Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a313430303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a313430303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          1BrvweHR2EsOaC7Cn5IKZnQHjU9DyXbSmAq5GcUj0KQ=
Subject key identifier:   71:E1:6F:E2:A6:E4:DE:11:E5:15:27:C5:7C:C5:A8:7E:F0:C8:27:5B
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       1257A755A7C10CE856EA5C4D8F7C9D7D273669C7
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a313430303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:15 +0000
ROA not before:           Thu 04 Apr 2024 02:02:15 +0000
ROA not after:            Thu 03 Apr 2025 02:07:15 +0000
asID:                     267458
IP address blocks:        2804:41d0:1400::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:57:a7:55:a7:c1:0c:e8:56:ea:5c:4d:8f:7c:9d:7d:27:36:69:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:15 2024 GMT
            Not After : Apr  3 02:07:15 2025 GMT
        Subject: CN=71E16FE2A6E4DE11E51527C57CC5A87EF0C8275B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:e2:08:d4:4b:5a:0e:f5:e2:a1:3d:7e:c7:
                    61:2d:90:51:a8:83:70:17:94:7b:cf:da:fb:df:09:
                    47:1c:07:ed:0d:e5:09:1c:3b:3e:51:5f:1f:cb:d2:
                    9a:60:0e:cd:fc:da:95:60:58:ea:dd:81:c1:17:b9:
                    d6:5a:39:77:ef:19:75:88:21:36:43:94:c5:5f:8f:
                    7c:ca:d5:b6:01:67:cb:92:d6:c5:a6:a0:40:2c:f4:
                    6a:45:14:fb:ee:00:14:34:64:fc:5c:f4:c6:d5:57:
                    f8:7b:d8:35:8c:08:62:ee:d2:a8:27:64:09:cb:a0:
                    68:2e:cb:bb:58:02:4e:a9:a2:7a:44:2e:13:e6:40:
                    c2:54:2b:38:db:cc:9b:31:bb:e5:4f:db:da:bc:4a:
                    5b:b5:38:5c:67:13:26:03:68:3d:9e:e8:d3:b6:fb:
                    f7:98:8b:b0:90:24:31:a8:6f:a8:d7:b9:c1:6d:ac:
                    eb:0b:13:43:1d:25:96:73:fb:91:50:41:b8:b5:df:
                    07:1d:09:c9:c7:8a:b2:6d:60:63:22:1d:7a:65:f5:
                    29:68:e7:65:e3:ed:b3:c5:7f:e3:f6:23:b5:54:e3:
                    6b:ef:bf:03:f1:10:76:e7:a4:ff:94:ca:72:17:cd:
                    26:b5:a3:87:93:14:91:47:ef:1f:de:03:d5:9f:0e:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E1:6F:E2:A6:E4:DE:11:E5:15:27:C5:7C:C5:A8:7E:F0:C8:27:5B
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a313430303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:c0:6c:72:8e:98:24:ee:58:f1:cf:dd:7c:1e:de:b2:aa:9e:
         b1:6e:5b:34:c1:85:57:c1:ad:b1:58:e0:bf:67:4b:ef:93:25:
         65:7e:b7:be:2c:c8:b2:5c:c4:f7:ef:8b:df:80:bc:cb:f7:52:
         df:59:08:90:2b:44:a6:e5:59:f2:4b:60:2c:5c:5d:09:45:e9:
         ac:e0:05:d7:3a:04:17:17:3f:77:86:82:42:92:6c:c2:3a:0b:
         d1:c7:76:a8:18:c5:34:ca:f9:c7:b6:16:95:57:12:50:33:cb:
         ff:04:ca:0d:04:fa:c8:74:b0:00:91:98:84:7c:70:29:d0:56:
         54:c5:41:64:60:fd:72:d3:09:2f:fe:95:b9:14:36:6f:31:4f:
         fb:97:f1:ed:7c:b7:07:57:1d:da:9d:11:11:e3:48:fe:06:66:
         fd:93:94:2d:ef:05:60:a0:64:47:b3:56:fa:37:d5:30:ef:1b:
         14:d6:00:a4:94:99:67:64:4f:46:df:1e:6a:c9:e8:63:e9:3d:
         97:45:f3:c3:b3:61:a3:34:4f:44:37:df:58:77:9f:22:d7:3f:
         0d:eb:b6:f3:22:b1:35:83:73:df:f4:63:9b:f7:db:1b:33:a4:
         06:ee:cc:c8:65:43:37:c0:51:6a:9d:43:3d:3a:d6:21:4c:19:
         7c:a8:ec:9b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUElenVafBDOhW6lxNj3ydfSc2accwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDMzlGMjIzQkVDMjRCODZCNzdFNDlCNDYyMzYyRjYy
REIyNEJFNDAeFw0yNDA0MDQwMjAyMTVaFw0yNTA0MDMwMjA3MTVaMDMxMTAvBgNV
BAMTKDcxRTE2RkUyQTZFNERFMTFFNTE1MjdDNTdDQzVBODdFRjBDODI3NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAi+II1EtaDvXioT1+x2EtkFGo
g3AXlHvP2vvfCUccB+0N5QkcOz5RXx/L0ppgDs382pVgWOrdgcEXudZaOXfvGXWI
ITZDlMVfj3zK1bYBZ8uS1sWmoEAs9GpFFPvuABQ0ZPxc9MbVV/h72DWMCGLu0qgn
ZAnLoGguy7tYAk6ponpELhPmQMJUKzjbzJsxu+VP29q8Slu1OFxnEyYDaD2e6NO2
+/eYi7CQJDGob6jXucFtrOsLE0MdJZZz+5FQQbi13wcdCcnHirJtYGMiHXpl9Slo
52Xj7bPFf+P2I7VU42vvvwPxEHbnpP+UynIXzSa1o4eTFJFH7x/eA9WfDlgzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUceFv4qbk3hHlFSfFfMWofvDIJ1swHwYDVR0j
BBgwFoAUs8OfIjvsJLhrd+SbRiNi9i2yS+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMS9CM0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzM5RjIyM0JFQzI0Qjg2
Qjc3RTQ5QjQ2MjM2MkY2MkRCMjRCRTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzEv
MzIzODMwMzQzYTM0MzE2NDMwM2EzMTM0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzM0MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEQdAUMA0GCSqGSIb3DQEBCwUA
A4IBAQCfwGxyjpgk7ljxz918Ht6yqp6xbls0wYVXwa2xWOC/Z0vvkyVlfre+LMiy
XMT374vfgLzL91LfWQiQK0Sm5VnyS2AsXF0JRems4AXXOgQXFz93hoJCkmzCOgvR
x3aoGMU0yvnHthaVVxJQM8v/BMoNBPrIdLAAkZiEfHAp0FZUxUFkYP1y0wkv/pW5
FDZvMU/7l/HtfLcHVx3anRER40j+Bmb9k5Qt7wVgoGRHs1b6N9Uw7xsU1gCklJln
ZE9G3x5qyehj6T2XRfPDs2GjNE9EN99Yd58i1z8N67bzIrE1g3Pf9GOb99sbM6QG
7szIZUM3wFFqnUM9OtYhTBl8qOyb
-----END CERTIFICATE-----
Generated at Wed Aug 7 20:23:13 2024 by rpki-client on console-fra.rpki-client.org