Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a313530303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a313530303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          EMcmj7MbwMb3UEhpy3+JYi05WWSNegv4hlTarilJdvI=
Subject key identifier:   A6:B1:25:C3:EB:9B:21:14:02:19:1C:47:70:1F:A1:45:2B:F4:28:B3
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       0FC3B8833F8E885452699AC1529DED0AEB8B17E7
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a313530303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:14 +0000
ROA not before:           Thu 04 Apr 2024 02:02:14 +0000
ROA not after:            Thu 03 Apr 2025 02:07:14 +0000
asID:                     267458
IP address blocks:        2804:41d0:1500::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c3:b8:83:3f:8e:88:54:52:69:9a:c1:52:9d:ed:0a:eb:8b:17:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:14 2024 GMT
            Not After : Apr  3 02:07:14 2025 GMT
        Subject: CN=A6B125C3EB9B211402191C47701FA1452BF428B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:13:d3:72:92:9c:6f:79:e4:8d:cd:ec:0d:f3:
                    40:c7:59:66:58:c7:33:10:c7:0e:3f:2b:99:27:97:
                    c2:7e:87:f9:ad:d4:85:11:f4:bc:00:ab:a2:82:a9:
                    99:99:55:35:28:f5:e3:1a:d0:ef:d2:e9:cb:d1:d9:
                    45:66:2e:46:be:82:fa:10:d2:cd:d7:5c:94:63:a4:
                    6d:8d:a5:2b:59:8d:b2:61:77:d1:bb:b2:ef:11:ea:
                    48:f5:7b:12:07:f8:a2:05:e4:ff:2e:88:0b:12:a9:
                    eb:ee:da:65:4b:b8:01:87:03:8f:3d:cf:e1:83:ab:
                    ed:b9:8c:8c:00:2c:61:2a:d8:71:63:6c:61:3e:1a:
                    51:bf:4d:74:fe:7a:3b:be:b0:5b:19:a6:34:3d:94:
                    4f:2c:38:e8:7f:ba:cb:75:7d:5f:46:f0:85:67:92:
                    c8:5c:95:e7:ef:49:8f:4b:2b:89:c4:69:e7:6d:5a:
                    02:83:41:aa:db:de:85:c3:18:17:42:e1:3c:b7:5a:
                    e6:09:91:f8:b0:43:37:4a:6f:f2:d4:af:2f:0d:e1:
                    0d:d7:9f:08:9c:b4:af:61:18:44:e3:97:18:2f:5e:
                    70:52:8e:b7:4b:47:47:16:5d:cb:49:19:a5:62:63:
                    c6:a5:60:1f:d2:68:e3:f5:b9:9a:0d:94:ca:87:f8:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B1:25:C3:EB:9B:21:14:02:19:1C:47:70:1F:A1:45:2B:F4:28:B3
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a313530303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:20:15:25:7e:2c:54:2f:40:f1:65:a6:69:c2:e5:8d:8e:c1:
         e7:2d:83:3f:75:be:5c:93:08:9b:27:f0:dc:f1:9d:74:b6:74:
         28:dd:18:d3:50:8a:e4:70:6a:d1:62:ca:44:b0:db:f8:3f:94:
         8a:26:90:b8:98:41:e2:39:ca:51:1c:fd:66:0d:d8:a8:57:2b:
         eb:3e:d0:cc:a9:12:0b:75:d5:2d:3d:4c:da:17:d1:01:52:92:
         99:ac:86:00:2e:0c:f0:0f:0c:6f:1c:aa:c5:5a:a8:de:81:11:
         10:01:ec:c4:80:7e:59:1a:b6:f4:8d:b3:f9:32:dd:96:a7:27:
         31:4c:43:8d:1c:26:ac:82:c4:9d:0c:d0:16:dc:4f:21:76:0b:
         5b:0d:44:18:01:cf:d6:95:a4:82:11:83:06:0a:e0:a9:aa:ff:
         f9:3f:ef:6a:d5:0d:bf:32:1d:13:52:44:28:a6:a1:54:f4:e0:
         8a:ee:40:c7:1c:ad:b7:8c:d9:63:e6:e0:e4:63:df:b4:49:ef:
         69:1e:4b:12:56:ea:ac:53:a9:f2:67:6b:87:ba:28:fb:64:e8:
         e0:4a:2f:ed:be:b3:76:b6:8b:3f:41:0f:07:aa:7b:e8:50:11:
         94:90:0a:ba:2d:77:6c:b8:3d:4a:48:da:ac:f9:74:5f:b0:1d:
         e8:dc:48:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 22:21:33 2024 by rpki-client on console-ams.rpki-client.org