Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a3a2f33322d3438203d3e20323633353731.roa
File:                     323830343a6633383a3a2f33322d3438203d3e20323633353731.roa (raw, json)
Hash identifier:          C7KL0Hj+4m4a4j1kC7HP0C3Vccx/WkXmLOwfH9/F+Oc=
Subject key identifier:   C8:65:0B:8F:7B:64:C8:B6:B0:D1:66:BB:7F:87:30:AA:30:DC:B3:0D
Certificate issuer:       /CN=45E77B80E717DC2AF79EA5C03072487CF2DFF790
Certificate serial:       211C62886F8442B3BEF9DFF97A606BE3651D5BD6
Authority key identifier: 45:E7:7B:80:E7:17:DC:2A:F7:9E:A5:C0:30:72:48:7C:F2:DF:F7:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E77B80E717DC2AF79EA5C03072487CF2DFF790.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a3a2f33322d3438203d3e20323633353731.roa
Signing time:             Thu 17 Oct 2024 17:32:34 +0000
ROA not before:           Thu 17 Oct 2024 17:27:34 +0000
ROA not after:            Thu 16 Oct 2025 17:32:34 +0000
asID:                     263571
IP address blocks:        2804:f38::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1c:62:88:6f:84:42:b3:be:f9:df:f9:7a:60:6b:e3:65:1d:5b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E77B80E717DC2AF79EA5C03072487CF2DFF790
        Validity
            Not Before: Oct 17 17:27:34 2024 GMT
            Not After : Oct 16 17:32:34 2025 GMT
        Subject: CN=C8650B8F7B64C8B6B0D166BB7F8730AA30DCB30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:21:62:c6:16:9f:33:f1:51:62:99:15:d5:
                    c3:fc:f5:2a:32:45:f1:4d:3f:47:1a:fa:03:5d:d5:
                    f5:ec:71:23:04:e7:49:fe:76:a2:72:b3:c6:dc:06:
                    f1:35:43:e0:b2:ed:68:f6:78:35:11:ba:85:f3:46:
                    5c:f6:4d:b2:de:90:48:b6:b0:45:2b:01:6d:7e:16:
                    2d:98:00:9e:12:71:e4:92:23:13:f5:19:4f:8d:f3:
                    68:26:e5:29:5b:3f:af:d1:06:1c:22:e9:d1:e2:d5:
                    c0:37:6c:86:68:3b:07:d8:2f:e9:c1:6e:6b:c6:8c:
                    2b:11:69:64:09:06:c6:69:0f:00:05:9f:0d:5c:02:
                    d2:ab:60:c0:b8:c1:a0:93:8c:76:93:0a:26:35:b1:
                    09:80:b0:ad:7c:9b:17:cb:5d:d4:32:6e:12:12:cc:
                    bb:77:86:e7:3b:31:f8:3f:5d:21:d7:52:b8:6a:81:
                    73:a8:3c:d2:35:91:89:42:36:68:4c:74:7e:fa:df:
                    cf:db:5d:62:08:c7:30:cb:d8:50:07:1a:c2:b1:76:
                    ed:f9:8d:77:ff:34:74:59:d6:72:fb:9c:e8:fb:a2:
                    57:52:6d:bd:0b:1f:69:86:ec:06:66:23:88:5b:f0:
                    93:4d:43:55:49:8f:a6:0c:04:76:65:54:31:a8:6e:
                    86:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:65:0B:8F:7B:64:C8:B6:B0:D1:66:BB:7F:87:30:AA:30:DC:B3:0D
            X509v3 Authority Key Identifier:
                keyid:45:E7:7B:80:E7:17:DC:2A:F7:9E:A5:C0:30:72:48:7C:F2:DF:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/45E77B80E717DC2AF79EA5C03072487CF2DFF790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E77B80E717DC2AF79EA5C03072487CF2DFF790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a3a2f33322d3438203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f38::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:1c:2d:59:c1:a7:2a:01:db:bf:f0:8d:39:1e:a4:a9:c3:
         32:69:1b:9e:51:dc:71:b1:67:fe:d0:ab:3b:0f:73:45:fd:15:
         ab:95:22:c4:49:d7:ee:ee:55:f5:33:35:32:0e:22:a7:96:fc:
         98:e2:f6:71:05:e6:74:4e:67:17:7c:72:ed:5d:ff:ab:f0:71:
         35:ff:d9:cc:8e:fb:49:3b:bc:b2:fa:6b:fa:29:ef:18:97:a9:
         cd:e4:da:85:83:56:6a:0e:71:dc:5c:f2:c6:a5:26:60:38:9e:
         7c:49:e5:b3:c6:a5:61:2f:3f:3f:09:29:0a:1a:e4:1f:60:db:
         3c:d7:05:42:e9:c5:2d:30:7d:3f:12:2f:05:e2:00:c0:7c:9f:
         9b:d4:3b:92:8f:25:86:f8:db:0b:be:53:5e:17:53:f7:f3:2c:
         ff:4e:3d:6a:11:76:3f:e0:34:d2:47:30:b3:62:01:f6:77:62:
         ce:e4:60:8a:0a:28:40:7c:f4:4d:24:76:96:c0:6f:e7:33:49:
         b1:bc:6d:1d:d7:81:96:4c:04:c4:48:71:8f:d1:59:ee:22:e8:
         5f:79:b9:e6:1b:83:c5:1f:91:47:17:9a:f4:5a:4b:66:a3:d4:
         06:f9:b1:8f:0f:74:e2:6f:1e:13:5a:be:9e:27:92:d1:00:37:
         94:40:88:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:44 2024 by rpki-client on console-fra.rpki-client.org