Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a313566633a3a2f33322d3438203d3e203238333539.roa
File:                     323830343a313566633a3a2f33322d3438203d3e203238333539.roa (raw, json)
Hash identifier:          g1ENzqE36zfs/elkmB/FNMmYOy25TVmEiqePhg5dm1c=
Subject key identifier:   D3:EE:5C:8C:CC:13:68:52:57:18:8C:2A:18:98:B4:18:08:52:7E:A3
Certificate issuer:       /CN=555A896B9AD38EE0189E504FEF3A3F330E294087
Certificate serial:       37EF74D648AA820434E63ECF4B5F65DCAB2FA889
Authority key identifier: 55:5A:89:6B:9A:D3:8E:E0:18:9E:50:4F:EF:3A:3F:33:0E:29:40:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/555A896B9AD38EE0189E504FEF3A3F330E294087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a313566633a3a2f33322d3438203d3e203238333539.roa
Signing time:             Wed 02 Oct 2024 13:38:15 +0000
ROA not before:           Wed 02 Oct 2024 13:33:15 +0000
ROA not after:            Wed 01 Oct 2025 13:38:15 +0000
asID:                     28359
IP address blocks:        2804:15fc::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ef:74:d6:48:aa:82:04:34:e6:3e:cf:4b:5f:65:dc:ab:2f:a8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555A896B9AD38EE0189E504FEF3A3F330E294087
        Validity
            Not Before: Oct  2 13:33:15 2024 GMT
            Not After : Oct  1 13:38:15 2025 GMT
        Subject: CN=D3EE5C8CCC13685257188C2A1898B41808527EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:ee:5d:3e:60:3b:02:fd:4a:85:71:f4:e2:
                    de:ff:2a:b5:46:5e:b2:39:38:c1:12:38:7e:b2:72:
                    2a:e7:18:2f:75:f9:b6:d0:7e:0d:bc:f0:89:d8:2f:
                    af:c4:6b:72:b6:f1:c6:30:31:fe:08:06:14:ed:bb:
                    13:a3:04:02:61:2c:75:72:f8:0c:96:a0:22:c2:59:
                    9b:a2:e6:80:72:b5:4f:de:61:03:e7:63:52:d9:6e:
                    5e:de:02:73:92:bb:1a:df:ee:dd:48:26:f9:17:90:
                    90:fd:8a:b6:b4:bf:73:e5:54:0e:f2:ee:be:db:a4:
                    52:38:2b:0f:c3:3f:86:a0:3d:49:e5:7c:48:39:92:
                    64:96:3f:e7:26:bd:99:88:2b:99:51:2e:98:06:cf:
                    25:96:d2:4f:eb:99:a9:96:5a:f9:e8:95:54:47:86:
                    f1:3a:b6:0e:29:32:b3:d9:0b:c7:35:e4:17:88:79:
                    3a:a1:59:2b:46:f3:89:40:fa:23:e3:88:40:74:ec:
                    12:ad:dd:95:65:4e:5f:6f:12:e4:6a:53:1c:a4:01:
                    84:b7:55:21:b1:c0:eb:3e:ef:b8:da:b2:5a:a1:da:
                    3a:76:c9:28:d1:ca:2f:e0:61:ec:3c:d9:aa:c6:b8:
                    a0:90:51:75:00:07:7f:b9:5a:37:0c:3e:1f:0c:cc:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EE:5C:8C:CC:13:68:52:57:18:8C:2A:18:98:B4:18:08:52:7E:A3
            X509v3 Authority Key Identifier:
                keyid:55:5A:89:6B:9A:D3:8E:E0:18:9E:50:4F:EF:3A:3F:33:0E:29:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/555A896B9AD38EE0189E504FEF3A3F330E294087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/555A896B9AD38EE0189E504FEF3A3F330E294087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a313566633a3a2f33322d3438203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:08:2c:ca:bb:52:77:63:bc:e7:a6:2e:cc:ae:7f:c9:18:
         cf:2d:f8:53:60:bd:68:e0:a1:d9:0d:9a:72:54:69:3d:02:07:
         17:90:11:aa:9d:bb:50:b6:2e:fd:b4:d5:12:ea:bb:78:7a:59:
         0b:2c:79:64:bb:48:f7:62:1c:dc:6f:72:35:2e:3d:17:04:23:
         19:67:42:b1:de:04:3c:0d:16:7f:35:7d:fc:d0:ea:7b:08:36:
         46:ec:37:fb:38:ac:86:0e:b1:da:33:02:fd:94:d4:c2:24:e3:
         55:5f:71:87:43:ba:ef:a1:3d:17:b4:e8:1e:9c:c0:df:43:1f:
         3e:94:cd:12:97:6b:fd:07:e5:2d:fc:54:06:63:60:d7:ca:80:
         4c:10:94:a0:1b:2c:62:29:68:c2:a6:94:c2:5a:6d:99:4d:12:
         a9:8d:43:0d:ec:87:5e:48:fc:a7:66:b9:f9:50:7f:27:45:f9:
         ba:80:35:83:1c:ef:28:dd:77:7e:7d:16:16:d1:7a:bb:7f:31:
         3c:30:ee:71:22:f4:52:b0:80:a6:f8:d5:e2:ec:0d:3c:87:84:
         1f:2a:34:9b:a8:9a:15:7b:2b:80:f8:13:59:01:23:2d:fc:c9:
         7d:14:d1:65:fe:1b:24:12:70:b1:34:f5:08:df:49:61:5f:0b:
         93:dd:99:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 19:24:02 2024 by rpki-client on console-fra.rpki-client.org