Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/323830343a373238343a383030303a3a2f33332d3438203d3e20323730383538.roa
File:                     323830343a373238343a383030303a3a2f33332d3438203d3e20323730383538.roa (raw, json)
Hash identifier:          KbEq6s+yHYZh0p5byPlLzCoUV8pZfvbDlQpedYaJTGE=
Subject key identifier:   58:75:CD:66:D1:89:DB:62:8C:0E:F4:8A:E7:3A:79:0D:95:6D:10:68
Certificate issuer:       /CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
Certificate serial:       491DDF49AF38C7F92DFC8672008F8C8CDD0D7F42
Authority key identifier: B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/323830343a373238343a383030303a3a2f33332d3438203d3e20323730383538.roa
Signing time:             Fri 15 Nov 2024 14:00:33 +0000
ROA not before:           Fri 15 Nov 2024 13:55:33 +0000
ROA not after:            Fri 14 Nov 2025 14:00:33 +0000
asID:                     270858
IP address blocks:        2804:7284:8000::/33 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1d:df:49:af:38:c7:f9:2d:fc:86:72:00:8f:8c:8c:dd:0d:7f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
        Validity
            Not Before: Nov 15 13:55:33 2024 GMT
            Not After : Nov 14 14:00:33 2025 GMT
        Subject: CN=5875CD66D189DB628C0EF48AE73A790D956D1068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:1a:99:56:2b:5b:82:c7:8c:c7:54:3a:01:
                    bb:a0:23:ed:96:cd:b5:5b:a0:ac:55:51:b5:ad:18:
                    0d:3f:27:08:2e:81:2e:b5:3f:b5:95:99:ef:00:f4:
                    42:9c:d4:d2:7a:a7:26:b6:50:cf:d6:e8:14:cf:a9:
                    b5:ef:a0:12:d1:54:c8:0a:41:d3:7e:35:16:9e:25:
                    c3:cb:a3:b5:50:a1:83:d7:30:90:88:d4:10:37:bc:
                    31:75:de:49:8f:46:c8:1b:7d:72:4b:a3:db:29:33:
                    a9:fe:48:ae:f8:07:1f:1f:49:9f:a9:3e:b1:ff:a8:
                    23:57:c6:4d:c1:92:c8:77:87:60:ea:99:64:55:e1:
                    26:8f:71:c1:2e:2d:bc:9d:f8:d8:24:31:5d:98:20:
                    6e:70:14:99:19:d9:3f:8e:e1:b4:b6:68:3d:b5:ee:
                    c9:a2:14:fe:93:70:b1:6c:bb:7b:29:f5:b0:e8:a6:
                    3f:ed:65:ef:f5:e5:87:40:86:2e:20:e7:bd:64:df:
                    ac:97:17:12:39:e0:af:58:6c:b6:df:29:d5:e0:63:
                    bb:54:6d:2c:a0:ec:e4:88:9e:da:dd:b9:3e:fe:1f:
                    a6:69:84:0c:bf:c0:03:0d:9c:aa:fd:e4:fa:ae:32:
                    df:12:77:6b:b4:bf:84:0f:b1:6f:a4:a0:c7:b4:82:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:75:CD:66:D1:89:DB:62:8C:0E:F4:8A:E7:3A:79:0D:95:6D:10:68
            X509v3 Authority Key Identifier:
                keyid:B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/323830343a373238343a383030303a3a2f33332d3438203d3e20323730383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7284:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8b:9e:c5:21:c0:79:fc:8e:ae:f3:e4:39:f4:c7:76:a8:e2:e7:
         a0:c3:fd:55:7e:ee:27:4e:63:96:b5:d7:80:18:72:be:d0:1b:
         18:82:45:46:d3:c3:c1:8e:32:ec:ac:16:b1:1e:83:ce:69:00:
         b3:8e:a0:60:45:bd:ab:e0:8f:6a:bd:81:f6:f2:0f:1b:3a:dd:
         b0:23:58:e7:f7:77:b4:a0:ca:a7:64:19:20:5f:56:50:85:35:
         29:87:8a:de:d4:2d:60:ac:30:f0:5a:3c:46:f8:50:25:cc:30:
         e6:98:be:04:bf:bb:6c:f3:78:fa:41:ae:34:cb:0c:4a:49:ce:
         44:b2:36:64:c9:95:75:ad:5f:21:9c:44:9a:a3:8b:3c:d1:56:
         f7:2c:97:37:a6:96:d6:75:8a:e0:de:22:4c:31:5a:f3:c9:21:
         8d:a0:e9:05:d4:17:f9:d4:8e:af:f7:d0:d9:80:0d:e6:b3:c7:
         34:bb:13:01:1b:df:9a:08:a6:4d:ca:57:86:74:65:38:a9:1f:
         f8:b1:44:eb:1c:99:4e:4c:84:a3:dc:75:18:38:f7:ca:3b:91:
         17:f6:68:ff:60:6e:91:84:c3:6e:c1:9f:21:84:81:09:5a:af:
         cc:c7:1c:b7:95:c1:1d:93:82:89:e7:9f:a5:6e:5c:5e:10:26:
         6c:25:ab:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 17:07:30 2024 by rpki-client on console-fra.rpki-client.org