Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a333730303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a333730303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          GIJF7hqU2koq/TJwl7sUV02DEogZQTMG8fwEAaBG1cY=
Subject key identifier:   10:D0:2E:54:9D:70:DC:81:39:81:F8:9C:43:D9:6D:44:E0:AD:44:D8
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       6752504CE0B6899F6E42CDAC6D2D403631993932
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a333730303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:17 +0000
ROA not before:           Thu 04 Apr 2024 02:02:17 +0000
ROA not after:            Thu 03 Apr 2025 02:07:17 +0000
asID:                     267458
IP address blocks:        2804:41d0:3700::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:52:50:4c:e0:b6:89:9f:6e:42:cd:ac:6d:2d:40:36:31:99:39:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:17 2024 GMT
            Not After : Apr  3 02:07:17 2025 GMT
        Subject: CN=10D02E549D70DC813981F89C43D96D44E0AD44D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:a8:c7:46:bd:fb:3b:23:51:9e:0a:95:15:
                    68:a0:01:e6:9e:98:7a:d2:ab:c0:cf:d3:9d:ca:4d:
                    ed:69:e8:3c:08:56:c0:b4:05:27:37:15:a5:15:60:
                    fb:e8:7d:bf:0f:ab:92:76:0a:6c:53:ad:be:40:25:
                    b5:e7:87:11:37:a3:43:10:6c:c8:e6:6a:d6:20:00:
                    cb:84:c5:5d:88:1d:5b:68:d5:76:f0:7e:6b:46:6b:
                    37:3a:52:e6:cf:8a:2c:74:08:87:da:ac:6c:4d:c2:
                    de:ce:bc:6e:1c:de:d5:66:8d:d8:2d:18:2e:01:ee:
                    f8:0c:f2:87:ca:79:7e:4c:eb:13:3a:d3:5f:24:02:
                    b7:6c:63:71:a2:b2:56:91:75:c4:d2:ca:7b:67:24:
                    09:89:74:2f:c8:9d:f7:56:57:be:18:67:43:4d:74:
                    09:3d:ef:11:87:ba:13:71:21:a4:a8:28:07:2f:3d:
                    dc:ce:75:ee:3f:e3:40:cd:64:c9:5e:9e:6c:da:cd:
                    57:ad:fb:05:ab:d9:64:5f:fc:63:9c:c0:37:8e:ff:
                    e7:45:34:c2:9d:85:29:3d:4a:fa:76:d2:7c:d6:ee:
                    88:6b:b0:cb:ee:ff:ef:25:a5:fa:20:7a:7f:99:4d:
                    e0:c6:10:02:f9:2c:a1:16:1a:da:1c:d1:4d:5e:2b:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D0:2E:54:9D:70:DC:81:39:81:F8:9C:43:D9:6D:44:E0:AD:44:D8
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a333730303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:3700::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:da:0b:a7:da:f1:07:b6:6e:2b:58:eb:1b:e7:c2:ae:6b:98:
         9c:21:19:a1:d1:ee:4b:10:90:c4:28:3f:3d:29:ed:4c:6f:96:
         b9:c2:c1:13:a9:1b:47:55:0e:42:81:48:06:a2:87:e9:34:84:
         d8:47:46:f4:1e:78:e6:96:f2:68:0f:30:48:36:11:20:5b:c8:
         ae:c3:d5:21:37:fc:e6:e7:6f:1d:6c:aa:bf:02:3d:d9:2a:0b:
         bb:10:a2:92:e1:2a:0c:10:fb:df:1b:28:7d:41:15:91:2e:38:
         a5:b0:7e:e8:32:06:66:b0:46:d4:7d:23:29:5e:b0:67:07:e3:
         02:19:90:65:bc:37:98:b4:0c:8b:a9:bf:af:c9:10:06:5d:8f:
         cc:79:63:de:99:be:40:42:fe:fd:cd:ae:62:4d:a7:2f:78:81:
         d3:82:1f:d6:d4:43:b7:70:39:bd:25:db:2a:cb:72:d8:09:7d:
         bf:1a:89:33:9e:f5:6d:d2:86:bf:2b:a0:bc:41:9a:32:e1:d5:
         1a:dd:27:ba:6c:c4:54:f1:a6:68:c8:bc:8a:4c:90:bf:8a:89:
         94:73:ed:8d:df:7b:2a:9f:39:8c:70:bb:56:4e:92:97:72:04:
         72:f4:e4:4c:5e:fc:85:2d:2c:62:e5:df:92:78:c5:c8:76:5d:
         a3:d0:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 20:23:13 2024 by rpki-client on console-fra.rpki-client.org