Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/323830343a326136343a3a2f33322d313238203d3e20323632363434.roa
File:                     323830343a326136343a3a2f33322d313238203d3e20323632363434.roa (raw, json)
Hash identifier:          xXo3zN52A3+rBPmqI2+vFWa/qRy45BfIekDh4zp0Zs0=
Subject key identifier:   99:A9:91:08:84:03:CC:74:0C:1C:C8:A1:D7:A0:FA:EA:92:F8:D5:1A
Certificate issuer:       /CN=8CA3A7365B156022A19D3103A9AC15C16D55CD75
Certificate serial:       3F01BB45399344AD3961AABE4BDAAAAAC034E121
Authority key identifier: 8C:A3:A7:36:5B:15:60:22:A1:9D:31:03:A9:AC:15:C1:6D:55:CD:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA3A7365B156022A19D3103A9AC15C16D55CD75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/323830343a326136343a3a2f33322d313238203d3e20323632363434.roa
Signing time:             Wed 17 Jul 2024 21:29:46 +0000
ROA not before:           Wed 17 Jul 2024 21:24:46 +0000
ROA not after:            Wed 16 Jul 2025 21:29:46 +0000
asID:                     262644
IP address blocks:        2804:2a64::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:01:bb:45:39:93:44:ad:39:61:aa:be:4b:da:aa:aa:c0:34:e1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA3A7365B156022A19D3103A9AC15C16D55CD75
        Validity
            Not Before: Jul 17 21:24:46 2024 GMT
            Not After : Jul 16 21:29:46 2025 GMT
        Subject: CN=99A991088403CC740C1CC8A1D7A0FAEA92F8D51A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:a0:63:04:34:b3:58:31:db:a2:a6:3e:7d:
                    88:77:85:33:35:38:52:35:f9:75:2d:c1:99:5e:9e:
                    d9:b3:92:86:4d:00:c4:75:8c:2c:3f:a6:45:fd:42:
                    a1:25:65:f8:29:a0:16:3c:14:9a:f6:05:33:76:32:
                    30:65:04:f0:6e:f8:f8:77:9b:b2:d9:0f:2a:a5:2f:
                    08:ad:fa:9e:af:71:c9:4a:be:9e:ba:4e:8d:03:fe:
                    aa:a3:64:ff:7a:01:c2:ed:0f:39:6b:98:dd:da:60:
                    08:63:85:53:17:7c:53:cb:bf:8d:0b:bb:35:f1:3d:
                    f3:e5:ec:af:18:f1:19:0f:cb:b3:21:c7:cd:52:f2:
                    1f:df:7c:c3:3a:8e:48:25:7f:4a:d0:33:1c:29:2f:
                    23:88:23:68:e9:a4:84:79:5e:05:ed:51:73:e5:3c:
                    01:58:3a:51:36:11:84:d7:38:06:bf:9e:58:c9:1d:
                    06:67:45:dd:49:02:89:be:50:65:b4:d9:61:6a:a1:
                    85:b4:e2:1f:4e:8b:38:d7:1b:b4:2e:75:43:ee:d8:
                    df:97:83:59:27:ee:90:d7:9b:0c:06:be:f7:22:69:
                    96:0b:a9:3d:7b:8d:33:d9:39:2d:6e:5c:49:e1:9e:
                    6d:d6:6b:18:6f:b9:4e:65:ec:21:8f:db:00:2d:0c:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A9:91:08:84:03:CC:74:0C:1C:C8:A1:D7:A0:FA:EA:92:F8:D5:1A
            X509v3 Authority Key Identifier:
                keyid:8C:A3:A7:36:5B:15:60:22:A1:9D:31:03:A9:AC:15:C1:6D:55:CD:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/8CA3A7365B156022A19D3103A9AC15C16D55CD75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA3A7365B156022A19D3103A9AC15C16D55CD75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/323830343a326136343a3a2f33322d313238203d3e20323632363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:82:45:bc:29:69:3a:27:47:13:39:f3:b7:9b:1d:84:ef:5c:
         70:63:60:26:57:51:ce:76:f5:32:ee:c0:2b:75:2f:da:48:f6:
         a4:89:cc:f8:93:fb:af:98:79:e8:cc:95:58:e7:86:37:ef:42:
         7f:e3:cd:80:f1:42:7f:2d:a3:8a:6a:9c:15:7b:63:46:06:33:
         0b:8c:72:03:7d:d3:f5:0b:93:f0:44:e4:12:ab:48:56:e0:e6:
         f9:8b:dd:9c:e5:4e:bf:9e:2e:9f:ec:9f:d4:c2:cd:87:d6:f9:
         85:52:90:fe:5c:75:31:e4:45:1b:11:3f:84:43:d3:1e:95:3a:
         9c:10:08:80:90:0f:ec:90:2f:82:b1:1c:cb:5f:40:2b:77:c6:
         a5:61:4f:30:c1:11:00:14:0e:52:2d:cb:57:5e:97:66:24:71:
         1f:82:d1:ef:59:29:b2:af:55:4b:ea:97:05:b2:30:24:3c:2a:
         89:42:07:46:69:37:0f:70:5e:5f:e3:e0:16:a2:c0:7f:14:db:
         58:3e:87:a7:78:97:fc:03:eb:96:3b:e7:e2:db:84:08:e1:17:
         4e:c0:3b:8d:3b:1f:3c:3b:ff:74:9f:d9:3d:91:39:a5:63:1b:
         d0:d3:df:14:17:c4:13:d0:3a:ad:08:3e:04:77:c6:9f:44:a5:
         ec:18:f7:5c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPwG7RTmTRK05Yaq+S9qqqsA04SEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENBM0E3MzY1QjE1NjAyMkExOUQzMTAzQTlBQzE1QzE2
RDU1Q0Q3NTAeFw0yNDA3MTcyMTI0NDZaFw0yNTA3MTYyMTI5NDZaMDMxMTAvBgNV
BAMTKDk5QTk5MTA4ODQwM0NDNzQwQzFDQzhBMUQ3QTBGQUVBOTJGOEQ1MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlaBjBDSzWDHboqY+fYh3hTM1
OFI1+XUtwZlentmzkoZNAMR1jCw/pkX9QqElZfgpoBY8FJr2BTN2MjBlBPBu+Ph3
m7LZDyqlLwit+p6vcclKvp66To0D/qqjZP96AcLtDzlrmN3aYAhjhVMXfFPLv40L
uzXxPfPl7K8Y8RkPy7Mhx81S8h/ffMM6jkglf0rQMxwpLyOII2jppIR5XgXtUXPl
PAFYOlE2EYTXOAa/nljJHQZnRd1JAom+UGW02WFqoYW04h9OizjXG7QudUPu2N+X
g1kn7pDXmwwGvvciaZYLqT17jTPZOS1uXEnhnm3WaxhvuU5l7CGP2wAtDOS/AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUmamRCIQDzHQMHMih16D66pL41RowHwYDVR0j
BBgwFoAUjKOnNlsVYCKhnTEDqawVwW1VzXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzNHRG9mSzNUVXpzZVk0WGN6VW5BaFdyelc0ZGp3SzV6Rzd0MVZ2Rzlq
cjEvMC84Q0EzQTczNjVCMTU2MDIyQTE5RDMxMDNBOUFDMTVDMTZENTVDRDc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQTNBNzM2NUIxNTYwMjJB
MTlEMzEwM0E5QUMxNUMxNkQ1NUNENzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0czR0RvZkszVFV6c2VZNFhjelVuQWhXcnpXNGRqd0s1ekc3dDFWdkc5anIxLzAv
MzIzODMwMzQzYTMyNjEzNjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzIzNjM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCpkMA0GCSqGSIb3DQEBCwUAA4IBAQB/gkW8
KWk6J0cTOfO3mx2E71xwY2AmV1HOdvUy7sArdS/aSPakicz4k/uvmHnozJVY54Y3
70J/482A8UJ/LaOKapwVe2NGBjMLjHIDfdP1C5PwROQSq0hW4Ob5i92c5U6/ni6f
7J/Uws2H1vmFUpD+XHUx5EUbET+EQ9MelTqcEAiAkA/skC+CsRzLX0Ard8alYU8w
wREAFA5SLctXXpdmJHEfgtHvWSmyr1VL6pcFsjAkPCqJQgdGaTcPcF5f4+AWosB/
FNtYPoeneJf8A+uWO+fi24QI4RdOwDuNOx88O/90n9k9kTmlYxvQ098UF8QT0Dqt
CD4Ed8afRKXsGPdc
-----END CERTIFICATE-----
Generated at Sun Aug 18 20:23:02 2024 by rpki-client on console-fra.rpki-client.org