Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/323830343a323934633a666638303a3a2f34312d3431203d3e203532353536.roa
File:                     323830343a323934633a666638303a3a2f34312d3431203d3e203532353536.roa (raw, json)
Hash identifier:          evykC/R1AyZGI46azSlbCHrIHzMpwopT2zzIedJR5rs=
Subject key identifier:   02:36:62:64:2D:86:60:F7:AC:F2:AD:11:50:98:55:36:A7:7F:AF:00
Certificate issuer:       /CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
Certificate serial:       3E2C50E40237EA59761DFF21C809D1397B1A6F75
Authority key identifier: EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/323830343a323934633a666638303a3a2f34312d3431203d3e203532353536.roa
Signing time:             Wed 03 Jul 2024 17:34:27 +0000
ROA not before:           Wed 03 Jul 2024 17:29:27 +0000
ROA not after:            Wed 02 Jul 2025 17:34:27 +0000
asID:                     52556
IP address blocks:        2804:294c:ff80::/41 maxlen: 41

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2c:50:e4:02:37:ea:59:76:1d:ff:21:c8:09:d1:39:7b:1a:6f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
        Validity
            Not Before: Jul  3 17:29:27 2024 GMT
            Not After : Jul  2 17:34:27 2025 GMT
        Subject: CN=023662642D8660F7ACF2AD1150985536A77FAF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:7d:bc:9a:01:55:aa:dd:24:d6:01:6a:26:
                    03:b8:c4:35:ab:4d:ec:be:ff:f5:80:ec:2d:3a:35:
                    21:b9:ac:df:44:13:87:44:e0:e3:23:06:6a:b5:9d:
                    59:c3:98:ed:84:cb:a5:5a:6e:ca:cf:6b:64:02:e2:
                    b1:26:20:c5:1c:93:1d:f8:5d:e2:9a:68:bd:6a:d6:
                    74:c1:f7:6a:68:6d:0b:33:66:66:c6:26:b6:4d:c9:
                    5d:44:f4:d7:25:e5:3b:c7:32:5b:b6:82:b7:80:b0:
                    4b:5e:d4:5c:d4:6c:5a:37:90:8b:a9:8d:42:56:55:
                    0b:82:85:53:f5:d4:d8:fc:2c:fd:bd:ef:b7:ed:74:
                    d2:bf:3e:08:cf:81:4d:b8:75:8e:cb:9a:68:cb:b8:
                    97:86:e7:4c:8a:d6:a2:74:7b:6e:a4:14:78:a0:2f:
                    a9:5b:59:e9:f8:65:d5:34:b2:72:93:98:aa:da:bc:
                    0c:74:06:33:58:64:59:df:aa:db:67:a3:bf:30:c5:
                    e5:25:e1:77:6b:33:51:a4:97:c6:7d:42:88:04:a9:
                    1e:22:9c:a1:e7:49:80:95:30:16:89:b4:7f:ce:4f:
                    81:9c:7f:97:d5:d0:56:55:ac:3f:3f:40:77:3b:ef:
                    93:99:db:10:a7:e1:5a:f9:0d:22:79:97:49:87:ae:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:36:62:64:2D:86:60:F7:AC:F2:AD:11:50:98:55:36:A7:7F:AF:00
            X509v3 Authority Key Identifier:
                keyid:EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/323830343a323934633a666638303a3a2f34312d3431203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:294c:ff80::/41

    Signature Algorithm: sha256WithRSAEncryption
         bb:82:e6:33:ec:01:16:20:42:c4:d0:f8:f2:ae:ec:73:9a:aa:
         f8:03:60:57:e5:7f:8b:4a:2c:4b:15:b8:1f:ae:e8:68:ee:51:
         9e:e0:c9:d1:0c:d5:3f:eb:f0:a1:75:95:76:fc:10:ca:c5:08:
         7b:49:84:58:b5:79:8c:11:b4:03:60:9f:6b:e1:b7:32:b2:c2:
         5b:3d:9f:56:a0:d4:ab:4a:d2:f6:9b:33:5e:e3:cc:03:9e:f4:
         6c:41:af:34:fe:f9:c5:78:49:32:7d:8b:63:ef:65:6d:99:8e:
         92:e2:11:06:ea:6b:78:5c:3f:91:e1:00:47:62:4d:71:d1:8f:
         3a:75:7e:73:b0:01:01:1f:71:fe:8d:5f:1d:07:12:82:89:d5:
         e8:0e:01:86:9d:48:cb:9d:08:3f:0b:dd:e7:30:dc:3f:91:4d:
         12:b9:5b:f2:0d:26:04:bd:be:0b:5c:29:25:0d:88:d6:61:40:
         97:b4:d7:3f:05:ed:ca:12:b9:3b:62:3f:96:e6:4d:8c:34:ce:
         c0:5b:f1:8d:c1:57:f1:6a:dc:b8:fb:f2:e1:0f:2e:3f:36:a6:
         45:73:39:ea:f0:ec:f8:11:bb:c0:5a:f8:f8:f5:5a:64:9b:a7:
         f9:c7:90:46:4f:25:ac:0a:97:dd:c2:35:49:fe:c5:6a:a8:da:
         96:4c:d2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 00:17:38 2024 by rpki-client on console-fra.rpki-client.org