Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383063323a3a2f34382d3438203d3e20323632383437.roa
File:                     323830343a3265383a383063323a3a2f34382d3438203d3e20323632383437.roa (raw, json)
Hash identifier:          xupoRFNApTneDnFi8ybO7ozCl92h+QJQ0UE8e2bXb/Y=
Subject key identifier:   36:97:3F:F1:1F:B4:A8:46:64:C2:72:AE:4E:ED:0F:0D:8A:05:76:F7
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       68E5CB6F83C61E3A85F7E8D256A18A504CBBAEDD
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383063323a3a2f34382d3438203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:35 +0000
ROA not before:           Thu 04 Apr 2024 16:07:35 +0000
ROA not after:            Thu 03 Apr 2025 16:12:35 +0000
asID:                     262847
IP address blocks:        2804:2e8:80c2::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e5:cb:6f:83:c6:1e:3a:85:f7:e8:d2:56:a1:8a:50:4c:bb:ae:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:35 2024 GMT
            Not After : Apr  3 16:12:35 2025 GMT
        Subject: CN=36973FF11FB4A84664C272AE4EED0F0D8A0576F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:9e:72:e0:71:82:16:d4:f2:ca:00:14:ca:
                    f0:66:6a:1e:d9:a6:26:bb:3f:fb:2f:f0:29:71:75:
                    1c:4f:df:f2:67:d3:6d:7e:46:f8:37:b6:c6:98:9b:
                    57:a3:b1:31:9e:1e:1b:a6:0a:35:9a:f6:ee:a2:37:
                    f2:79:d1:b4:6b:a1:6e:51:02:bc:4c:31:35:8b:0b:
                    2c:b5:8b:8a:74:c0:20:ca:61:44:67:c2:13:e5:ca:
                    00:03:f3:67:ae:d5:e4:e2:9e:f3:31:85:72:0b:90:
                    66:54:8a:d6:17:aa:37:39:03:9e:0c:12:fa:c6:57:
                    de:e0:d4:e2:0d:7e:f3:fa:50:65:03:43:68:9d:5e:
                    4e:db:5f:ad:65:d3:d5:0d:06:8e:6a:26:ae:b3:ac:
                    d8:c5:29:30:3e:9c:62:0c:2e:2b:61:d8:53:6d:fd:
                    43:31:4e:0b:e2:48:9f:e9:d2:7b:06:29:2f:c6:44:
                    6b:a3:fe:86:2c:e5:66:cd:a7:1b:d7:b2:d5:ad:0b:
                    62:c6:59:9e:9c:fb:34:d6:e2:58:d1:8c:ae:3f:f6:
                    bc:67:c5:2c:7f:18:d5:7a:bf:a5:e5:c5:40:fa:7a:
                    86:b2:e2:d5:e0:bb:c4:3c:57:7d:8b:36:c5:01:d6:
                    ee:df:9d:82:e7:8b:78:63:8f:2d:7a:30:3f:92:fe:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:97:3F:F1:1F:B4:A8:46:64:C2:72:AE:4E:ED:0F:0D:8A:05:76:F7
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383063323a3a2f34382d3438203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:80c2::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:45:8c:dd:b8:17:06:09:d1:a5:2e:d6:39:bb:54:82:f6:bd:
         0a:fb:f4:a6:b7:9a:ef:55:34:cf:31:11:ca:68:15:15:a6:1a:
         b4:14:c7:42:43:c4:75:e7:a0:85:43:90:81:0c:45:b7:c8:ba:
         18:e8:5a:e3:65:67:fa:50:d2:71:e8:64:6a:00:78:87:54:03:
         ba:04:c6:35:62:cf:f6:4a:77:67:77:46:5a:cd:0d:6b:7a:f2:
         e2:a5:2a:77:47:ab:aa:c5:d3:1b:75:22:c7:b4:72:2a:60:f8:
         a0:58:6e:6f:e4:21:2b:cb:de:b7:79:5f:b1:3f:5c:6b:bd:a1:
         2c:f8:d1:7e:d7:4c:38:93:c8:52:cb:44:68:fc:7e:6b:38:bc:
         9a:74:38:a1:66:3c:59:94:fb:75:58:cd:68:24:4c:fd:b8:92:
         47:c4:96:1a:cb:95:e5:5a:56:cb:19:75:e1:3e:40:b4:f1:0d:
         f1:c7:3e:70:d2:0d:64:e2:61:f7:b2:2e:fe:ab:ba:99:62:32:
         f7:4e:19:bc:67:e5:0a:84:4c:ba:04:71:c4:1a:3b:8f:61:e0:
         c6:a6:9c:22:7c:1a:f2:11:c4:90:ce:04:c7:5c:eb:8a:b0:fe:
         45:5c:50:92:41:4b:22:1f:d9:e3:ab:e1:8f:d5:a4:70:a0:da:
         90:10:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 22:15:47 2024 by rpki-client on console-fra.rpki-client.org