Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a3738303a3a2f34322d3432203d3e20323632383437.roa
File:                     323830343a3265383a3738303a3a2f34322d3432203d3e20323632383437.roa (raw, json)
Hash identifier:          +XoSy+RZsw8gfLykbV4Nr6cor6NB+LABDBYRcXOWuvI=
Subject key identifier:   86:6D:24:01:62:D3:91:ED:0F:B1:17:6D:87:CF:73:B1:9B:EA:31:B1
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       6BECA5F3A8C0FA7D3356C9E32F9B366C53CF64DA
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a3738303a3a2f34322d3432203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:36 +0000
ROA not before:           Thu 04 Apr 2024 16:07:36 +0000
ROA not after:            Thu 03 Apr 2025 16:12:36 +0000
asID:                     262847
IP address blocks:        2804:2e8:780::/42 maxlen: 42

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ec:a5:f3:a8:c0:fa:7d:33:56:c9:e3:2f:9b:36:6c:53:cf:64:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:36 2024 GMT
            Not After : Apr  3 16:12:36 2025 GMT
        Subject: CN=866D240162D391ED0FB1176D87CF73B19BEA31B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:57:0a:79:69:b6:09:62:46:4c:41:0f:1e:f1:
                    bf:e6:1a:38:dd:42:e3:b8:21:16:29:5b:6d:40:91:
                    5d:8f:94:44:f5:25:38:f2:75:9b:71:32:b5:e4:a6:
                    df:fd:9f:aa:f1:d7:c5:f6:81:33:8f:92:f4:9d:fc:
                    99:53:bd:9c:4c:41:bc:54:89:63:a8:c5:14:48:cb:
                    47:6a:64:3e:48:8d:c2:16:a2:62:68:ab:e7:3b:76:
                    7c:de:b0:48:2f:45:4c:96:cc:5d:bb:b4:a9:8b:98:
                    95:49:3e:89:79:69:cb:24:c8:b8:fd:37:ea:cb:0e:
                    c6:b8:b6:61:4d:eb:85:df:6e:ba:8b:c6:4d:81:e6:
                    34:c5:41:63:43:af:0c:de:0e:83:f3:96:1a:ae:3c:
                    d2:ff:ca:99:ec:a2:5e:ec:0d:21:c8:4a:32:84:86:
                    b1:33:63:38:8b:e4:2e:b0:e3:1a:32:36:4a:45:b1:
                    c4:66:20:c0:f8:65:ae:e6:df:0c:12:62:89:bb:f1:
                    dc:60:a0:d7:a7:e4:88:24:4b:c7:f4:3c:68:75:d5:
                    43:5a:4f:c8:ce:59:12:9b:95:61:71:89:79:05:5f:
                    c9:ca:0d:70:a6:95:72:5d:73:0c:4c:7d:9f:e4:ba:
                    08:96:c3:b3:36:d8:1b:a5:62:23:c9:59:70:08:a7:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6D:24:01:62:D3:91:ED:0F:B1:17:6D:87:CF:73:B1:9B:EA:31:B1
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a3738303a3a2f34322d3432203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:780::/42

    Signature Algorithm: sha256WithRSAEncryption
         8a:33:88:6f:e1:71:62:80:f8:23:0d:a4:06:78:1c:10:f3:0a:
         7e:d3:e9:4d:31:29:65:38:20:b2:c3:1a:8f:8c:7e:b6:dd:d3:
         fe:2d:bf:e5:42:b5:db:73:db:27:a8:29:a4:c9:42:bd:f5:8f:
         33:c6:56:f7:7a:0f:79:2b:7e:02:2d:66:f8:51:22:4b:36:fc:
         b0:4f:17:06:9d:cf:f2:6c:07:05:bd:38:5f:7e:68:27:ba:64:
         49:bb:c9:41:22:56:07:ce:c1:6d:20:a3:24:d3:e8:ee:a3:b8:
         53:75:8b:36:0a:b2:86:7a:d7:1a:61:7c:8e:e7:e2:81:67:2b:
         91:f8:09:7b:d0:2a:56:c6:53:76:78:71:97:0b:f0:6a:6c:a1:
         16:0f:59:7a:aa:64:01:9d:bd:be:14:d9:77:03:a4:0e:cf:f8:
         77:c0:f7:7c:4f:77:60:f9:c0:49:80:a5:b1:10:7c:68:91:50:
         54:79:b8:fb:b0:9a:6d:eb:e4:fa:6a:9a:7d:3c:c7:45:a2:e5:
         d5:45:e6:0a:4f:67:e8:3d:30:17:2b:49:5e:aa:13:e4:b8:e4:
         15:26:9d:65:2f:55:70:05:e6:93:cd:9d:14:a3:e7:5b:42:11:
         56:17:eb:43:81:53:e9:13:ea:98:d8:89:f2:ff:cb:fe:a0:26:
         0d:16:c5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 22:15:47 2024 by rpki-client on console-fra.rpki-client.org