Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33332d3333203d3e20323733353634.roa
File:                     323830343a393061303a3a2f33332d3333203d3e20323733353634.roa (raw, json)
Hash identifier:          71ymwW/ICOX/5Rn9knnPAfqOcSJchA9gBiCmsa9rfw4=
Subject key identifier:   E1:A3:41:1D:6F:A1:70:4E:72:3A:98:D5:BA:FB:8A:2F:14:8E:29:21
Certificate issuer:       /CN=E83AF5C7350BD692E3E61361477A0CC0AB715136
Certificate serial:       24DA0F31B754D8F8F47551DB7D53F31B183B1EE0
Authority key identifier: E8:3A:F5:C7:35:0B:D6:92:E3:E6:13:61:47:7A:0C:C0:AB:71:51:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E83AF5C7350BD692E3E61361477A0CC0AB715136.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33332d3333203d3e20323733353634.roa
Signing time:             Wed 16 Oct 2024 14:57:30 +0000
ROA not before:           Wed 16 Oct 2024 14:52:30 +0000
ROA not after:            Wed 15 Oct 2025 14:57:30 +0000
asID:                     273564
IP address blocks:        2804:90a0::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:da:0f:31:b7:54:d8:f8:f4:75:51:db:7d:53:f3:1b:18:3b:1e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83AF5C7350BD692E3E61361477A0CC0AB715136
        Validity
            Not Before: Oct 16 14:52:30 2024 GMT
            Not After : Oct 15 14:57:30 2025 GMT
        Subject: CN=E1A3411D6FA1704E723A98D5BAFB8A2F148E2921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9b:7c:0c:09:c3:b6:07:e4:ac:10:68:3f:fb:
                    7d:3a:10:bf:9b:9b:80:cb:55:6d:16:6d:73:8c:ec:
                    3f:89:87:dc:44:68:ed:c5:1f:77:15:2b:57:95:f3:
                    79:71:15:79:b5:ac:21:72:d1:47:ce:25:bd:e7:78:
                    2e:62:cb:a2:df:61:35:28:a8:de:f4:40:31:c4:73:
                    9c:b8:31:1b:9b:77:7b:57:67:68:4b:1c:ba:9f:19:
                    e1:8a:89:ed:aa:d7:11:7b:9e:aa:4d:95:5e:07:fc:
                    76:d0:d8:4d:e5:ee:47:14:1d:b4:67:bc:64:cf:39:
                    42:0c:ce:70:5f:e1:6c:ef:60:d2:21:bb:45:f9:94:
                    1e:da:a1:89:08:0f:dd:15:2c:15:34:e4:ec:10:ba:
                    5e:e3:6d:18:ea:ea:b6:25:e4:62:66:2f:d5:73:83:
                    72:c9:06:98:ad:73:9b:1a:fd:5b:30:65:db:ac:8c:
                    4c:e5:b8:37:6e:be:8e:63:b1:6b:12:78:93:ee:42:
                    00:18:d2:71:e7:23:da:63:a5:49:ba:a9:cb:85:56:
                    fb:d4:9b:3a:bc:44:06:c2:6e:c6:78:46:56:fe:66:
                    9d:fa:e9:c7:97:e8:c7:e0:83:ea:9b:b5:88:42:fa:
                    40:df:d4:22:bc:aa:4c:61:20:4b:c1:8c:80:18:0a:
                    61:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A3:41:1D:6F:A1:70:4E:72:3A:98:D5:BA:FB:8A:2F:14:8E:29:21
            X509v3 Authority Key Identifier:
                keyid:E8:3A:F5:C7:35:0B:D6:92:E3:E6:13:61:47:7A:0C:C0:AB:71:51:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/E83AF5C7350BD692E3E61361477A0CC0AB715136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E83AF5C7350BD692E3E61361477A0CC0AB715136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33332d3333203d3e20323733353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90a0::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:49:9d:a9:76:79:b0:99:b7:6c:70:4b:a6:7d:19:79:66:f1:
         85:3c:8b:02:12:fd:b8:b4:5d:1d:3c:32:80:48:57:56:ba:ae:
         22:3a:10:9a:4f:d2:2b:3e:7e:33:5a:b9:dc:d6:3e:f1:9a:0f:
         c0:fa:fa:17:cc:28:cb:a8:43:ed:59:65:c5:8b:44:3d:8a:0e:
         c2:7e:eb:f5:27:45:c8:28:0f:f9:1c:bd:cf:44:f7:b9:c9:ea:
         9b:15:fc:ad:43:28:e2:98:2e:72:f9:26:07:74:3c:a9:a5:b9:
         95:37:dd:f5:0c:58:cb:97:50:b4:e0:a0:3e:a3:66:0a:9a:51:
         b7:ad:2f:00:85:ea:3a:37:a6:01:fb:95:41:b0:62:d9:93:c6:
         47:5d:37:61:25:b2:c6:a8:20:22:28:15:f3:50:3b:9e:29:1a:
         92:29:58:f6:e3:c5:3a:f1:91:52:bc:30:2b:8d:35:03:e0:8e:
         ce:9e:8d:a8:3f:75:37:34:03:c7:dc:bb:16:5d:5a:1e:1b:70:
         53:8e:68:3d:b1:01:45:3b:b5:a2:2f:cf:98:e5:0f:5f:2e:3b:
         82:2e:f4:ba:cc:d1:de:4e:e8:c4:9e:be:b0:45:cc:51:18:72:
         3d:ba:87:29:68:d5:44:83:7e:c2:eb:e8:3f:cd:dd:5e:8c:3c:
         ef:83:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:17:25 2024 by rpki-client on console-ams.rpki-client.org