Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a313630303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a313630303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          t01Qxm1ztrkWhgvPLxzUPqXpLH1lKScrShjlfQ6jwb4=
Subject key identifier:   A0:A8:B3:23:AE:B2:F6:F3:32:E9:CD:8E:D5:21:B1:56:EF:2A:94:47
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       2CE6C6EFCB905273939D18C758DE48A4C3209CB2
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a313630303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:15 +0000
ROA not before:           Thu 04 Apr 2024 02:02:15 +0000
ROA not after:            Thu 03 Apr 2025 02:07:15 +0000
asID:                     267458
IP address blocks:        2804:41d0:1600::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e6:c6:ef:cb:90:52:73:93:9d:18:c7:58:de:48:a4:c3:20:9c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:15 2024 GMT
            Not After : Apr  3 02:07:15 2025 GMT
        Subject: CN=A0A8B323AEB2F6F332E9CD8ED521B156EF2A9447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:b1:72:7f:04:c6:81:c1:ce:20:dc:19:45:
                    81:25:e1:60:84:fc:d1:59:56:29:0b:f0:7b:17:e5:
                    ab:2f:10:34:4b:f6:b7:1a:e4:4c:f8:91:17:1c:e7:
                    54:95:a8:4e:cb:c3:76:9d:a8:1f:3a:92:50:09:aa:
                    1b:af:37:64:9f:0e:d6:8d:03:8c:b1:a7:da:22:6b:
                    45:05:05:d6:33:ae:65:78:e8:92:32:d5:15:4c:a4:
                    7d:06:67:9c:4f:20:67:ca:81:d3:6b:49:58:2c:de:
                    0a:35:a3:42:11:2e:9a:5d:89:17:3f:16:b5:41:fd:
                    80:e8:5c:e7:c9:7f:9b:5d:ae:90:ec:68:e4:3f:c8:
                    f1:14:21:7e:de:de:52:89:73:0b:15:5a:21:04:9b:
                    c1:7a:93:2a:c7:69:7b:a7:ea:7f:ce:c4:09:d0:86:
                    cd:f6:52:f9:35:e9:cd:b5:4e:40:90:e7:b4:90:f7:
                    ed:24:99:59:7a:98:5a:68:69:22:12:d3:95:89:a2:
                    f1:46:c9:24:6c:af:3f:1a:eb:88:d7:50:10:08:71:
                    71:be:65:76:81:18:b8:f1:d2:f3:89:1e:89:af:9a:
                    43:97:39:c0:65:aa:c6:2f:c5:94:39:2f:9d:59:c1:
                    81:de:ac:23:06:53:87:29:91:ff:a3:01:95:ee:97:
                    f3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A8:B3:23:AE:B2:F6:F3:32:E9:CD:8E:D5:21:B1:56:EF:2A:94:47
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a313630303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:50:6d:d0:96:45:73:ce:90:7a:15:3b:1d:17:26:ba:58:6f:
         39:88:9b:8d:54:7e:89:d0:6f:2e:3b:88:ce:70:ff:ad:26:6b:
         3e:43:72:bd:c4:41:c5:f3:d3:a3:c4:11:7a:b1:b3:a6:70:a2:
         d7:7b:f8:fa:20:3b:de:d0:df:28:f7:b1:78:e0:65:a2:6f:ea:
         4e:51:f7:16:f8:1c:26:67:e3:3f:2a:08:7d:b5:20:a4:10:fd:
         a8:bf:e9:e8:6f:a0:39:7c:59:d0:c6:9c:93:26:c5:4d:42:68:
         56:92:13:9e:d8:43:0f:ec:13:8b:ec:43:bb:be:3d:6f:9c:e7:
         aa:01:b6:b8:2a:0e:2c:6f:dc:9a:c4:5a:b9:f0:9a:e5:cc:3a:
         3f:17:69:2e:68:c0:d0:04:35:31:88:f1:86:5d:2a:87:ff:2d:
         01:59:49:03:13:df:f7:aa:e8:e3:3f:c4:d1:50:89:80:ba:84:
         27:83:e6:cb:c2:43:83:70:a7:87:4a:ca:a0:22:34:0c:37:10:
         9f:22:2c:b1:35:4f:a9:68:38:c4:05:5b:f7:36:dd:2f:33:56:
         40:99:e8:15:4f:d2:03:17:9c:3e:db:83:38:03:a6:fb:6c:43:
         e9:56:56:2b:78:32:6b:90:ed:b3:ab:0d:1b:c9:82:54:12:ad:
         3c:a4:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 20:23:13 2024 by rpki-client on console-fra.rpki-client.org