Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/323830343a376234383a3a2f33322d313238203d3e20323731343232.roa
File:                     323830343a376234383a3a2f33322d313238203d3e20323731343232.roa (raw, json)
Hash identifier:          xqG5IJSdrm7tdsPiUVvwQzaU6HBikSMafpiEQPR62ds=
Subject key identifier:   D3:38:50:49:03:BF:A0:C6:49:CE:B7:60:8F:9F:F7:29:D4:EC:95:78
Certificate issuer:       /CN=C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E
Certificate serial:       72D023C9F5427E9C145AD0BC6093089023115818
Authority key identifier: C5:CF:0F:FB:94:D7:93:A1:2D:FD:8C:35:BB:92:BB:DB:B1:6F:52:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/323830343a376234383a3a2f33322d313238203d3e20323731343232.roa
Signing time:             Tue 29 Oct 2024 22:37:15 +0000
ROA not before:           Tue 29 Oct 2024 22:32:15 +0000
ROA not after:            Tue 28 Oct 2025 22:37:15 +0000
asID:                     271422
IP address blocks:        2804:7b48::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d0:23:c9:f5:42:7e:9c:14:5a:d0:bc:60:93:08:90:23:11:58:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E
        Validity
            Not Before: Oct 29 22:32:15 2024 GMT
            Not After : Oct 28 22:37:15 2025 GMT
        Subject: CN=D338504903BFA0C649CEB7608F9FF729D4EC9578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:56:a1:c2:64:51:d9:ff:8f:71:db:cc:2c:dc:
                    31:de:64:93:ee:fa:96:7f:c0:e4:82:22:08:09:fa:
                    a2:3c:28:7d:76:29:96:bb:71:96:c2:aa:a3:56:fe:
                    b7:97:f8:f3:c1:b4:09:82:9c:d6:e8:d7:ce:1c:49:
                    ac:aa:6c:af:4e:d3:1a:df:75:ae:1d:0e:5c:8a:29:
                    d9:02:de:7c:12:b4:aa:a3:e6:61:54:a6:39:05:5b:
                    04:3c:86:79:3b:e3:6d:a4:9e:b4:92:a5:48:7a:dc:
                    4a:eb:3c:8e:bf:9f:b5:f8:37:7c:e2:48:4b:a8:8c:
                    95:ae:30:d5:63:c2:44:fa:0d:3a:4a:e7:c0:ce:25:
                    b1:4a:e7:45:a0:8e:1a:9d:56:80:22:4c:21:1a:8f:
                    ae:7b:4c:51:bf:cd:cf:40:be:92:34:56:1c:b7:e2:
                    ab:02:f2:91:bd:d9:4c:e6:53:df:b0:cc:76:62:26:
                    8b:bc:f6:7d:9f:d2:ac:8b:3f:9c:29:37:b0:bc:32:
                    b0:57:6a:ea:4e:6b:ab:20:5b:bb:d4:73:fa:15:eb:
                    9c:ba:f9:2f:8b:66:69:b6:34:e3:c3:44:12:f8:65:
                    1c:97:e2:bd:b3:8c:35:b1:2f:df:8b:d8:cd:4c:c9:
                    ba:3b:ab:db:de:23:fb:ca:03:2e:b1:d9:11:4f:eb:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:38:50:49:03:BF:A0:C6:49:CE:B7:60:8F:9F:F7:29:D4:EC:95:78
            X509v3 Authority Key Identifier:
                keyid:C5:CF:0F:FB:94:D7:93:A1:2D:FD:8C:35:BB:92:BB:DB:B1:6F:52:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/323830343a376234383a3a2f33322d313238203d3e20323731343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b48::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:89:bc:d8:65:aa:fc:c5:f5:e0:13:d9:e6:87:86:eb:72:b2:
         11:02:b7:f4:b2:30:61:80:88:2b:4c:2e:b7:ac:12:cb:13:b6:
         a7:18:43:96:2c:a1:ba:7c:4d:a8:9a:2f:15:9a:cb:34:7f:ad:
         bb:7e:3c:5d:b4:e9:9a:61:85:22:5d:0a:f0:41:e1:95:f2:59:
         01:bc:19:03:09:87:0e:4e:f7:47:ef:99:0e:ae:cb:88:22:c8:
         a6:dc:bf:12:4a:61:10:b6:fc:af:00:62:23:9d:94:90:ec:d2:
         b6:ef:ad:72:2f:6f:a9:78:20:fa:b4:f1:17:46:09:30:9e:5a:
         9b:94:a8:73:23:7c:33:78:9d:b7:ca:e9:9f:4e:b8:d3:da:76:
         db:66:72:37:9e:2e:19:6d:a0:8b:06:85:f5:78:ef:03:89:73:
         24:fc:32:94:22:8f:94:fb:5b:84:e3:22:62:21:47:86:5f:d2:
         52:77:d2:81:be:08:f1:75:d7:bd:43:6c:83:6b:be:12:13:78:
         c7:30:7e:4a:53:d5:1e:79:fb:c7:61:7b:5d:a6:62:f6:ac:d0:
         ee:a3:5f:a9:e0:bc:96:ab:f2:c7:e2:03:8b:38:07:74:65:11:
         ee:79:96:ad:0f:34:1a:8c:12:a2:94:65:ec:f7:77:f9:6d:47:
         7f:ee:a3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 16:38:33 2024 by rpki-client on console-fra.rpki-client.org