Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a3734303a3a2f34322d3432203d3e20323632383437.roa
File:                     323830343a3265383a3734303a3a2f34322d3432203d3e20323632383437.roa (raw, json)
Hash identifier:          TN4eDGLdGCx2lxwaIEZEeamUQwYMvt3C+n1JjIdtMdM=
Subject key identifier:   C8:41:04:C0:40:BB:9B:0F:82:50:F4:06:B1:12:A3:04:11:A5:0C:A1
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       20CDCDEBA79EF896CE910D5D166C0CA79C2A690C
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a3734303a3a2f34322d3432203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:35 +0000
ROA not before:           Thu 04 Apr 2024 16:07:35 +0000
ROA not after:            Thu 03 Apr 2025 16:12:35 +0000
asID:                     262847
IP address blocks:        2804:2e8:740::/42 maxlen: 42

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cd:cd:eb:a7:9e:f8:96:ce:91:0d:5d:16:6c:0c:a7:9c:2a:69:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:35 2024 GMT
            Not After : Apr  3 16:12:35 2025 GMT
        Subject: CN=C84104C040BB9B0F8250F406B112A30411A50CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:11:b7:03:45:3b:9e:c2:20:2d:62:61:b6:
                    7c:ef:27:5f:16:0b:28:af:86:28:0a:9d:56:fb:f1:
                    a4:34:7c:9b:bb:6d:01:31:6e:56:b6:65:2c:7f:bf:
                    4d:94:78:93:a7:91:0c:4a:65:2c:56:3f:2a:b8:5f:
                    ed:30:c2:e1:a2:6a:7c:06:49:74:37:46:aa:07:ef:
                    00:6e:71:8c:9d:a1:c1:47:bd:00:5f:d7:b6:e5:dc:
                    2c:33:22:fa:82:92:bb:05:ca:0b:87:47:19:1b:8b:
                    d5:90:9f:08:2b:c6:02:23:3c:47:7c:a3:18:3b:96:
                    13:9d:ed:d7:12:56:de:66:80:5d:9e:df:de:05:cd:
                    9a:fb:fc:90:0c:7b:13:6a:67:b2:17:81:3e:e3:47:
                    cc:6d:a8:42:e5:91:b6:b1:1f:68:bd:67:bf:af:db:
                    f6:1c:f8:60:69:26:21:91:86:e0:53:dc:ad:7d:93:
                    17:cd:85:ff:76:38:26:36:c1:21:c5:37:be:12:25:
                    f9:be:b3:82:ea:c2:10:45:0b:39:db:ac:96:92:d4:
                    0c:79:d5:db:31:ba:14:31:f2:58:ff:22:cd:11:48:
                    ab:41:13:b7:18:d6:01:bc:0b:05:d1:37:d8:8f:54:
                    fc:8c:2f:d4:3e:43:c9:2b:16:3b:33:b4:61:5e:47:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:41:04:C0:40:BB:9B:0F:82:50:F4:06:B1:12:A3:04:11:A5:0C:A1
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a3734303a3a2f34322d3432203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:740::/42

    Signature Algorithm: sha256WithRSAEncryption
         52:11:9e:0c:50:9a:ac:9a:fc:8d:44:92:30:3a:10:1a:88:43:
         1b:ba:7e:3b:71:2f:d4:a0:30:88:12:76:2e:e6:29:83:63:72:
         ce:07:67:59:05:b0:0f:35:24:59:30:c9:ad:a0:26:d0:fb:fb:
         ff:c1:d3:b0:d1:f0:6a:b4:ae:7c:aa:98:61:e9:da:1e:d7:42:
         87:95:fb:3b:32:29:3e:92:71:bc:e3:5a:49:22:e9:fe:4e:8e:
         d5:07:87:9a:54:d8:d8:27:8b:fc:fe:99:2d:fc:21:74:30:a8:
         1f:d2:d3:c1:b2:51:d0:e1:fc:02:83:1c:3c:59:c0:e6:24:ff:
         e3:2f:cc:e0:01:0e:23:f8:e5:ea:f3:55:5a:c7:e0:ab:6b:8c:
         f0:f1:c8:06:34:0c:c2:47:dc:b0:18:cf:5e:fc:f3:3b:d2:c3:
         21:45:cc:be:67:73:06:45:51:bf:08:9c:95:93:bf:65:e4:8e:
         ba:d9:47:5d:d2:ac:fc:15:5d:97:78:03:37:20:76:42:bf:f9:
         6c:ab:4a:37:80:06:f7:f3:39:fd:09:d1:92:79:88:de:8d:c1:
         b2:69:74:88:ee:88:e3:6a:38:5c:c4:31:02:49:e2:76:a7:d3:
         47:24:19:85:3b:33:69:08:e2:d9:8e:80:70:bb:d7:02:54:db:
         d3:8f:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 22:15:47 2024 by rpki-client on console-fra.rpki-client.org