Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/323830343a333239303a383030303a3a2f33342d3334203d3e20323635303835.roa
File:                     323830343a333239303a383030303a3a2f33342d3334203d3e20323635303835.roa (raw, json)
Hash identifier:          FKj+WjGQJ/QBBt7ArEJHLNLXYGSe3qTEmX1bOU00n0E=
Subject key identifier:   43:B9:91:B4:F5:14:44:C2:3C:0D:26:A2:79:6A:AE:0F:47:70:A4:48
Certificate issuer:       /CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Certificate serial:       2426F7B513B5B60E599D446ECE7425746C851369
Authority key identifier: 8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/323830343a333239303a383030303a3a2f33342d3334203d3e20323635303835.roa
Signing time:             Fri 05 Apr 2024 00:27:25 +0000
ROA not before:           Fri 05 Apr 2024 00:22:25 +0000
ROA not after:            Fri 04 Apr 2025 00:27:25 +0000
asID:                     265085
IP address blocks:        2804:3290:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:26:f7:b5:13:b5:b6:0e:59:9d:44:6e:ce:74:25:74:6c:85:13:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
        Validity
            Not Before: Apr  5 00:22:25 2024 GMT
            Not After : Apr  4 00:27:25 2025 GMT
        Subject: CN=43B991B4F51444C23C0D26A2796AAE0F4770A448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:b9:11:1d:8e:fe:f2:0f:ab:6f:f1:80:95:
                    5d:6a:65:5e:24:7c:4a:d4:06:8a:af:7f:78:f7:9d:
                    48:af:bc:d8:35:5b:df:f2:57:cf:b7:e5:84:a2:b8:
                    f2:5f:6d:39:b7:cb:72:56:12:16:01:a5:fe:ea:24:
                    a3:22:92:32:33:17:ec:a2:49:32:98:70:ad:1a:cc:
                    3c:60:10:b7:58:55:21:71:30:c2:78:6e:c3:94:d4:
                    bc:1d:57:2b:64:27:ed:b5:02:b4:1c:ee:3e:e8:4f:
                    63:da:e4:8c:69:86:39:a3:58:48:a5:4d:4e:ac:1e:
                    63:2a:fb:5c:eb:81:9a:f4:60:eb:0c:cf:1f:b8:85:
                    8e:1d:7a:04:2c:88:3d:9d:3c:8c:95:5c:06:8c:79:
                    60:12:a5:c4:29:0e:49:06:30:34:e9:52:94:ab:9b:
                    bf:bc:8f:a8:2f:54:39:1b:c4:f9:ba:64:1a:c7:1c:
                    f0:74:fe:8b:73:96:bd:e6:2d:51:f5:8d:f0:9d:be:
                    2a:4c:3f:5c:06:3b:4d:6e:cd:68:5e:55:b3:4a:10:
                    da:27:ab:fc:8a:88:01:0e:a7:c6:bb:bf:29:10:1c:
                    05:47:93:c4:97:e7:27:ba:83:02:60:a2:0d:55:86:
                    f5:01:cf:a9:26:1b:3a:15:2c:95:40:65:42:b5:b9:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B9:91:B4:F5:14:44:C2:3C:0D:26:A2:79:6A:AE:0F:47:70:A4:48
            X509v3 Authority Key Identifier:
                keyid:8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/323830343a333239303a383030303a3a2f33342d3334203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3290:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:ce:f7:04:f3:1f:fe:11:3f:17:36:c5:67:86:70:e0:f1:de:
         51:d9:c9:da:7d:2f:ba:41:10:cb:78:86:40:f3:b1:de:39:51:
         24:42:35:c2:3e:c8:78:f8:05:dc:05:62:63:77:22:ce:39:16:
         f4:c9:69:63:cf:49:f3:b8:34:92:90:c0:43:f2:6d:3a:60:76:
         9e:98:39:e8:bd:22:e0:e1:7b:f7:53:56:e3:5d:ce:b7:3a:66:
         f5:98:6a:5f:04:79:8b:a5:9d:8b:1f:93:54:be:62:e0:18:3a:
         98:10:c1:92:bd:9f:66:68:d2:2d:80:3e:45:ae:20:b2:16:e1:
         3e:51:07:8b:07:ea:28:fa:23:e6:a7:bd:e5:6b:78:b8:b8:a3:
         b7:f8:6c:df:4b:30:45:4b:5e:0e:ff:4c:2e:69:6a:59:81:2f:
         e8:3a:67:a6:f3:44:0d:f3:44:a6:bf:4a:12:cd:b2:42:56:23:
         ad:db:39:80:1d:b4:21:d1:85:9c:c7:15:0d:95:55:b3:36:de:
         00:9e:5a:60:2d:65:09:4a:ea:d1:82:13:42:40:d3:04:95:7d:
         36:bc:0d:fb:ca:4e:2c:4d:89:a3:0b:ab:df:90:2d:f8:e5:84:
         04:7d:f0:87:fe:84:1b:ff:3f:49:a5:95:91:92:de:82:a4:e1:
         6a:79:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 06:47:04 2024 by rpki-client on console-fra.rpki-client.org