Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/323830343a3233343a3a2f33322d3334203d3e20323632373331.roa
File:                     323830343a3233343a3a2f33322d3334203d3e20323632373331.roa (raw, json)
Hash identifier:          hBkgoPZDoAM86lPm0PS4X5HX+d1fyMEo34dFw0Zr5pc=
Subject key identifier:   0C:D2:47:C8:C0:89:D4:81:B9:C9:C4:4C:17:4E:93:47:BA:2A:43:FC
Certificate issuer:       /CN=383F1C9E4F62D378CDEAF8399E5B08C19769D169
Certificate serial:       2A0EF42E324700494EE1C4B504721238AF451931
Authority key identifier: 38:3F:1C:9E:4F:62:D3:78:CD:EA:F8:39:9E:5B:08:C1:97:69:D1:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/323830343a3233343a3a2f33322d3334203d3e20323632373331.roa
Signing time:             Thu 04 Apr 2024 14:49:10 +0000
ROA not before:           Thu 04 Apr 2024 14:44:10 +0000
ROA not after:            Thu 03 Apr 2025 14:49:10 +0000
asID:                     262731
IP address blocks:        2804:234::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0e:f4:2e:32:47:00:49:4e:e1:c4:b5:04:72:12:38:af:45:19:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=383F1C9E4F62D378CDEAF8399E5B08C19769D169
        Validity
            Not Before: Apr  4 14:44:10 2024 GMT
            Not After : Apr  3 14:49:10 2025 GMT
        Subject: CN=0CD247C8C089D481B9C9C44C174E9347BA2A43FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:d0:63:95:5b:03:bf:a5:ab:c9:54:f6:46:
                    ef:5d:32:86:ae:ff:b8:cc:c4:8f:82:79:4e:3c:f9:
                    5d:e9:c6:6a:34:1e:33:c5:a5:b7:c7:fd:19:03:08:
                    35:8b:48:fb:f1:63:64:e7:4f:87:6e:9a:b8:d5:b2:
                    40:9a:d3:df:d5:0d:e3:a0:ad:e0:fe:3c:e6:ff:7c:
                    da:cd:2d:b8:e4:f0:a5:b0:b4:1d:51:51:bd:25:05:
                    0b:f2:26:ae:42:76:75:4f:42:af:ab:6a:2a:51:33:
                    5a:ca:dd:db:96:bd:14:ca:98:16:38:f4:d9:ca:fb:
                    31:4a:c6:36:b5:ca:66:99:95:bd:46:15:10:d2:92:
                    23:e9:2c:10:a9:11:0f:9d:d7:fa:6d:a1:45:28:73:
                    96:42:57:c4:3a:5b:47:43:95:2f:12:c1:f0:1f:f8:
                    58:5d:cf:b5:7c:f1:d8:fc:c2:c9:6e:e1:97:cd:eb:
                    a4:c2:a2:57:ca:51:12:44:cf:a7:77:56:6e:f1:ce:
                    2f:83:f4:81:2b:98:3b:9b:41:3a:d8:58:75:05:02:
                    82:b8:ea:cc:40:39:13:81:7e:5b:55:b4:0f:bc:94:
                    9b:b1:41:0e:e5:ab:f7:29:74:d0:61:e3:9b:02:8a:
                    ad:4c:63:e1:00:82:bd:da:4b:36:cc:12:76:bd:40:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D2:47:C8:C0:89:D4:81:B9:C9:C4:4C:17:4E:93:47:BA:2A:43:FC
            X509v3 Authority Key Identifier:
                keyid:38:3F:1C:9E:4F:62:D3:78:CD:EA:F8:39:9E:5B:08:C1:97:69:D1:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/323830343a3233343a3a2f33322d3334203d3e20323632373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:234::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:35:3f:87:db:aa:3d:b8:20:aa:20:eb:6b:30:5c:4a:a4:bd:
         28:84:69:8d:31:78:6d:06:14:00:fb:60:f9:94:fa:dc:b6:f3:
         4b:5c:f8:64:53:40:2c:ad:f4:4b:a4:ca:57:59:d8:d3:48:69:
         e3:e6:1d:70:d1:d9:b2:4e:fc:99:f1:88:dc:4a:fd:1e:a7:85:
         a2:e7:6d:c2:81:e0:28:95:81:28:a1:d2:03:b7:31:61:b4:72:
         cc:1a:6f:d6:25:bd:c3:e7:cf:61:27:e5:c5:d8:52:8a:1f:f6:
         c4:72:27:06:d0:90:f8:14:68:1a:aa:12:c3:7d:85:dc:4c:e9:
         43:28:56:5a:c8:d1:13:5c:ed:4c:4b:0e:e7:3b:aa:c3:95:66:
         d3:55:69:1f:60:44:6a:cb:a2:e8:04:c6:e5:ea:97:db:5b:b6:
         cf:56:88:ca:d3:28:38:eb:2b:cf:2b:c5:4c:bf:e0:c6:01:12:
         19:36:7b:27:41:7e:a4:4b:4d:01:1c:37:59:39:72:fe:aa:0f:
         70:23:2f:5a:cc:39:bd:52:a4:aa:b6:c1:b3:17:ba:6e:9d:51:
         85:f4:c8:7a:04:8b:77:3a:c8:1b:a0:48:aa:d5:ae:0d:3b:2b:
         18:0b:2b:2e:45:06:17:d5:e3:f0:a4:0f:b4:1a:10:c8:fe:8e:
         d8:e7:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:53:24 2024 by rpki-client on console-fra.rpki-client.org