Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/1/323830343a356438383a3a2f33322d3438203d3e20323638393738.roa
File:                     323830343a356438383a3a2f33322d3438203d3e20323638393738.roa (raw, json)
Hash identifier:          EALI4c99j3lpv7jFempeHwKuy1MjFM6xmOvlXBE3pSw=
Subject key identifier:   3C:76:27:D9:0F:DC:70:82:E4:F1:1B:D9:06:5C:6F:07:94:E0:AB:2B
Certificate issuer:       /CN=0E42C6CBC297BD1C3320047BC357003F3FA9B924
Certificate serial:       063CCB68F2985533BF65E20A32CE5048A14222A6
Authority key identifier: 0E:42:C6:CB:C2:97:BD:1C:33:20:04:7B:C3:57:00:3F:3F:A9:B9:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E42C6CBC297BD1C3320047BC357003F3FA9B924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/1/323830343a356438383a3a2f33322d3438203d3e20323638393738.roa
Signing time:             Thu 04 Apr 2024 13:55:41 +0000
ROA not before:           Thu 04 Apr 2024 13:50:41 +0000
ROA not after:            Thu 03 Apr 2025 13:55:41 +0000
asID:                     268978
IP address blocks:        2804:5d88::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3c:cb:68:f2:98:55:33:bf:65:e2:0a:32:ce:50:48:a1:42:22:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E42C6CBC297BD1C3320047BC357003F3FA9B924
        Validity
            Not Before: Apr  4 13:50:41 2024 GMT
            Not After : Apr  3 13:55:41 2025 GMT
        Subject: CN=3C7627D90FDC7082E4F11BD9065C6F0794E0AB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:74:8e:bb:58:9a:03:1c:5b:13:4d:a6:e2:
                    a9:29:17:7f:c7:24:e1:38:77:66:29:19:a1:34:94:
                    d6:c4:e5:57:b4:01:20:80:46:db:17:6e:34:7c:58:
                    e6:bd:cf:84:a5:96:4f:a1:21:41:66:d0:d6:e4:66:
                    b3:0b:ef:dc:a5:c6:94:69:e8:91:64:f7:17:1d:fd:
                    0e:db:e3:cc:5a:e2:d5:82:17:07:a5:3a:ad:be:ee:
                    41:0b:a3:f3:00:5b:16:b8:e0:2a:c9:9a:fa:59:78:
                    27:2c:fe:d8:8f:42:5e:f0:34:de:6c:6f:4f:46:7e:
                    19:c2:ab:0f:95:f8:fc:2f:50:ce:f6:7e:f2:e8:63:
                    a8:6f:84:ad:88:96:7e:0e:66:f5:29:e6:7b:8d:db:
                    8e:2a:a0:3d:fc:f2:a5:16:15:b9:76:4f:22:5e:81:
                    48:16:d5:bc:96:ea:84:c6:e6:d3:a6:2d:c5:16:45:
                    3e:aa:51:7a:cf:2a:e3:1f:3a:7e:73:c6:57:28:61:
                    4c:36:a7:c8:55:8d:63:40:36:85:e6:1e:82:ab:cc:
                    03:95:45:a0:d0:c2:0c:70:d7:b7:0d:69:b3:f2:b3:
                    85:d9:d8:be:70:37:32:f8:91:db:73:7e:53:b0:80:
                    2e:95:87:99:2a:38:c5:27:61:dc:39:53:02:b1:e6:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:76:27:D9:0F:DC:70:82:E4:F1:1B:D9:06:5C:6F:07:94:E0:AB:2B
            X509v3 Authority Key Identifier:
                keyid:0E:42:C6:CB:C2:97:BD:1C:33:20:04:7B:C3:57:00:3F:3F:A9:B9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/1/0E42C6CBC297BD1C3320047BC357003F3FA9B924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E42C6CBC297BD1C3320047BC357003F3FA9B924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/1/323830343a356438383a3a2f33322d3438203d3e20323638393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:e7:e9:8b:1b:aa:e0:80:0d:3b:26:50:df:e3:65:c3:45:82:
         38:c3:c4:8f:73:ba:6c:6b:1f:a2:fe:03:41:22:51:82:0e:75:
         e5:b7:c9:93:ee:6e:51:fc:1a:7a:31:20:e2:de:d5:08:4f:82:
         f8:e7:98:31:91:3c:2c:b9:e6:7b:ca:b1:7e:e9:0c:7d:53:5b:
         ff:d5:61:f5:47:c5:9e:67:f3:7f:83:dc:a3:c5:cc:28:4c:d2:
         09:29:8e:78:30:ee:28:84:dc:1f:c4:4d:31:91:61:6e:39:a6:
         56:f2:a8:29:74:71:54:8c:d5:29:a2:f7:27:78:f5:45:6a:6d:
         95:3d:25:d2:5d:ba:76:21:be:59:0f:ac:2d:66:3b:f6:69:ed:
         f7:65:d5:67:70:fb:fe:39:66:5d:87:f5:dd:2a:db:ec:ec:20:
         53:e8:4e:02:cc:41:b4:ec:eb:eb:95:87:7c:04:85:c3:d2:95:
         88:8d:77:5f:c0:94:d1:0b:d5:32:bc:8a:ff:54:38:14:fa:f3:
         0e:11:57:6e:25:56:33:e3:3c:c3:4b:a6:30:a0:17:b2:b0:e3:
         3e:6f:cb:b6:d7:47:95:f3:b2:a8:e6:34:f3:e9:a4:f6:fd:f6:
         da:d1:af:ca:cb:d6:0c:87:24:70:fc:85:f8:94:2a:53:c1:0c:
         3b:22:27:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 21:06:02 2024 by rpki-client on console-fra.rpki-client.org