Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/323830343a31343a3a2f33322d3333203d3e203238333630.roa
File:                     323830343a31343a3a2f33322d3333203d3e203238333630.roa (raw, json)
Hash identifier:          AjtPaWm+MEDGftQUmvB1kAW2QcVMNSz2bmAzSsJrfDs=
Subject key identifier:   94:25:71:18:8D:27:88:B9:35:6F:CF:5E:DC:F0:85:FA:37:30:C8:00
Certificate issuer:       /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial:       1B6EAFC0A767D4D91D4374C500F563839651CC0F
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/323830343a31343a3a2f33322d3333203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:08:27 +0000
ROA not before:           Sat 06 Apr 2024 03:03:27 +0000
ROA not after:            Sat 05 Apr 2025 03:08:27 +0000
asID:                     28360
IP address blocks:        2804:14::/32 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6e:af:c0:a7:67:d4:d9:1d:43:74:c5:00:f5:63:83:96:51:cc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
        Validity
            Not Before: Apr  6 03:03:27 2024 GMT
            Not After : Apr  5 03:08:27 2025 GMT
        Subject: CN=942571188D2788B9356FCF5EDCF085FA3730C800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:17:d1:18:ec:8e:99:12:37:15:f3:ba:cc:
                    bc:38:0a:01:61:c3:50:70:b7:73:f7:38:ed:ca:af:
                    e2:61:bf:3a:a1:90:99:1b:e5:cc:8c:4e:85:b5:53:
                    23:0a:44:ab:e6:04:09:3c:ed:20:97:be:4d:2e:e7:
                    10:5a:2c:3f:5d:05:22:ff:b2:15:62:c3:66:e0:33:
                    f1:12:f3:33:93:92:d9:18:1c:fa:31:77:98:0f:c8:
                    6c:2d:a8:a0:da:af:78:a7:28:26:e6:01:0a:45:bf:
                    59:82:11:32:9f:8d:26:6b:05:e1:6e:18:0b:4f:34:
                    4b:3f:6f:b7:ec:df:3c:1a:56:99:3d:3a:09:50:f0:
                    9f:df:47:7e:e3:8e:86:f9:a9:cd:e6:47:9a:9c:68:
                    5d:24:f2:5e:ac:12:86:5d:dc:a1:bd:c2:62:0c:4c:
                    25:1e:45:10:da:df:7b:ac:b2:e2:c9:86:dd:60:e0:
                    f9:05:bc:3a:74:25:7b:a3:e7:dc:66:5f:02:cd:9a:
                    e5:4f:68:7f:1b:ec:92:5c:ff:75:81:83:33:d1:8d:
                    00:6c:bc:7e:76:95:cf:75:98:7c:97:38:d7:53:5b:
                    9f:c5:d2:42:cc:c8:41:5f:88:3e:dc:bf:6d:21:fc:
                    98:39:71:89:b9:75:0f:f1:e2:08:7e:78:11:57:d7:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:25:71:18:8D:27:88:B9:35:6F:CF:5E:DC:F0:85:FA:37:30:C8:00
            X509v3 Authority Key Identifier:
                keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/323830343a31343a3a2f33322d3333203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:cd:53:67:02:41:cc:47:a1:a6:14:9b:e8:92:8a:ad:7a:c9:
         e3:cd:4d:78:eb:a5:85:33:f5:35:97:78:4f:3d:28:51:7d:7a:
         03:30:fc:c7:8c:e6:08:cd:02:c9:a9:e6:5b:58:1d:12:d9:c0:
         8b:a2:1d:ac:1e:4e:b9:1d:e7:0f:7d:58:66:a5:95:b7:c3:2f:
         8c:9a:55:a6:ce:ae:a2:b6:7f:5b:c3:51:0e:67:a8:ec:5d:78:
         df:04:90:ae:a3:25:29:b7:40:7e:11:b3:31:fb:3e:60:fb:d9:
         13:d1:69:f3:ab:e4:bf:37:19:c1:30:c9:cf:d7:f3:fc:b1:81:
         3b:f0:b9:92:d1:15:44:ea:fb:15:26:ea:4f:11:ff:f7:9c:fa:
         ad:ed:86:61:b7:a0:13:ae:ba:6e:7d:a2:52:7a:06:5d:ed:1e:
         c7:90:8a:e7:1e:0f:36:1c:38:40:ec:07:51:aa:4e:b1:ab:de:
         60:ed:dc:ea:16:c3:aa:c4:fb:ee:e2:d6:03:f7:87:fe:3d:43:
         e2:2f:a6:56:67:37:71:7b:b1:ee:c9:59:79:6e:c2:9e:88:cf:
         75:05:9a:0f:bb:72:7e:bf:89:e4:1b:84:76:57:55:09:7f:c1:
         44:71:2f:55:42:da:02:c7:c0:c7:fd:aa:2c:2d:55:34:93:fd:
         58:39:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 16:07:11 2024 by rpki-client on console-ams.rpki-client.org