Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383034303a3a2f34322d3432203d3e20323632383437.roa
File:                     323830343a3265383a383034303a3a2f34322d3432203d3e20323632383437.roa (raw, json)
Hash identifier:          b/+qXAAhaQ9VTqiNd46JUqDZJ0xSSE384sgFONVPp1o=
Subject key identifier:   38:B2:88:F9:CD:9C:EB:38:FA:47:91:90:DC:22:07:A6:A9:98:1E:E1
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       77B67020C870461A40B5D30B28EC9BBAF448929C
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383034303a3a2f34322d3432203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:33 +0000
ROA not before:           Thu 04 Apr 2024 16:07:33 +0000
ROA not after:            Thu 03 Apr 2025 16:12:33 +0000
asID:                     262847
IP address blocks:        2804:2e8:8040::/42 maxlen: 42

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b6:70:20:c8:70:46:1a:40:b5:d3:0b:28:ec:9b:ba:f4:48:92:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:33 2024 GMT
            Not After : Apr  3 16:12:33 2025 GMT
        Subject: CN=38B288F9CD9CEB38FA479190DC2207A6A9981EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:1d:96:a4:b0:22:5c:2e:bd:d9:ee:68:ec:
                    ce:9d:5e:04:82:de:1d:95:6c:14:26:89:06:2b:55:
                    89:25:e4:f5:6a:a8:47:1e:5c:a8:1a:20:e6:cd:59:
                    55:9f:b6:09:b0:b0:c2:70:f9:1d:fe:3b:71:81:20:
                    f2:53:d9:d3:d4:2d:10:13:b1:33:92:c6:69:88:8e:
                    f8:b5:c6:6a:25:e0:d7:7b:ea:9c:76:52:90:39:bb:
                    fb:69:d4:59:f5:83:7b:21:a7:d6:0b:88:24:52:da:
                    29:ae:3d:62:a1:01:15:1b:94:73:57:7a:9f:67:1c:
                    12:4c:a4:65:10:90:f2:89:b3:df:62:e6:ae:78:45:
                    31:e4:5a:7c:6d:78:4c:85:b8:1c:73:d9:de:59:7a:
                    af:6e:49:d6:6c:93:b5:2e:48:e9:c9:1b:53:44:ca:
                    d0:72:44:17:01:f2:36:69:26:90:0a:54:f7:3b:ad:
                    47:43:99:77:c0:9c:42:f1:6d:9c:fc:8d:5e:af:20:
                    4d:30:c0:1c:4a:6e:fa:27:fb:dd:4b:b3:c8:b9:6a:
                    3b:e8:22:56:a9:0a:d0:5a:d3:79:9d:4f:4d:4a:12:
                    20:d8:ec:90:38:cd:22:ed:cc:3e:b0:c0:70:4f:a9:
                    0b:cf:c4:23:19:33:db:01:88:2f:3c:53:b5:27:b6:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B2:88:F9:CD:9C:EB:38:FA:47:91:90:DC:22:07:A6:A9:98:1E:E1
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383034303a3a2f34322d3432203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:8040::/42

    Signature Algorithm: sha256WithRSAEncryption
         32:15:17:75:2c:c9:43:40:1e:af:ac:83:5e:09:b4:26:95:83:
         36:7b:2b:28:58:07:08:da:c7:ed:b0:66:12:b0:64:b2:ed:f3:
         d5:b3:2e:1b:3f:f6:e0:d5:fe:d2:fd:f9:0a:24:be:d0:60:23:
         3a:48:37:4c:58:00:58:bb:95:33:03:3c:a5:57:22:ea:a2:4e:
         4e:af:d2:9c:1d:35:04:c9:a2:f0:5c:48:1c:1c:fe:30:42:93:
         5c:62:18:45:1d:55:df:41:01:a9:34:d2:14:03:26:71:6d:4f:
         c8:f4:65:07:38:0e:a4:c5:ad:14:0e:0b:ac:2e:ff:22:ba:46:
         e4:07:f8:2f:23:0e:6e:88:b1:95:46:45:a6:a7:94:8f:cb:54:
         ff:70:e1:b3:03:55:ea:52:b6:4a:24:9e:68:16:aa:cb:83:ab:
         aa:3e:62:a4:3e:93:ec:19:b9:8a:9c:8e:b3:43:8c:0a:02:48:
         00:2a:2a:8c:7f:53:97:69:18:42:46:bd:71:b9:08:90:50:b4:
         75:21:1e:30:d9:cb:07:25:d7:6e:a2:9a:a0:dd:df:e5:0c:70:
         e2:cd:2f:c3:f2:44:d5:af:59:1b:0d:eb:21:16:fd:ba:04:ea:
         00:32:d3:3b:13:77:23:45:7d:45:39:fa:d7:24:2b:de:07:95:
         f1:c0:e1:bc
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUd7ZwIMhwRhpAtdMLKOybuvRIkpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyRTZFRDk2MEE2QTM1M0RDODRCRTdGMTc4Mjc4MzM3
QjMwMDdGQzAeFw0yNDA0MDQxNjA3MzNaFw0yNTA0MDMxNjEyMzNaMDMxMTAvBgNV
BAMTKDM4QjI4OEY5Q0Q5Q0VCMzhGQTQ3OTE5MERDMjIwN0E2QTk5ODFFRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNR2WpLAiXC692e5o7M6dXgSC
3h2VbBQmiQYrVYkl5PVqqEceXKgaIObNWVWftgmwsMJw+R3+O3GBIPJT2dPULRAT
sTOSxmmIjvi1xmol4Nd76px2UpA5u/tp1Fn1g3shp9YLiCRS2imuPWKhARUblHNX
ep9nHBJMpGUQkPKJs99i5q54RTHkWnxteEyFuBxz2d5Zeq9uSdZsk7UuSOnJG1NE
ytByRBcB8jZpJpAKVPc7rUdDmXfAnELxbZz8jV6vIE0wwBxKbvon+91Ls8i5ajvo
IlapCtBa03mdT01KEiDY7JA4zSLtzD6wwHBPqQvPxCMZM9sBiC88U7UntnFBAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUOLKI+c2c6zj6R5GQ3CIHpqmYHuEwHwYDVR0j
BBgwFoAUHi5u2WCmo1PchL5/F4J4M3swB/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JBYmJaNng1RnJ3QTRKNmFkNjFKZW90d2RZQ3hSM3Z2ZER1VjdoSEdx
QmYvMi8xRTJFNkVEOTYwQTZBMzUzREM4NEJFN0YxNzgyNzgzMzdCMzAwN0ZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFMkU2RUQ5NjBBNkEzNTNE
Qzg0QkU3RjE3ODI3ODMzN0IzMDA3RkMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiQWJiWjZ4NUZyd0E0SjZhZDYxSmVvdHdkWUN4UjN2dmREdVY3aEhHcUJmLzIv
MzIzODMwMzQzYTMyNjUzODNhMzgzMDM0MzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNl
MjAzMjM2MzIzODM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwYoBALogEAwDQYJKoZIhvcNAQELBQAD
ggEBADIVF3UsyUNAHq+sg14JtCaVgzZ7KyhYBwjax+2wZhKwZLLt89WzLhs/9uDV
/tL9+QokvtBgIzpIN0xYAFi7lTMDPKVXIuqiTk6v0pwdNQTJovBcSBwc/jBCk1xi
GEUdVd9BAak00hQDJnFtT8j0ZQc4DqTFrRQOC6wu/yK6RuQH+C8jDm6IsZVGRaan
lI/LVP9w4bMDVepStkoknmgWqsuDq6o+YqQ+k+wZuYqcjrNDjAoCSAAqKox/U5dp
GEJGvXG5CJBQtHUhHjDZywcl126imqDd3+UMcOLNL8PyRNWvWRsN6yEW/boE6gAy
0zsTdyNFfUU5+tckK94HlfHA4bw=
-----END CERTIFICATE-----
Generated at Fri Aug 30 22:15:47 2024 by rpki-client on console-fra.rpki-client.org