Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/323830343a376537633a31303a3a2f34342d3434203d3e20323733333938.roa
File:                     323830343a376537633a31303a3a2f34342d3434203d3e20323733333938.roa (raw, json)
Hash identifier:          REnLlz/LqlbO9tk0en8V3U/tR/8EgK9BF9VV/DQwUgA=
Subject key identifier:   4D:AA:10:03:5F:5C:87:A4:59:CE:E9:6E:F7:58:23:D3:05:47:50:95
Certificate issuer:       /CN=A3CAD2896388C5BA707489CFFF029755F9DCB453
Certificate serial:       15D964C04A84D18B1C15F1E2CA866FCA9B5AE221
Authority key identifier: A3:CA:D2:89:63:88:C5:BA:70:74:89:CF:FF:02:97:55:F9:DC:B4:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3CAD2896388C5BA707489CFFF029755F9DCB453.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/323830343a376537633a31303a3a2f34342d3434203d3e20323733333938.roa
Signing time:             Fri 04 Oct 2024 19:52:25 +0000
ROA not before:           Fri 04 Oct 2024 19:47:25 +0000
ROA not after:            Fri 03 Oct 2025 19:52:25 +0000
asID:                     273398
IP address blocks:        2804:7e7c:10::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d9:64:c0:4a:84:d1:8b:1c:15:f1:e2:ca:86:6f:ca:9b:5a:e2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3CAD2896388C5BA707489CFFF029755F9DCB453
        Validity
            Not Before: Oct  4 19:47:25 2024 GMT
            Not After : Oct  3 19:52:25 2025 GMT
        Subject: CN=4DAA10035F5C87A459CEE96EF75823D305475095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:3a:3d:0a:c0:17:0a:1d:81:2c:68:21:61:
                    e5:77:06:16:bf:bd:26:ad:26:f4:12:e4:f6:ff:ff:
                    01:55:2d:db:0e:f1:ff:d3:56:b3:c9:8a:68:44:ca:
                    6b:9f:f1:51:e6:25:ff:08:37:bb:31:e7:4d:56:6e:
                    e4:93:61:79:8f:b0:f0:ac:e6:08:9a:c4:c2:b2:27:
                    ec:5f:23:dc:6d:26:b4:8c:3c:6c:4c:4c:71:0b:54:
                    f1:4a:ba:f5:33:32:7c:c7:36:bb:ac:b1:ca:ba:b1:
                    4b:fa:5c:f3:e9:6d:46:04:95:0d:a0:44:4e:05:c5:
                    fa:1b:3a:1d:22:5b:fa:1a:97:a1:f3:46:89:3f:ac:
                    4b:f8:0b:9c:95:3e:77:65:b7:15:43:bb:c4:24:c0:
                    3f:81:b3:5e:15:7b:7b:a6:16:b7:be:69:c8:cc:a1:
                    9d:51:11:8c:83:2b:48:e6:6c:2b:8e:cd:67:d8:48:
                    ec:ec:27:4e:a3:c5:fd:7f:e6:02:c2:65:4f:a6:f8:
                    10:fd:d2:35:3f:00:af:b8:bf:cf:a0:90:f2:99:15:
                    7f:c6:90:31:12:c7:c3:f5:b6:f0:8b:6e:cc:bc:43:
                    b9:f2:f9:1d:94:9d:9a:f1:aa:63:32:40:e6:a6:2b:
                    30:d0:89:62:b5:04:bd:eb:b4:a3:b9:e2:b2:84:22:
                    fa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AA:10:03:5F:5C:87:A4:59:CE:E9:6E:F7:58:23:D3:05:47:50:95
            X509v3 Authority Key Identifier:
                keyid:A3:CA:D2:89:63:88:C5:BA:70:74:89:CF:FF:02:97:55:F9:DC:B4:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/A3CAD2896388C5BA707489CFFF029755F9DCB453.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3CAD2896388C5BA707489CFFF029755F9DCB453.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/323830343a376537633a31303a3a2f34342d3434203d3e20323733333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e7c:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:e9:08:de:d1:e6:dc:42:ec:73:e9:44:1f:f8:e4:8b:f4:07:
         b1:e8:6b:d6:03:c2:bf:7b:a6:19:ef:af:b3:10:73:34:96:fe:
         69:d0:ce:47:8e:69:27:e1:82:75:91:8c:0b:01:a7:24:90:aa:
         e3:9d:6f:60:13:0d:60:ae:dd:d4:52:75:5e:ae:e8:35:27:59:
         47:24:e2:7a:8a:f3:d2:bc:9e:c1:5d:b1:a3:0e:96:41:40:10:
         d2:a3:f3:f0:ff:01:f8:3e:f8:39:34:f7:ee:ba:7c:ff:49:bf:
         16:e7:5d:de:b9:59:e3:7f:d2:2b:26:71:32:67:35:a1:b8:85:
         c5:83:2d:d2:ce:b2:f7:3c:6f:06:75:9d:61:ef:e8:56:d8:db:
         58:0f:25:8a:ce:b4:07:ee:3e:3e:f3:ff:d5:87:50:80:65:dc:
         7c:b7:d1:c9:96:73:84:61:34:da:0f:1f:05:51:17:32:a7:45:
         49:57:40:1c:b3:38:45:63:6f:51:8e:5d:00:29:6d:b3:4c:07:
         f9:62:99:47:64:ed:ef:8d:8b:43:da:6c:09:28:f7:e1:21:9a:
         1e:78:b5:b7:bb:50:65:47:06:c8:95:63:53:12:a6:28:a3:d5:
         df:47:b0:66:67:48:94:08:ff:18:96:dd:19:e7:4f:e9:62:d8:
         b1:ec:e4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 19:38:43 2024 by rpki-client on console-fra.rpki-client.org