6:e6:b9:7e:5d:c8:b7:62:73:7c:9c:68:1a:dc:88:ec:cd:da:
         1e:83:ec:33:ba:cc:48:a8:df:96:74:a5:2e:c6:95:d0:72:90:
         fc:ce:d5:ac:a8:50:49:46:7e:43:0f:4c:bd:66:46:50:98:50:
         c5:6d:2e:c5:41:63:04:fd:b9:7f:44:e7:bb:48:cf:06:02:12:
         f7:8c:48:03:92:39:00:88:d2:2b:23:58:1b:85:f9:3e:72:fb:
         d9:c3:6c:4c:ef:39:06:d1:2e:e6:46:5b:2e:71:20:ce:f6:c1:
         b2:53:06:18:22:6e:79:35:9a:a7:2d:6b:1a:94:db:ab:20:38:
         4c:be:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 16:22:55 2024 by rpki-client on console-fra.rpki-client.org