Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a3a2f33322d3332203d3e203533303338.roa
File:                     323830343a3634383a3a2f33322d3332203d3e203533303338.roa (raw, json)
Hash identifier:          DdPqmB6SU1a6dP8D8va0my9FSyK7P9pCtbGoTRFMyUE=
Subject key identifier:   7A:92:B5:26:27:37:2B:8B:54:4C:9A:8F:93:C6:B5:5C:E2:35:5B:EC
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       2BAAA73A6FA201B489526D57CD930D45B4CAFE04
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a3a2f33322d3332203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:35 +0000
ROA not before:           Thu 07 Nov 2024 04:00:35 +0000
ROA not after:            Thu 06 Nov 2025 04:05:35 +0000
asID:                     53038
IP address blocks:        2804:648::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:aa:a7:3a:6f:a2:01:b4:89:52:6d:57:cd:93:0d:45:b4:ca:fe:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:35 2024 GMT
            Not After : Nov  6 04:05:35 2025 GMT
        Subject: CN=7A92B52627372B8B544C9A8F93C6B55CE2355BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4d:b2:6a:8d:23:92:63:99:d2:e9:a8:c8:46:
                    06:93:73:08:8a:fa:b2:ea:49:f2:8e:27:07:73:43:
                    de:47:cc:d9:6d:08:cc:fb:d4:95:2b:f3:89:52:48:
                    03:01:c4:9e:8e:97:59:db:a8:d7:90:3c:f0:d4:c9:
                    54:2a:a3:7d:f6:1f:98:d1:5d:6b:2b:d1:df:a8:63:
                    6f:26:db:a9:95:17:71:40:75:9b:ed:b4:c3:5b:80:
                    06:25:b9:91:1b:67:16:fa:73:aa:fd:bc:0f:30:9e:
                    07:c9:20:96:14:70:52:ed:f5:12:25:5e:d3:f8:ca:
                    a0:fe:14:be:42:a3:c0:a0:89:50:83:98:38:af:3a:
                    4e:f5:41:b6:a7:b8:01:fb:db:c3:36:2a:e2:2f:a2:
                    dc:f3:5d:6a:01:69:72:06:c1:8d:dc:30:6d:63:f3:
                    05:cd:c6:52:80:fc:d4:8c:84:f0:b6:99:e4:66:0e:
                    5e:5a:b0:23:6c:3e:ef:c4:05:31:fa:43:ab:14:fa:
                    f5:95:ce:96:57:13:91:dd:4e:64:b9:65:b5:8a:a3:
                    2d:f1:d0:22:67:e8:7f:2b:ce:4f:18:55:4c:c1:97:
                    f2:c4:d4:b9:7e:08:c5:36:ed:98:f7:c6:6e:03:52:
                    9e:99:be:14:a9:f0:a2:06:70:d8:29:4c:d3:0f:cd:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:92:B5:26:27:37:2B:8B:54:4C:9A:8F:93:C6:B5:5C:E2:35:5B:EC
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a3a2f33322d3332203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:648::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:99:2b:24:5d:9c:61:94:4e:c7:7e:0a:de:43:4f:bc:1d:0b:
         27:1b:ec:91:0d:a4:f4:6c:46:b7:40:54:54:32:0d:db:c4:dc:
         91:69:6c:10:be:32:8d:db:bb:ac:d3:c8:6e:a5:c9:d6:c8:a7:
         b9:46:91:79:76:c9:65:4b:32:91:d1:eb:9d:56:97:34:c8:e7:
         19:1a:8c:b2:0b:6b:05:9a:af:71:55:d6:e9:87:d7:b6:8e:d7:
         02:b0:25:0f:a1:a3:e6:96:b5:20:de:7f:99:9d:01:63:78:b9:
         2f:f2:77:5f:a8:a8:39:01:a1:18:57:21:15:57:53:3d:ef:46:
         0f:6f:42:a3:05:94:9a:cb:cd:6c:0c:82:5e:0c:77:15:43:bf:
         f8:c9:07:15:26:a2:8f:33:5d:a1:23:d5:5a:73:3a:97:a6:ed:
         a7:65:55:ca:8e:ac:8e:c8:83:db:26:63:96:4d:a2:91:61:94:
         4e:b8:8b:96:01:3b:0a:87:53:19:e0:4e:c6:51:f6:95:e8:42:
         9d:4d:02:96:d8:bb:28:0f:03:8b:ad:b1:45:75:30:9d:e3:36:
         f7:41:71:41:0f:b3:83:33:31:8e:14:e2:37:7c:7e:8d:99:a9:
         43:09:c7:6d:af:ec:20:dd:fd:47:2a:88:aa:a3:52:4a:72:7b:
         ac:0e:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:55:28 2024 by rpki-client on console-fra.rpki-client.org