Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/1/323830343a386634633a3a2f33322d313238203d3e20323733343832.roa
File:                     323830343a386634633a3a2f33322d313238203d3e20323733343832.roa (raw, json)
Hash identifier:          nRgsH2A40Ks/xWrPH18bLa26k3W8ZvzP4XAhGCDgMLw=
Subject key identifier:   68:5E:49:91:BD:4D:23:F5:26:31:82:B3:18:D0:B7:9D:C3:B8:42:0A
Certificate issuer:       /CN=543865163CDE60F40F98BB5AB4C5B0D1A3F7455E
Certificate serial:       1508A2B66F648C74B0A052B1D9755423943CE2EF
Authority key identifier: 54:38:65:16:3C:DE:60:F4:0F:98:BB:5A:B4:C5:B0:D1:A3:F7:45:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/1/323830343a386634633a3a2f33322d313238203d3e20323733343832.roa
Signing time:             Thu 04 Apr 2024 01:13:50 +0000
ROA not before:           Thu 04 Apr 2024 01:08:50 +0000
ROA not after:            Thu 03 Apr 2025 01:13:50 +0000
asID:                     273482
IP address blocks:        2804:8f4c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:08:a2:b6:6f:64:8c:74:b0:a0:52:b1:d9:75:54:23:94:3c:e2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543865163CDE60F40F98BB5AB4C5B0D1A3F7455E
        Validity
            Not Before: Apr  4 01:08:50 2024 GMT
            Not After : Apr  3 01:13:50 2025 GMT
        Subject: CN=685E4991BD4D23F5263182B318D0B79DC3B8420A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:32:94:db:2f:5f:21:b1:54:a0:9b:7d:8d:59:
                    7a:9d:67:b8:4f:0f:83:d6:18:97:14:d9:86:35:92:
                    e2:4e:4a:ad:b9:fa:8f:79:d9:a7:bb:53:3e:49:06:
                    e6:ee:7d:b6:3a:77:0a:0d:7d:b4:7f:a7:55:c7:1f:
                    4e:41:8a:19:b2:3c:95:21:dc:1e:31:5a:8e:02:18:
                    2b:06:a9:84:10:00:4c:2a:b7:ec:6d:b1:93:a6:7f:
                    8d:15:7d:15:85:cd:8a:9c:35:82:4a:07:6f:41:05:
                    0b:27:44:05:b9:ad:e3:96:f4:a1:1e:60:94:70:0b:
                    be:cf:58:ee:9b:52:e8:ee:62:31:42:1d:e4:42:51:
                    a2:6c:0e:44:67:b8:31:39:ca:fc:93:ce:a9:d7:b5:
                    1c:cd:53:65:35:14:6b:0b:ae:54:93:19:cd:e7:15:
                    bc:3d:18:73:e1:6e:59:b8:11:30:ca:2b:a3:98:f7:
                    70:d1:d9:d2:1e:45:60:e9:a3:4a:7b:d0:31:07:b4:
                    c2:cd:38:f8:0e:5a:91:bb:fd:73:75:ff:b3:7e:b9:
                    66:2b:d6:94:ff:7e:03:f4:6e:69:53:75:d3:8d:26:
                    4d:8b:44:43:1e:1e:4c:6b:88:ef:10:06:ce:5b:4a:
                    03:da:b1:ab:89:6d:ad:c8:1a:e2:53:96:54:6a:95:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5E:49:91:BD:4D:23:F5:26:31:82:B3:18:D0:B7:9D:C3:B8:42:0A
            X509v3 Authority Key Identifier:
                keyid:54:38:65:16:3C:DE:60:F4:0F:98:BB:5A:B4:C5:B0:D1:A3:F7:45:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/1/543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/1/323830343a386634633a3a2f33322d313238203d3e20323733343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:72:95:3c:0d:72:36:2b:0f:a8:86:ce:6c:21:8a:49:50:e3:
         25:9c:e0:10:7f:ee:24:4f:8e:6c:59:29:3d:e7:00:96:14:cc:
         56:c1:48:07:de:b4:bf:f8:6c:fe:8e:28:c1:70:33:8b:08:bc:
         95:18:05:2b:82:6b:fc:35:cd:10:a9:74:b1:d5:ac:8c:ed:22:
         d8:e2:58:59:af:c1:68:8b:2c:63:2b:da:07:e2:95:1a:b7:f8:
         fe:b8:01:30:31:5f:c6:de:a1:43:c0:89:c7:da:b3:01:06:d8:
         e0:3b:40:9d:d7:b1:39:33:57:76:d0:6d:a1:33:8f:e0:13:e5:
         ad:cf:94:12:dd:0f:0d:f4:18:02:69:4d:2a:ad:0a:41:8f:23:
         10:a8:f8:c3:d4:2b:22:76:c1:4e:ae:a8:e1:53:10:6c:29:2c:
         52:0c:c0:f9:1e:70:6a:64:fc:5e:65:0e:e0:80:c0:ca:ea:bc:
         81:99:36:41:60:83:54:a7:94:45:2c:eb:50:b2:ac:66:2e:82:
         2d:59:f5:10:a7:41:50:bc:20:11:bd:8d:ce:1b:c0:d9:56:ab:
         5f:69:60:c6:25:96:dd:6e:32:ed:a1:9b:c1:a0:bf:4b:a6:c9:
         51:0d:53:0d:c0:21:79:f7:a9:24:05:39:d9:d5:00:e1:60:eb:
         3d:04:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 20:43:17 2024 by rpki-client on console-fra.rpki-client.org