Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/323830343a373238343a3a2f33332d3438203d3e20323730383538.roa
File:                     323830343a373238343a3a2f33332d3438203d3e20323730383538.roa (raw, json)
Hash identifier:          4QLjKYIOuzR+kf+lHM3r0lj4Qnd2ER0W513kgrefvAk=
Subject key identifier:   D5:94:37:B7:52:07:14:DE:A4:A9:B7:31:D9:8A:FB:52:21:F0:2A:D2
Certificate issuer:       /CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
Certificate serial:       2F4042F843B0FC3605C27560C55176BF0B506469
Authority key identifier: B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/323830343a373238343a3a2f33332d3438203d3e20323730383538.roa
Signing time:             Fri 15 Nov 2024 14:00:50 +0000
ROA not before:           Fri 15 Nov 2024 13:55:50 +0000
ROA not after:            Fri 14 Nov 2025 14:00:50 +0000
asID:                     270858
IP address blocks:        2804:7284::/33 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:40:42:f8:43:b0:fc:36:05:c2:75:60:c5:51:76:bf:0b:50:64:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
        Validity
            Not Before: Nov 15 13:55:50 2024 GMT
            Not After : Nov 14 14:00:50 2025 GMT
        Subject: CN=D59437B7520714DEA4A9B731D98AFB5221F02AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:bb:e2:84:ce:96:e5:71:da:0a:2e:87:11:
                    34:57:f7:05:a2:55:a1:55:8c:70:73:d9:43:8a:ec:
                    7d:c3:29:b4:fc:e4:1d:fd:b6:f9:88:78:4f:de:c6:
                    67:1d:84:d1:e5:a8:44:9d:4d:4a:e1:2e:72:15:a4:
                    92:c4:b2:54:f5:fb:39:4c:db:60:aa:b6:bb:26:0d:
                    dc:14:f0:b1:70:5d:63:8c:f0:c6:94:36:2d:cc:b6:
                    05:ec:2a:3a:46:d2:c4:36:c3:cc:75:c9:d8:3f:78:
                    18:03:b3:5a:fb:a3:ef:9e:45:1e:8e:b4:12:ea:a9:
                    51:fa:58:d8:33:d1:5d:28:6b:d9:90:ea:c6:52:04:
                    c2:94:24:5c:df:f8:e7:d7:65:2a:b3:17:bc:fc:37:
                    b9:b2:2a:fa:f7:0b:28:92:28:cf:48:c2:f0:bd:93:
                    d2:65:60:e7:53:21:78:36:07:f3:11:a3:32:7a:f3:
                    5c:a5:f2:e4:8d:de:16:bc:13:52:f1:38:56:e6:06:
                    98:fe:19:d5:33:8b:a8:37:af:ab:ff:a3:6a:27:6c:
                    91:84:1b:77:66:ca:43:3f:4e:95:f2:95:8d:4f:2e:
                    a9:b7:f6:f4:d4:13:ad:be:09:b0:e5:d3:50:29:a2:
                    85:56:7a:92:bd:9e:20:11:96:ba:92:1c:43:b3:53:
                    40:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:94:37:B7:52:07:14:DE:A4:A9:B7:31:D9:8A:FB:52:21:F0:2A:D2
            X509v3 Authority Key Identifier:
                keyid:B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/323830343a373238343a3a2f33332d3438203d3e20323730383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7284::/33

    Signature Algorithm: sha256WithRSAEncryption
         8a:c0:76:e3:00:03:93:7c:c5:a4:9d:8a:36:9a:97:c1:b0:47:
         1b:72:48:27:51:64:01:0a:fe:9a:b8:61:5e:9f:4e:fe:65:67:
         41:7b:bd:01:74:a1:83:36:a2:4d:2e:0b:25:e7:59:1b:17:1a:
         93:7b:e7:d6:95:70:b0:64:dc:57:a6:75:6f:d5:3d:bb:1d:60:
         ba:37:ca:3c:fe:80:13:16:3b:2c:34:1e:87:fe:3b:d2:a2:b7:
         81:e9:b3:e0:be:e5:60:b0:ec:e9:3a:60:6f:7c:4e:80:aa:6d:
         71:24:e5:ba:9a:ba:6e:a3:af:eb:38:fa:38:30:f9:a4:44:92:
         e1:9c:8f:2b:bf:5c:63:18:b0:3a:cf:15:ff:44:5c:71:fd:e4:
         ef:6b:09:2f:a3:01:40:07:23:55:b3:93:e4:c1:8f:11:30:39:
         c6:b0:b7:47:23:7c:21:05:ac:d6:9b:0d:4a:fb:7e:15:db:91:
         19:dd:83:87:32:05:d5:3f:8a:86:50:d1:53:8c:5a:49:38:9c:
         b5:ef:4c:c4:2c:db:b9:dc:41:a5:55:00:a6:95:50:fa:10:80:
         fe:1e:d8:d3:05:e3:38:3c:be:7a:89:8d:85:4c:c7:37:1b:cf:
         85:23:6b:e1:bb:3f:73:07:92:1b:4c:00:8a:11:14:52:29:15:
         af:ff:b0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 18:19:08 2024 by rpki-client on console-ams.rpki-client.org