Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/1/323830343a313131343a3a2f33322d3333203d3e20323632343836.roa
File:                     323830343a313131343a3a2f33322d3333203d3e20323632343836.roa (raw, json)
Hash identifier:          qdOpr+B9kra9++qcgDDXYC8fPqI5l09AHNghF3CMSv8=
Subject key identifier:   46:A9:42:EF:A9:C7:CF:71:64:C7:E7:BD:DE:A3:07:FE:41:C4:76:31
Certificate issuer:       /CN=86FCEC8208478C5716DD8705BD24D48C23A5374B
Certificate serial:       560638B876FBD6FF059163030D48F10A2647D390
Authority key identifier: 86:FC:EC:82:08:47:8C:57:16:DD:87:05:BD:24:D4:8C:23:A5:37:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86FCEC8208478C5716DD8705BD24D48C23A5374B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/1/323830343a313131343a3a2f33322d3333203d3e20323632343836.roa
Signing time:             Thu 04 Apr 2024 14:24:07 +0000
ROA not before:           Thu 04 Apr 2024 14:19:07 +0000
ROA not after:            Thu 03 Apr 2025 14:24:07 +0000
asID:                     262486
IP address blocks:        2804:1114::/32 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:06:38:b8:76:fb:d6:ff:05:91:63:03:0d:48:f1:0a:26:47:d3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86FCEC8208478C5716DD8705BD24D48C23A5374B
        Validity
            Not Before: Apr  4 14:19:07 2024 GMT
            Not After : Apr  3 14:24:07 2025 GMT
        Subject: CN=46A942EFA9C7CF7164C7E7BDDEA307FE41C47631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:38:48:d1:c5:0d:58:47:c2:4e:ef:45:dd:
                    8d:7d:e0:00:7d:16:7d:d2:2c:77:14:fb:8f:56:eb:
                    19:8c:2d:bc:aa:b4:47:07:61:39:c2:66:a3:42:ea:
                    1f:aa:a9:1e:18:a3:07:73:25:73:c0:fb:89:57:6f:
                    b9:2e:42:78:08:f1:89:4f:a1:c2:67:52:5c:22:54:
                    db:f2:14:cc:09:9a:1a:56:8c:e1:58:7b:9f:e2:53:
                    98:d3:72:01:b8:41:9e:2b:4b:76:ac:77:ee:18:fe:
                    6f:58:6c:7c:41:86:d1:b3:70:91:04:bc:ac:6e:e1:
                    17:7a:3a:24:0b:f3:de:f8:8f:28:eb:92:70:c9:ae:
                    18:33:50:07:a7:35:80:a9:53:20:8e:69:ab:4b:b8:
                    f6:67:9b:0e:79:d5:ce:2c:d5:4c:94:d4:8d:57:7b:
                    de:bb:5e:e6:4a:e0:28:c0:87:f8:a7:75:fc:9b:2e:
                    23:8f:ab:50:ce:79:46:8e:dc:d1:db:5a:af:a8:dc:
                    12:e9:9b:6d:cd:0d:1c:60:34:72:53:9e:51:07:b9:
                    98:2a:af:c8:44:ee:a3:fc:51:32:c4:80:dc:bd:56:
                    02:4f:42:02:c3:c3:d9:6e:61:e5:f2:f4:95:13:18:
                    56:74:d6:7a:58:9a:a0:ab:cc:78:fc:14:cf:5c:52:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A9:42:EF:A9:C7:CF:71:64:C7:E7:BD:DE:A3:07:FE:41:C4:76:31
            X509v3 Authority Key Identifier:
                keyid:86:FC:EC:82:08:47:8C:57:16:DD:87:05:BD:24:D4:8C:23:A5:37:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/1/86FCEC8208478C5716DD8705BD24D48C23A5374B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86FCEC8208478C5716DD8705BD24D48C23A5374B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/1/323830343a313131343a3a2f33322d3333203d3e20323632343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1114::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:db:33:fd:c9:a9:28:ee:35:b6:15:3d:7d:69:94:83:74:8e:
         88:ac:44:42:15:f2:9f:3a:21:a7:a6:70:a7:f2:18:9e:ac:28:
         0b:98:41:39:e2:15:31:33:11:3c:d9:62:ed:59:bf:5d:3a:77:
         85:f6:d9:c8:ef:4b:12:1e:42:63:9a:9d:79:10:95:00:50:6b:
         23:c8:3e:c0:bf:16:0c:67:41:41:72:f8:11:49:dc:80:ca:35:
         a0:fd:e2:35:4c:a7:c1:61:ba:a0:c9:eb:33:0c:67:c2:d5:f4:
         f5:1e:74:c2:2f:8c:57:71:f8:c0:08:c3:84:37:2c:37:7f:08:
         32:08:36:af:c1:06:76:54:5f:08:8c:0a:71:a5:86:a9:b5:32:
         f6:ec:82:0e:e4:e7:31:b3:b6:2f:ee:cd:80:c3:51:f6:cc:bd:
         ba:c6:bb:fa:93:5c:14:b7:ae:59:fe:59:88:91:ef:8d:1d:5b:
         43:32:d6:fd:e0:07:26:50:5a:7f:5b:41:95:e3:0b:84:27:45:
         e1:a3:de:eb:57:82:fc:1f:25:5a:11:02:ac:c2:82:cf:ab:c6:
         fa:9f:a4:a7:0f:95:12:c9:74:e6:d1:26:8a:bb:82:ec:1c:5f:
         ab:e0:d1:59:e2:e3:33:33:a5:35:66:d5:41:2a:66:37:ce:6a:
         86:21:9c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 18:19:04 2024 by rpki-client on console-fra.rpki-client.org