Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a3330303a3a2f34302d3430203d3e20323632383437.roa
File:                     323830343a3265383a3330303a3a2f34302d3430203d3e20323632383437.roa (raw, json)
Hash identifier:          s8DCmoaF2B/e8rx3QbWKcE9ifu0s4xKXMjhkc+bI7aw=
Subject key identifier:   51:06:A3:FA:16:5C:83:30:E9:94:CA:DF:BB:48:3E:70:28:CB:0B:FA
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       14E551361B79C7C7E6EC48E231845CA40BBF17CA
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a3330303a3a2f34302d3430203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:35 +0000
ROA not before:           Thu 04 Apr 2024 16:07:35 +0000
ROA not after:            Thu 03 Apr 2025 16:12:35 +0000
asID:                     262847
IP address blocks:        2804:2e8:300::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e5:51:36:1b:79:c7:c7:e6:ec:48:e2:31:84:5c:a4:0b:bf:17:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:35 2024 GMT
            Not After : Apr  3 16:12:35 2025 GMT
        Subject: CN=5106A3FA165C8330E994CADFBB483E7028CB0BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:f7:28:9e:2a:2f:d6:eb:7d:a2:ce:c0:9c:
                    20:24:df:d9:3f:56:61:86:d8:eb:d5:9a:7b:2d:1c:
                    26:3f:30:04:e5:ce:ba:a7:fc:30:fe:89:36:e3:c0:
                    88:a4:2d:21:98:c1:ea:db:8c:fa:91:c1:af:34:de:
                    65:59:ad:48:1f:7e:24:49:4a:54:7e:59:b8:53:bf:
                    94:66:70:55:a1:1c:ed:a7:e2:d8:b5:a5:48:1a:9c:
                    e3:2c:72:09:a8:b5:b2:d2:04:ef:55:eb:e3:73:b4:
                    6c:a0:84:66:e0:c0:11:c2:97:82:2e:b1:50:63:23:
                    95:98:18:44:dd:b6:fa:5b:a0:d0:d1:45:3d:ff:87:
                    dc:59:58:a2:e9:e2:f9:9d:a1:69:88:f1:0b:85:17:
                    6a:78:5d:c4:00:a3:c5:32:2f:54:43:68:13:90:3c:
                    d7:5c:5b:61:f7:4f:85:6c:17:62:45:49:63:d5:3c:
                    0c:28:b1:25:d0:84:27:e5:53:64:5f:8c:6b:f9:4f:
                    5d:32:27:0a:17:45:1d:45:fa:20:0b:bc:8b:82:93:
                    e0:33:ef:ab:28:54:15:39:68:f2:dc:28:2c:12:d2:
                    15:de:3f:eb:79:54:f2:8f:c4:f9:e7:24:68:70:7e:
                    f0:a3:ad:a8:25:68:40:53:66:03:c1:d5:8c:dc:8f:
                    a9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:06:A3:FA:16:5C:83:30:E9:94:CA:DF:BB:48:3E:70:28:CB:0B:FA
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a3330303a3a2f34302d3430203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:50:d0:06:86:6a:48:d8:e1:58:32:31:69:10:88:92:cd:e0:
         0f:75:de:fa:74:58:55:7d:bb:08:64:31:91:05:3c:75:2d:ab:
         f5:65:35:a5:e7:eb:4d:57:e5:49:3d:73:03:b8:d1:64:37:39:
         ba:45:db:ef:cc:39:dd:65:86:80:7c:5c:11:b9:4a:70:cf:e0:
         0f:c0:6e:6a:13:a8:0c:87:4c:d3:a6:fa:47:6c:1e:14:fa:6b:
         37:9c:59:d7:06:40:7d:cf:e9:fc:f9:7b:57:25:ed:77:99:98:
         5c:c1:1e:bf:88:17:92:3f:de:a7:f8:f2:3d:45:30:d4:20:c3:
         18:15:5f:5e:d5:6e:88:f1:6b:bf:48:85:1a:a0:98:ca:7f:b9:
         96:e9:4e:81:9e:f8:9e:68:e7:6d:11:60:00:1e:cf:a5:87:ac:
         68:18:af:92:6c:57:b2:c2:f1:9a:5a:7f:7e:ef:3d:56:cb:89:
         02:b7:44:a4:1e:19:4d:3d:48:43:25:60:68:c9:3f:6e:0d:fa:
         27:12:5c:12:65:53:29:5c:26:cd:22:49:a1:bc:09:45:91:c5:
         53:0a:b5:c9:29:2e:04:01:76:7b:3c:1e:bd:23:37:cb:46:73:
         bf:07:31:c9:4e:07:79:ac:2d:a9:f9:ab:1f:0e:c2:cb:1a:5c:
         5a:6f:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 22:15:47 2024 by rpki-client on console-fra.rpki-client.org