Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/323830343a353666633a3430303a3a2f33382d313238203d3e20323638303336.roa
File:                     323830343a353666633a3430303a3a2f33382d313238203d3e20323638303336.roa (raw, json)
Hash identifier:          BSuBzK4CBcQPNADa591qqnrZ3kmXiIcawIVTk3DpOxw=
Subject key identifier:   26:DB:5F:C0:A0:61:A6:54:82:6A:19:8D:AE:B6:F4:0E:5D:9B:D1:D8
Certificate issuer:       /CN=C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE
Certificate serial:       3E170ECA42BFDB24478B0777C42B4C4C3422BD5A
Authority key identifier: C3:F6:F0:D0:38:82:5F:4D:BB:C6:F7:5F:CF:DD:C3:5E:66:74:65:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/323830343a353666633a3430303a3a2f33382d313238203d3e20323638303336.roa
Signing time:             Thu 10 Oct 2024 17:37:29 +0000
ROA not before:           Thu 10 Oct 2024 17:32:29 +0000
ROA not after:            Thu 09 Oct 2025 17:37:29 +0000
asID:                     268036
IP address blocks:        2804:56fc:400::/38 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:17:0e:ca:42:bf:db:24:47:8b:07:77:c4:2b:4c:4c:34:22:bd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE
        Validity
            Not Before: Oct 10 17:32:29 2024 GMT
            Not After : Oct  9 17:37:29 2025 GMT
        Subject: CN=26DB5FC0A061A654826A198DAEB6F40E5D9BD1D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:1b:3f:ca:ea:e1:fb:8f:f7:9a:30:46:4c:
                    76:20:56:79:f9:66:54:50:ff:f8:38:f7:42:88:e1:
                    af:e8:65:2d:1c:18:63:f6:25:97:75:c8:ed:13:45:
                    91:67:1d:98:43:68:6b:9d:d2:ed:56:d5:2c:fb:76:
                    30:96:38:7f:34:3b:db:f5:6c:9b:99:a0:02:00:3d:
                    e3:58:58:c2:f5:e8:5e:c1:31:cc:5a:0e:11:66:4e:
                    d1:3a:b1:d6:c1:17:d5:f2:6f:e9:9a:d8:5f:1f:77:
                    1b:bf:5f:a6:f3:1d:c7:52:ae:b4:09:c9:b6:b5:7a:
                    a4:fc:95:74:48:a7:d5:66:9b:97:44:77:92:1f:ce:
                    55:7f:33:0c:02:de:39:4b:45:d7:a5:af:fb:f6:d5:
                    9c:13:c2:7b:81:46:82:24:b6:33:4f:86:30:df:65:
                    e7:ef:ee:d5:df:96:fe:6a:b7:23:76:26:cd:a3:f5:
                    20:b4:4b:91:a8:c0:50:6d:63:8f:91:b9:8c:2d:2c:
                    cd:b2:82:ec:90:80:e6:35:71:87:ef:3f:2a:6b:36:
                    76:30:36:5d:e6:d9:e3:64:36:62:66:32:74:31:2e:
                    94:bd:d0:95:23:d5:fe:74:48:01:4f:74:74:84:57:
                    0c:4a:9d:f3:4d:d9:32:38:50:8b:eb:55:9a:87:ec:
                    8e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DB:5F:C0:A0:61:A6:54:82:6A:19:8D:AE:B6:F4:0E:5D:9B:D1:D8
            X509v3 Authority Key Identifier:
                keyid:C3:F6:F0:D0:38:82:5F:4D:BB:C6:F7:5F:CF:DD:C3:5E:66:74:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/323830343a353666633a3430303a3a2f33382d313238203d3e20323638303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56fc:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         18:c0:47:79:e3:f6:ab:f5:f2:e6:d9:5e:85:93:90:8d:73:4f:
         15:b9:b5:fb:8d:2e:74:00:0c:14:be:42:cf:a6:28:67:91:c1:
         25:9f:56:35:e0:37:a1:f2:57:a3:7a:d9:cc:56:16:3d:80:09:
         21:b1:63:ad:05:02:0b:f1:39:e2:61:0c:11:c8:5c:f3:7c:8a:
         7a:45:ee:c3:12:5e:21:ae:a8:1c:61:36:81:54:bd:5d:86:02:
         63:63:4e:f3:6b:2f:27:4c:06:19:b0:f9:54:2e:b6:00:1f:24:
         d4:8f:8e:db:df:72:21:23:2f:5f:c3:4c:88:a5:50:9e:94:c1:
         e4:65:21:60:ac:7c:4d:25:c3:05:f7:7d:da:e1:c0:e2:a9:34:
         d3:d8:00:c2:c4:ea:d6:d5:74:8e:5d:99:28:5a:8b:f7:9a:32:
         07:0e:34:00:4d:c5:be:bf:c4:56:dc:cf:5c:50:3d:a0:45:47:
         1e:9e:be:b2:9a:a6:1e:45:ef:7e:2d:b2:05:87:49:4a:08:1e:
         e5:8a:8c:e1:73:fd:9c:bd:d2:dd:60:6c:79:5f:58:fc:11:ac:
         ad:19:77:c2:30:cc:2a:3f:9b:2b:f7:82:8f:5a:37:2a:a0:1f:
         31:8c:86:55:09:e9:1e:7b:10:04:87:dd:55:3a:c6:65:1e:75:
         04:c7:dd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 02:04:09 2024 by rpki-client on console-fra.rpki-client.org