Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383038303a3a2f34322d3432203d3e20323632383437.roa
File:                     323830343a3265383a383038303a3a2f34322d3432203d3e20323632383437.roa (raw, json)
Hash identifier:          h8HpFxOOO6YlcQfTAUpFHSvNLGUXjxwnd7rl3fYKll0=
Subject key identifier:   85:CB:D3:A2:B9:74:F0:87:81:D0:82:A3:BF:77:31:9D:A2:EE:7B:40
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       4DC7C9B164972A362DEB1CB3878BB6F20B1081B5
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383038303a3a2f34322d3432203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:37 +0000
ROA not before:           Thu 04 Apr 2024 16:07:37 +0000
ROA not after:            Thu 03 Apr 2025 16:12:37 +0000
asID:                     262847
IP address blocks:        2804:2e8:8080::/42 maxlen: 42

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c7:c9:b1:64:97:2a:36:2d:eb:1c:b3:87:8b:b6:f2:0b:10:81:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:37 2024 GMT
            Not After : Apr  3 16:12:37 2025 GMT
        Subject: CN=85CBD3A2B974F08781D082A3BF77319DA2EE7B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:c1:3a:73:5b:25:3c:b1:98:dd:f7:f0:14:
                    f9:46:73:84:bd:2d:d3:04:2e:e6:af:36:5d:0f:89:
                    2c:16:89:e0:c6:3a:e6:a4:8e:37:3d:5d:a8:45:60:
                    d1:67:ea:07:52:dc:ac:f7:4d:e6:d7:ac:6f:21:d3:
                    e1:88:cb:09:4a:15:ef:ad:44:d5:12:ee:be:67:de:
                    bd:7b:48:91:b1:e2:f2:35:4e:cb:ff:31:17:74:9e:
                    f8:c5:0b:93:75:bd:15:85:8c:7a:7c:67:6e:23:98:
                    45:b3:29:e9:9d:96:09:c2:76:94:22:d4:32:50:04:
                    a3:10:3f:7e:7b:4e:a7:45:4f:1f:f3:bf:34:d6:4b:
                    0d:e8:90:e8:bf:4c:28:5c:9f:8b:ac:50:92:03:ee:
                    6e:c5:df:bc:ef:b1:d9:7c:21:78:3f:36:92:64:b0:
                    df:1f:c8:af:ab:7a:16:84:70:51:3e:3c:22:2d:82:
                    c5:f0:63:76:9c:a1:78:5d:f9:1d:48:49:a5:0a:67:
                    fd:80:a6:04:a2:ee:d5:39:93:a0:05:03:d9:b5:47:
                    3f:80:54:93:a7:af:cf:ef:b8:8c:4f:c7:b5:5f:54:
                    64:ab:42:92:0e:f7:da:4b:87:98:8a:91:f9:6c:23:
                    a7:fd:06:ae:d4:29:9b:95:31:08:3b:4f:4d:71:e4:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CB:D3:A2:B9:74:F0:87:81:D0:82:A3:BF:77:31:9D:A2:EE:7B:40
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383038303a3a2f34322d3432203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:8080::/42

    Signature Algorithm: sha256WithRSAEncryption
         68:5a:b6:79:24:0b:53:53:6d:ab:62:24:7c:1c:d8:0a:2d:f0:
         18:57:3e:d5:2c:11:91:02:c7:22:45:cc:3e:84:c5:f0:c5:ed:
         7d:68:86:35:73:0f:67:1f:e8:fc:5f:ae:17:84:29:04:db:e1:
         1f:e5:99:d1:e5:77:8d:22:58:ca:3c:f2:45:69:9d:67:7d:3f:
         36:89:b6:53:77:2f:6c:00:6f:89:92:e6:ed:1e:0b:d0:28:88:
         a1:8b:9b:c2:26:1e:6e:5c:a7:f4:87:6d:73:b6:46:32:6d:12:
         08:d8:9b:d8:a5:8f:e4:14:56:d1:7a:da:27:5e:9b:a7:17:49:
         c9:cb:34:bf:a0:75:5c:5e:aa:78:f7:46:2f:7f:8e:3d:2c:17:
         04:f4:97:17:2e:64:6a:7a:88:ee:90:f2:3d:72:da:4b:ad:47:
         61:2d:59:e8:52:71:50:76:5e:05:af:4e:de:28:53:1a:fd:3e:
         6f:33:79:90:59:4f:e2:5f:69:ac:ec:76:f7:1e:f8:28:4d:47:
         9f:45:08:00:f1:c8:40:ca:b2:ed:76:07:5a:8a:0e:ce:19:c6:
         1a:75:8d:a0:d5:20:c5:26:cc:1f:9f:35:81:b1:a8:dc:c3:be:
         4f:fe:0f:4a:2b:57:41:13:92:12:a0:a6:5e:7a:df:70:47:66:
         f2:2f:a3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 22:15:47 2024 by rpki-client on console-fra.rpki-client.org