Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/323830343a373862633a3a2f33322d3332203d3e20323731323632.roa
File:                     323830343a373862633a3a2f33322d3332203d3e20323731323632.roa (raw, json)
Hash identifier:          29nDjfjsR1KBKXT5wG4g10X5Dn4lfzQM0VRnowP7uKc=
Subject key identifier:   73:DB:D4:D7:82:8C:F6:40:12:1E:C4:04:A5:E7:FB:43:12:BA:A9:15
Certificate issuer:       /CN=13294551CDF12A08FAFC2BB0A9B71E805FA26CE9
Certificate serial:       4EE2AA4EE8A48441687C66B41E2E9BCD1B8B9499
Authority key identifier: 13:29:45:51:CD:F1:2A:08:FA:FC:2B:B0:A9:B7:1E:80:5F:A2:6C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13294551CDF12A08FAFC2BB0A9B71E805FA26CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/323830343a373862633a3a2f33322d3332203d3e20323731323632.roa
Signing time:             Thu 02 May 2024 20:48:07 +0000
ROA not before:           Thu 02 May 2024 20:43:07 +0000
ROA not after:            Thu 01 May 2025 20:48:07 +0000
asID:                     271262
IP address blocks:        2804:78bc::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e2:aa:4e:e8:a4:84:41:68:7c:66:b4:1e:2e:9b:cd:1b:8b:94:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13294551CDF12A08FAFC2BB0A9B71E805FA26CE9
        Validity
            Not Before: May  2 20:43:07 2024 GMT
            Not After : May  1 20:48:07 2025 GMT
        Subject: CN=73DBD4D7828CF640121EC404A5E7FB4312BAA915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:6a:b6:c4:12:f6:a0:53:5b:18:43:b6:25:
                    3f:e8:19:41:41:f7:e8:bb:e7:7f:5c:ba:93:85:64:
                    8b:d8:de:af:87:ce:4d:56:ec:fc:32:b7:29:ba:48:
                    40:ed:d0:48:74:c0:ca:21:77:93:fc:de:e8:06:3a:
                    f8:72:b6:2b:19:8f:38:40:05:4f:a1:be:9a:31:83:
                    7b:53:82:e6:38:7e:88:d4:a5:1f:f1:71:f2:ab:a9:
                    4d:d6:42:08:3a:91:3d:f4:bf:99:cf:f9:34:82:d4:
                    de:6c:13:c4:dd:72:04:4b:42:32:6b:e8:da:11:6d:
                    49:2d:ad:d0:07:e0:da:32:d5:c1:54:eb:f8:3d:62:
                    9d:95:f5:45:89:de:67:df:f4:36:81:81:10:9f:9b:
                    79:9f:f5:67:be:1c:f3:01:99:88:2f:38:2d:ef:f5:
                    b1:c7:d5:cd:48:3e:8d:f9:8d:b4:8d:de:3e:d6:c1:
                    6d:a9:23:9f:c3:1c:b0:5f:ab:a2:df:ca:ee:77:2f:
                    a6:cc:28:db:a3:db:cb:bc:93:aa:84:69:37:ba:35:
                    5d:ce:f9:40:b1:77:e2:27:b0:2a:08:e2:e6:cb:2b:
                    fe:67:cc:9d:1b:9e:6a:0f:47:06:ea:e3:28:ae:d5:
                    cf:91:99:4e:71:53:27:71:00:ce:50:c7:03:50:5d:
                    0f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DB:D4:D7:82:8C:F6:40:12:1E:C4:04:A5:E7:FB:43:12:BA:A9:15
            X509v3 Authority Key Identifier:
                keyid:13:29:45:51:CD:F1:2A:08:FA:FC:2B:B0:A9:B7:1E:80:5F:A2:6C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/13294551CDF12A08FAFC2BB0A9B71E805FA26CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13294551CDF12A08FAFC2BB0A9B71E805FA26CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/323830343a373862633a3a2f33322d3332203d3e20323731323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:db:a0:3e:e3:29:5d:37:0d:7c:09:01:2a:b7:cf:27:78:28:
         d9:72:d5:ed:d4:c4:cc:df:46:29:b7:69:7f:79:51:fe:c9:79:
         8c:fb:cf:00:65:23:5d:c0:2b:ec:80:3a:21:b7:b9:c7:18:30:
         8c:80:fa:6e:84:5e:8e:2e:34:a7:b3:df:50:9a:2a:f2:7f:f3:
         26:8d:84:1b:8b:32:61:7c:12:ba:b9:64:e6:68:63:b5:f6:fa:
         58:27:1e:7f:85:16:65:f0:3e:24:00:53:a4:c2:fa:72:87:4a:
         fe:ce:20:ae:32:53:aa:be:8d:e7:7c:aa:51:66:0d:ec:53:99:
         cc:df:0d:fe:1a:49:e2:42:fc:57:5f:96:46:ff:c8:c6:99:bb:
         83:ed:1b:5a:e7:55:07:5e:5e:fa:5a:2c:2e:75:89:7e:8c:90:
         5d:f5:01:50:20:07:fe:60:39:ff:82:3b:d1:58:44:e7:50:23:
         56:86:37:f4:cd:2c:95:f5:00:26:99:07:c0:98:fa:2d:2c:5c:
         94:13:5c:39:aa:95:8f:09:e9:de:d4:19:38:31:2b:36:fc:e7:
         49:eb:04:c3:93:52:8c:a0:eb:96:79:8d:c7:53:3b:01:e7:37:
         b1:5f:91:38:0d:35:e5:c0:f6:f6:cf:1b:25:64:be:94:d4:38:
         1f:26:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 04:44:33 2024 by rpki-client on console-fra.rpki-client.org