Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383032303a3a2f34332d3433203d3e20323632383437.roa
File:                     323830343a3265383a383032303a3a2f34332d3433203d3e20323632383437.roa (raw, json)
Hash identifier:          OW0JKiMBq46zlYlt9lIBtbVM5IPAjEtI84zTRnbPcJc=
Subject key identifier:   65:92:0B:4E:7F:88:64:92:2F:48:10:30:C8:FE:D7:40:80:F9:1C:A2
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       1332564DA0976BC3580F300DA9F3AC83302002B1
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383032303a3a2f34332d3433203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:37 +0000
ROA not before:           Thu 04 Apr 2024 16:07:37 +0000
ROA not after:            Thu 03 Apr 2025 16:12:37 +0000
asID:                     262847
IP address blocks:        2804:2e8:8020::/43 maxlen: 43

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:32:56:4d:a0:97:6b:c3:58:0f:30:0d:a9:f3:ac:83:30:20:02:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:37 2024 GMT
            Not After : Apr  3 16:12:37 2025 GMT
        Subject: CN=65920B4E7F8864922F481030C8FED74080F91CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:46:11:fb:37:2c:ad:6b:fe:6d:a3:48:7b:
                    d2:5a:b0:3d:2c:cf:13:55:bc:6e:b7:c3:74:cf:12:
                    90:19:0e:48:2c:24:21:90:58:04:6f:67:37:d9:5d:
                    26:41:93:17:26:b6:71:10:75:85:a0:b0:8e:42:fa:
                    2a:18:5d:c7:ec:28:0e:5b:3e:fb:1b:b5:bb:13:c4:
                    c2:a8:c5:fc:79:1e:e0:e1:c3:7c:97:9f:1c:0f:cd:
                    ef:e1:eb:91:bb:bd:ee:05:e7:83:8a:5f:f6:dd:89:
                    4a:36:be:23:05:06:4f:73:4b:96:71:c6:fb:0e:0c:
                    63:26:e5:20:5d:1f:25:d2:2c:ea:b5:bd:0f:95:97:
                    1f:5f:b0:e5:29:64:4f:64:8c:b2:3f:f8:a6:c4:b3:
                    77:f5:ef:bc:b8:43:60:d4:a5:bd:04:6a:dd:df:be:
                    fa:10:7b:88:bd:77:39:63:35:ad:02:62:0a:90:fe:
                    56:9d:53:f8:eb:39:4d:c2:63:bb:08:ff:47:97:7f:
                    fa:a6:9f:97:d4:3c:eb:1e:0b:1c:e7:5a:80:85:25:
                    28:d3:9c:fd:86:8b:f4:e3:8b:c3:3f:21:af:f9:24:
                    dd:b2:10:b0:08:e0:7c:bc:e7:b1:39:4a:a2:92:27:
                    90:7c:54:77:4a:2e:98:f8:c5:09:5a:08:03:d0:13:
                    f6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:92:0B:4E:7F:88:64:92:2F:48:10:30:C8:FE:D7:40:80:F9:1C:A2
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383032303a3a2f34332d3433203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:8020::/43

    Signature Algorithm: sha256WithRSAEncryption
         71:ad:46:1c:c3:05:ab:80:3a:9e:ea:6c:20:78:11:0c:f2:90:
         13:b5:5d:c5:82:2f:66:dd:c7:c6:15:10:56:62:14:04:49:55:
         6d:ea:2f:01:86:2f:ef:89:4c:77:52:59:19:5f:18:08:f2:92:
         8e:67:ac:80:f4:d2:6a:76:26:ab:70:08:74:3f:38:cb:03:eb:
         1f:bf:48:8e:cb:a4:aa:12:b1:2f:cb:2c:e7:1a:f1:73:98:d9:
         4e:69:1a:10:cb:69:38:e9:40:80:97:82:f3:f2:a3:96:94:9b:
         6e:b0:23:95:0c:ae:51:7d:5b:76:63:4e:eb:d4:91:be:61:3f:
         1a:a5:21:15:3e:8a:60:c6:57:d6:18:61:93:71:61:8a:05:d5:
         c4:f6:63:f4:03:95:47:f3:ef:00:01:fe:54:ae:b3:ec:f5:43:
         d2:83:a7:56:26:18:f7:04:b5:52:c5:56:61:b8:29:b2:3b:44:
         62:e0:07:7c:0b:8b:e1:98:c1:ba:4c:07:31:bf:8a:b9:a2:32:
         a8:d3:b7:72:e1:1a:1b:83:9a:95:a6:14:41:82:44:48:50:80:
         ac:c9:69:10:14:18:71:46:61:e4:21:11:21:b3:54:f2:85:f8:
         24:8c:8e:d0:a2:28:45:13:3d:69:21:5b:46:49:18:91:22:e0:
         3c:98:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 22:15:47 2024 by rpki-client on console-fra.rpki-client.org