Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/323830343a393061633a3a2f33322d3332203d3e20323734353934.roa
File:                     323830343a393061633a3a2f33322d3332203d3e20323734353934.roa (raw, json)
Hash identifier:          db174BsP9MzbzEYOt62SKA7Smf+6xHdRCMYlV0CK7qI=
Subject key identifier:   FF:96:ED:9F:B5:5A:4F:E9:7B:82:E3:DC:0F:40:E6:DA:02:CC:62:BF
Certificate issuer:       /CN=CBF052CC17BE549AAF983B0B899F67FF9E8E92D6
Certificate serial:       414A1103824DC9B449497B530E0AE8B1D695400F
Authority key identifier: CB:F0:52:CC:17:BE:54:9A:AF:98:3B:0B:89:9F:67:FF:9E:8E:92:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/323830343a393061633a3a2f33322d3332203d3e20323734353934.roa
Signing time:             Mon 02 Sep 2024 19:32:03 +0000
ROA not before:           Mon 02 Sep 2024 19:27:03 +0000
ROA not after:            Mon 01 Sep 2025 19:32:03 +0000
asID:                     274594
IP address blocks:        2804:90ac::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4a:11:03:82:4d:c9:b4:49:49:7b:53:0e:0a:e8:b1:d6:95:40:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBF052CC17BE549AAF983B0B899F67FF9E8E92D6
        Validity
            Not Before: Sep  2 19:27:03 2024 GMT
            Not After : Sep  1 19:32:03 2025 GMT
        Subject: CN=FF96ED9FB55A4FE97B82E3DC0F40E6DA02CC62BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:f7:48:f1:28:11:42:ed:f2:2d:0a:88:e0:
                    ff:52:ad:46:24:61:bf:4e:b5:71:74:ee:33:81:11:
                    42:05:01:31:15:86:78:7e:d2:61:bf:7b:7b:56:c7:
                    a7:9b:92:2c:27:73:88:eb:43:cd:eb:e9:4d:5b:cb:
                    7a:9f:ac:5c:af:34:63:93:00:20:ae:12:e1:18:e2:
                    62:9b:b1:99:57:fd:16:3c:cc:f4:82:94:24:a2:33:
                    db:93:3d:b1:7b:b5:68:31:3f:06:57:d6:df:b8:15:
                    0d:7d:a4:bb:60:1c:cf:8c:c7:46:dd:68:67:0a:9b:
                    3c:b5:99:05:3c:7d:bc:c5:3f:a9:57:2c:1c:84:7e:
                    ab:67:dd:05:e6:63:86:17:ad:a6:30:ff:5d:67:06:
                    8a:ab:4f:ce:1f:ac:8b:17:d5:2f:ca:26:9e:b4:67:
                    37:a3:c7:f4:a8:78:0a:e4:ee:7a:19:37:f0:d6:96:
                    54:9d:ff:ab:bc:c2:b3:9b:13:2b:c4:82:5a:93:c2:
                    65:49:0f:53:60:df:80:e3:8a:18:c8:06:ac:30:7d:
                    5e:65:db:60:71:b1:85:e6:97:54:9b:30:af:3e:6e:
                    37:0b:a5:3a:6c:89:2f:03:12:bd:c9:f6:71:47:53:
                    6b:4c:9d:1c:8a:9e:17:c1:44:d8:ed:ea:b0:1b:a5:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:96:ED:9F:B5:5A:4F:E9:7B:82:E3:DC:0F:40:E6:DA:02:CC:62:BF
            X509v3 Authority Key Identifier:
                keyid:CB:F0:52:CC:17:BE:54:9A:AF:98:3B:0B:89:9F:67:FF:9E:8E:92:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/323830343a393061633a3a2f33322d3332203d3e20323734353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:70:b0:3f:41:85:5e:f7:72:63:61:1c:47:04:8e:29:7f:3d:
         a5:f0:a3:f8:2a:b5:3b:de:1b:d0:3b:03:6a:57:33:ea:17:6b:
         33:38:74:af:d7:56:cd:98:d0:55:7d:43:8e:3f:16:a4:36:03:
         9f:09:f0:fb:1b:fe:55:f5:9d:b6:f7:0d:5d:f8:a6:16:0f:3c:
         ac:1d:dc:7a:34:2c:54:52:19:e9:46:9b:fa:63:59:16:f7:1e:
         4d:cb:d5:ef:c1:b0:51:13:0b:73:5e:1e:34:62:86:50:12:ee:
         b4:ae:4d:38:c8:59:9a:d8:c4:69:3e:29:49:29:5b:32:a2:f3:
         5b:e4:3e:87:77:e3:1a:18:83:c8:6f:47:1e:60:e3:27:ac:34:
         b6:5b:b8:4b:c4:0a:9a:b0:99:b6:fd:67:7b:cc:1c:38:56:94:
         10:c7:41:97:b4:1f:29:f0:fd:aa:75:b5:03:df:5c:98:47:3c:
         8f:f0:81:b4:ce:9f:17:16:f4:e2:af:ab:54:76:5c:c9:2c:63:
         2d:95:6e:a5:67:2c:64:60:fb:72:ac:a1:28:df:b9:23:87:89:
         10:07:8e:de:18:a7:0b:96:0b:34:8d:b0:39:0c:ff:9e:86:99:
         c2:c4:90:a7:6b:3d:02:2d:74:8b:b0:8b:f4:4b:fb:25:06:61:
         c5:ac:eb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:38 2024 by rpki-client on console-ams.rpki-client.org