Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa
File:                     323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa (raw, json)
Hash identifier:          3aGDemRxHNgAecVw0B48bLyEQfyLFKAjPAwfNUncyGQ=
Subject key identifier:   48:9A:F0:1B:43:05:B1:EF:BC:1A:04:09:82:7D:D8:21:D8:48:E6:7E
Certificate issuer:       /CN=E1C3821086E172D7404AE335C21C2D33F448F991
Certificate serial:       03C547A33906926F11ED371BF4134BAB105009B4
Authority key identifier: E1:C3:82:10:86:E1:72:D7:40:4A:E3:35:C2:1C:2D:33:F4:48:F9:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa
Signing time:             Thu 04 Apr 2024 14:31:00 +0000
ROA not before:           Thu 04 Apr 2024 14:26:00 +0000
ROA not after:            Thu 03 Apr 2025 14:31:00 +0000
asID:                     272677
IP address blocks:        2804:86f4:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c5:47:a3:39:06:92:6f:11:ed:37:1b:f4:13:4b:ab:10:50:09:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1C3821086E172D7404AE335C21C2D33F448F991
        Validity
            Not Before: Apr  4 14:26:00 2024 GMT
            Not After : Apr  3 14:31:00 2025 GMT
        Subject: CN=489AF01B4305B1EFBC1A0409827DD821D848E67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:aa:97:e0:a4:f2:3c:25:17:3d:a8:13:a1:
                    71:95:29:62:cb:d6:2a:97:9d:cc:d5:c1:35:57:be:
                    71:16:04:1d:31:0b:05:dd:b8:0a:9a:88:27:c1:86:
                    e4:8a:c5:f9:77:60:49:f3:54:ab:d4:75:9c:fd:52:
                    2a:28:ba:36:da:b6:4b:2a:ab:50:bc:66:e9:03:50:
                    89:8d:bf:46:e2:47:b0:ac:e0:0e:de:11:45:42:38:
                    bd:7c:be:92:66:03:98:77:97:2a:fe:df:32:30:8c:
                    9d:a7:4a:0a:7d:34:06:c1:d3:ee:13:4c:93:7c:81:
                    18:be:e7:fd:24:6a:09:bc:5e:aa:be:63:06:e9:84:
                    32:63:ec:ab:26:c2:83:4f:76:74:73:83:ce:1e:d0:
                    9f:7a:f6:42:d4:98:89:01:b8:b9:2e:ba:c2:a4:e4:
                    17:29:bb:5d:87:3f:99:e1:82:38:b5:f1:cc:3c:7a:
                    ab:fd:8f:85:8f:76:bb:da:96:8a:02:0b:dc:26:6e:
                    22:a2:eb:43:78:da:c3:23:d6:ea:56:98:67:d7:7d:
                    71:2e:0a:0d:7c:4c:b8:0e:29:71:95:48:65:46:48:
                    05:b6:5a:42:e5:82:23:7a:de:cc:7c:87:0e:90:5e:
                    51:96:58:4b:cd:79:17:96:50:fe:c0:e2:9c:98:28:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9A:F0:1B:43:05:B1:EF:BC:1A:04:09:82:7D:D8:21:D8:48:E6:7E
            X509v3 Authority Key Identifier:
                keyid:E1:C3:82:10:86:E1:72:D7:40:4A:E3:35:C2:1C:2D:33:F4:48:F9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/E1C3821086E172D7404AE335C21C2D33F448F991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C3821086E172D7404AE335C21C2D33F448F991.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86f4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:40:03:6f:6a:d3:32:43:c3:b1:92:62:3a:c2:ce:65:05:
         79:cd:62:3b:8b:4d:c9:86:9a:df:be:60:bf:a4:d8:ec:6d:b6:
         d3:13:53:e7:ec:34:25:0c:13:5c:84:5d:e9:a3:86:b2:e1:11:
         6f:f4:e4:a8:22:82:36:0b:e2:bc:4d:dd:69:dc:a4:08:67:45:
         36:e7:73:68:65:ac:21:df:5e:86:96:d1:15:45:32:b2:19:df:
         92:75:e2:ee:b6:e2:b1:76:3f:a9:aa:92:89:9e:54:c0:f0:c4:
         96:a2:81:f1:83:33:50:0e:6f:35:41:b3:8e:bf:59:a5:1c:58:
         4d:17:96:76:63:a0:de:52:98:2c:4b:7f:73:58:45:2e:f4:53:
         5f:c6:97:7d:0e:af:e9:de:6a:7d:77:65:a2:2c:8a:98:58:7b:
         c7:2e:54:cb:52:dd:fa:5a:fb:ac:71:b2:10:f5:a3:eb:7d:c5:
         53:11:af:9b:5e:1c:51:a0:0d:33:c6:2d:f1:bd:97:ad:a6:30:
         f0:23:e0:50:58:47:2f:7e:f0:28:5b:92:59:fc:52:ba:9b:b4:
         25:12:07:45:c9:04:2a:79:d6:6b:9d:d5:d1:76:9f:91:37:1c:
         96:5a:cc:03:fb:4d:94:ae:97:4d:ad:59:ed:f1:88:b1:7f:8f:
         ed:58:8a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 20:10:51 2024 by rpki-client on console-fra.rpki-client.org