Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a3a2f33322d313238203d3e20323633343836.roa
File:                     323830343a313239383a3a2f33322d313238203d3e20323633343836.roa (raw, json)
Hash identifier:          EYXFr1xXCJgBPWhcml5SG0dVVxMErbzCtsfkZClLYiU=
Subject key identifier:   69:82:37:16:7E:0D:93:3B:0C:FA:0B:C3:48:7D:35:C2:0C:2A:7B:86
Certificate issuer:       /CN=3C5A521D0400D454F230DFD5AC8D95290C0A8A51
Certificate serial:       48D87A74A8313B7814C88F12C55991929984B5E9
Authority key identifier: 3C:5A:52:1D:04:00:D4:54:F2:30:DF:D5:AC:8D:95:29:0C:0A:8A:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a3a2f33322d313238203d3e20323633343836.roa
Signing time:             Mon 26 Aug 2024 18:34:48 +0000
ROA not before:           Mon 26 Aug 2024 18:29:48 +0000
ROA not after:            Mon 25 Aug 2025 18:34:48 +0000
asID:                     263486
IP address blocks:        2804:1298::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d8:7a:74:a8:31:3b:78:14:c8:8f:12:c5:59:91:92:99:84:b5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5A521D0400D454F230DFD5AC8D95290C0A8A51
        Validity
            Not Before: Aug 26 18:29:48 2024 GMT
            Not After : Aug 25 18:34:48 2025 GMT
        Subject: CN=698237167E0D933B0CFA0BC3487D35C20C2A7B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:9e:73:c8:4e:4e:70:08:57:ee:49:da:a4:
                    0c:cc:ac:b3:9a:85:de:e1:b4:a1:df:fe:1d:6d:5f:
                    43:2e:db:7b:75:b5:27:12:16:29:8a:9d:90:20:6e:
                    aa:7f:43:35:82:7d:be:0c:fb:90:43:60:67:5c:fc:
                    73:d4:31:d7:b9:58:e4:4b:33:17:80:19:cd:8f:7c:
                    84:37:e6:a7:92:80:2a:95:23:48:1e:d3:b1:97:3d:
                    50:d2:14:7a:5a:58:9a:2c:42:c5:6f:28:d5:25:94:
                    f9:fa:3f:b6:e6:46:8b:a2:77:9e:af:ab:ee:f1:cd:
                    cc:bc:b0:70:e5:20:df:3c:a8:7a:ef:fa:46:18:f9:
                    bc:d6:c4:f2:c8:0f:c4:3d:28:38:13:7f:88:4c:64:
                    d8:3c:84:94:42:7b:99:dc:bd:cc:bc:35:9d:87:cc:
                    b8:e1:a0:5a:35:39:eb:b6:ad:42:09:06:a0:a6:78:
                    19:45:d0:76:4a:41:75:57:a8:69:d5:bc:49:b7:6a:
                    59:88:46:c4:65:d2:42:10:51:76:66:ce:0c:3a:7c:
                    1d:3e:3a:ac:8e:49:52:5d:48:89:8b:8c:f2:c4:41:
                    3d:77:72:3d:19:8b:24:67:c5:e1:25:bd:0d:6d:83:
                    b6:c7:96:4b:2d:90:af:a6:2f:04:20:18:1d:0f:eb:
                    f7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:82:37:16:7E:0D:93:3B:0C:FA:0B:C3:48:7D:35:C2:0C:2A:7B:86
            X509v3 Authority Key Identifier:
                keyid:3C:5A:52:1D:04:00:D4:54:F2:30:DF:D5:AC:8D:95:29:0C:0A:8A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a3a2f33322d313238203d3e20323633343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1298::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:f9:6a:85:35:8a:2f:75:0a:b5:71:e8:54:bc:9c:5d:37:d9:
         70:b6:17:69:74:28:17:c4:ce:95:bf:4b:77:59:7c:c9:25:31:
         b4:30:21:ef:6c:2c:e9:15:86:ae:b3:8e:63:c2:e9:ed:e3:a7:
         3f:d7:a4:2c:f1:9f:26:4d:a6:14:91:1b:a5:dc:2e:ec:70:89:
         55:d0:53:d2:09:97:0b:82:65:9a:bc:f6:4c:b0:72:40:0b:8a:
         65:e1:89:30:85:64:3d:ab:46:cc:eb:bd:0f:c4:ab:c8:b7:a5:
         0f:80:82:42:e7:96:4e:b0:51:30:f0:7a:70:52:e3:9e:a8:32:
         b7:29:de:f2:15:bb:93:8b:31:df:6e:78:48:39:b5:e3:8d:11:
         83:18:77:db:85:7f:2c:94:7f:6f:2a:82:57:ca:99:20:2a:a2:
         1d:22:42:dc:d0:88:b2:0d:8c:2e:b3:b4:b5:2d:1e:53:42:ea:
         40:92:04:4b:78:d2:02:07:ac:1c:a2:5a:b4:bd:50:76:15:e1:
         48:56:d7:8d:b2:e3:6e:b7:3e:a1:29:50:33:00:89:f3:d0:06:
         08:e7:22:2a:2d:25:13:5f:80:19:03:ed:b6:24:57:56:3d:20:
         d1:75:45:5a:c0:ae:85:91:df:fd:e0:8b:73:56:e2:d4:1e:78:
         54:60:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 07:36:16 2024 by rpki-client on console-ams.rpki-client.org