Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/323830343a353237303a3a2f33322d313238203d3e20323638353138.roa
File:                     323830343a353237303a3a2f33322d313238203d3e20323638353138.roa (raw, json)
Hash identifier:          UmRd5oIwQ5djWISZcA0Q4/b5aLz685ig8K6dvSvzce4=
Subject key identifier:   94:A9:FE:1F:24:7D:E4:61:18:7D:20:44:1B:8A:26:5A:33:71:F0:24
Certificate issuer:       /CN=5A003371CC68E0AE639A96528D538339E91DC729
Certificate serial:       46EE3F9A2E815E596B4CEC2E95753357EBB18963
Authority key identifier: 5A:00:33:71:CC:68:E0:AE:63:9A:96:52:8D:53:83:39:E9:1D:C7:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A003371CC68E0AE639A96528D538339E91DC729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/323830343a353237303a3a2f33322d313238203d3e20323638353138.roa
Signing time:             Mon 11 Nov 2024 12:40:39 +0000
ROA not before:           Mon 11 Nov 2024 12:35:39 +0000
ROA not after:            Mon 10 Nov 2025 12:40:39 +0000
asID:                     268518
IP address blocks:        2804:5270::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ee:3f:9a:2e:81:5e:59:6b:4c:ec:2e:95:75:33:57:eb:b1:89:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A003371CC68E0AE639A96528D538339E91DC729
        Validity
            Not Before: Nov 11 12:35:39 2024 GMT
            Not After : Nov 10 12:40:39 2025 GMT
        Subject: CN=94A9FE1F247DE461187D20441B8A265A3371F024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:00:f7:de:78:15:b9:39:e9:fc:57:48:5c:
                    9c:a9:a9:00:ac:3e:9c:3a:cf:10:fc:eb:19:66:e3:
                    07:2d:33:10:8b:35:78:d2:cf:53:c1:57:93:1e:41:
                    40:79:b4:58:03:40:06:ee:39:8f:f4:e1:06:34:75:
                    d0:b7:20:45:f6:52:c8:f9:e2:40:c8:b7:ed:fb:70:
                    14:86:f6:f1:be:61:83:02:5a:10:2a:5c:8b:f7:c2:
                    70:cf:a2:01:58:41:50:73:d8:a8:26:9f:ad:ed:ae:
                    eb:0c:7a:1a:63:24:21:9c:1d:04:15:99:09:3b:08:
                    71:d3:5a:a4:06:d5:c0:13:e0:b9:4e:b3:67:b3:28:
                    4b:74:9d:95:95:89:78:0a:5b:96:5e:78:48:c1:9f:
                    18:56:2c:57:8a:4a:cd:10:07:06:c9:f6:a2:1a:4a:
                    df:53:3b:30:bc:65:86:ef:03:4f:36:58:92:0f:b7:
                    76:a7:b6:61:d4:63:ab:e8:a8:7d:cd:4e:ac:96:64:
                    70:bf:80:04:97:11:6e:ce:2e:db:36:5a:4f:26:c2:
                    93:b9:3a:2e:0c:c7:a6:7f:e7:ad:56:ad:a9:6d:fa:
                    f2:34:b5:38:4c:b3:c7:d1:f2:3a:f5:86:8a:65:58:
                    17:8c:37:98:8e:e0:58:57:4a:a6:ef:98:f4:0f:e8:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A9:FE:1F:24:7D:E4:61:18:7D:20:44:1B:8A:26:5A:33:71:F0:24
            X509v3 Authority Key Identifier:
                keyid:5A:00:33:71:CC:68:E0:AE:63:9A:96:52:8D:53:83:39:E9:1D:C7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/5A003371CC68E0AE639A96528D538339E91DC729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A003371CC68E0AE639A96528D538339E91DC729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/323830343a353237303a3a2f33322d313238203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5270::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:fa:e1:b7:72:7e:3f:8a:e6:de:cc:d9:3d:1f:96:6a:db:4e:
         ae:1e:ef:97:bc:20:ab:a2:ef:b4:4b:0a:d5:7d:ee:fe:21:01:
         8b:26:3e:8e:a1:58:8c:fa:32:84:8f:35:fe:19:62:61:ce:a7:
         b4:80:e4:1d:d2:9b:d9:ed:d9:08:56:f3:da:66:e6:d3:7e:84:
         b0:16:4f:49:3b:00:b0:a6:c3:f1:9e:1b:2b:bd:6c:0f:88:a2:
         07:5a:fd:8a:fb:3b:92:21:ce:0c:60:c7:03:37:6b:ae:33:6f:
         75:a3:4f:7d:7e:5e:4b:89:65:ef:88:4b:18:f6:69:51:28:2a:
         03:72:5c:8c:32:31:3f:07:57:08:05:b4:4f:a6:d5:b1:2c:20:
         38:31:07:85:c3:e1:6c:8b:8e:e5:d4:96:b0:84:42:a5:6f:24:
         8f:87:d0:6a:e0:f7:de:ce:58:7d:36:f3:47:72:09:5a:b0:cf:
         3f:05:f7:7a:e5:43:71:65:59:33:89:97:e0:a7:6d:db:0b:c2:
         64:7a:09:c8:ce:db:5f:3a:d2:de:b3:dc:2d:f3:c9:3d:cb:9c:
         38:e3:7d:70:45:5b:ea:ed:f1:bb:66:b4:3d:60:f4:a6:95:93:
         6a:e0:23:16:da:2e:2f:a3:96:6c:f5:dc:47:60:c7:6d:6c:50:
         3f:ee:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 06:36:35 2024 by rpki-client on console-fra.rpki-client.org