Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a333330303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a333330303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          n4UGsIQKa7dtv2dupXprCJgm4x98SheNuM/Fmrj1KFM=
Subject key identifier:   5E:1F:5D:9F:6C:70:AB:61:B4:1B:F8:42:22:94:42:6A:40:3D:CF:AD
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       568E2721F0E641EF1DD3E007609F338B9790BC09
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a333330303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:17 +0000
ROA not before:           Thu 04 Apr 2024 02:02:17 +0000
ROA not after:            Thu 03 Apr 2025 02:07:17 +0000
asID:                     267458
IP address blocks:        2804:41d0:3300::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8e:27:21:f0:e6:41:ef:1d:d3:e0:07:60:9f:33:8b:97:90:bc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:17 2024 GMT
            Not After : Apr  3 02:07:17 2025 GMT
        Subject: CN=5E1F5D9F6C70AB61B41BF8422294426A403DCFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:c7:60:5e:09:ea:8d:d4:d4:03:f8:c7:d7:
                    69:1f:4f:5d:b5:22:fd:00:b3:92:9e:b3:fd:fc:3a:
                    dd:45:ec:9a:67:27:9c:6d:31:2a:54:10:e3:fe:a6:
                    5e:5b:0a:af:55:3c:5e:4a:f9:fd:d4:34:ea:ba:8b:
                    29:0f:31:3b:76:46:b2:e9:b1:e3:17:5b:e6:bc:c6:
                    a9:66:70:54:50:f7:44:4f:2a:ba:e3:71:fb:04:e4:
                    e7:64:2d:e6:76:89:d5:f6:f1:91:3f:6e:5c:ba:7b:
                    42:4b:bb:52:59:a8:7d:a1:90:f5:4f:f3:bf:d7:bb:
                    d5:62:4c:39:6f:62:53:a2:6e:09:1d:cd:7e:d9:c5:
                    98:59:06:80:09:4a:59:de:19:c1:04:bb:53:c0:68:
                    35:30:b3:f3:f5:51:0a:5d:3e:20:5f:29:90:55:50:
                    b4:5d:eb:34:80:72:91:4b:48:c8:04:b0:17:c5:67:
                    b7:ee:dd:1b:65:58:d5:0f:c9:b1:31:80:9a:68:c0:
                    fd:4a:9a:e2:a7:29:8c:40:24:b7:5c:ef:9a:d7:3f:
                    13:ab:df:7c:89:70:2f:53:34:f0:32:e9:c3:65:b5:
                    3c:72:fa:90:ed:ea:0f:22:7d:25:99:29:77:5d:ad:
                    ad:e7:c0:0d:27:81:12:3c:b8:f1:92:a7:95:6a:12:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1F:5D:9F:6C:70:AB:61:B4:1B:F8:42:22:94:42:6A:40:3D:CF:AD
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a333330303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:80:d7:22:6e:32:dc:c3:28:e9:67:cc:92:83:4a:eb:6b:4d:
         d0:a9:00:2c:9a:b0:5e:38:4b:05:6e:6b:4f:15:fa:28:2e:0a:
         3c:38:59:74:83:78:44:58:b3:3e:0e:a5:f9:5d:72:f9:0b:b9:
         2e:5f:c0:0f:04:f4:84:be:e1:bb:59:98:23:cf:47:80:5b:11:
         0d:87:d9:9f:2c:f1:95:71:6f:e2:6d:61:51:1f:1f:0e:3c:9a:
         08:db:50:99:77:62:40:e2:e7:2d:26:ed:b4:bd:b5:4c:8a:9e:
         d5:fd:99:f9:7c:40:99:95:fe:49:d4:7b:4a:1f:9f:5e:8d:25:
         4f:bc:43:8f:a4:45:82:ab:4a:f7:4a:f4:c0:2f:0a:16:12:c5:
         c2:3f:79:08:85:ca:63:95:6b:a3:d2:a9:5a:79:23:30:ee:28:
         a1:56:7e:b4:df:8a:1f:34:b6:d0:09:f6:27:a5:54:65:f5:c7:
         12:76:d4:d4:ad:bf:eb:f2:86:a3:9c:dd:7f:cc:9c:43:10:ad:
         06:ba:8d:95:d5:0a:f9:8d:81:ca:47:a5:4b:30:32:e7:1f:75:
         be:ee:46:d4:40:13:4a:b7:6b:b4:df:c5:e8:41:f3:d6:b1:2c:
         1a:c3:a7:9d:e1:a2:74:85:ac:84:db:8b:5a:65:f5:26:c7:81:
         e0:ac:7f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 22:21:33 2024 by rpki-client on console-ams.rpki-client.org