Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a333830303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a333830303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          IW4mgolz9K/uYJMJl/US1r3FEaoPONcWJXclV/dHIKU=
Subject key identifier:   20:83:CE:04:7E:69:05:BC:20:B3:C1:CC:93:15:AF:DC:7C:47:F4:61
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       6AC4898F96A156967D95063956EC398D47B6444A
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a333830303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:16 +0000
ROA not before:           Thu 04 Apr 2024 02:02:16 +0000
ROA not after:            Thu 03 Apr 2025 02:07:16 +0000
asID:                     267458
IP address blocks:        2804:41d0:3800::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c4:89:8f:96:a1:56:96:7d:95:06:39:56:ec:39:8d:47:b6:44:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:16 2024 GMT
            Not After : Apr  3 02:07:16 2025 GMT
        Subject: CN=2083CE047E6905BC20B3C1CC9315AFDC7C47F461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3e:b1:b0:e8:63:6e:fc:18:33:bd:49:03:00:
                    6c:d8:ff:42:be:e6:ee:80:ad:5a:dd:e1:48:96:b9:
                    b3:b1:56:ab:e9:8c:ef:2e:af:f0:ae:b6:d2:b8:e0:
                    67:2e:2d:13:0e:04:66:4a:38:ce:68:75:6a:08:0b:
                    d5:cb:3d:c2:8a:de:53:64:24:39:85:c2:0a:87:68:
                    3d:53:c7:9d:96:3c:8c:10:21:aa:0f:cf:3d:51:a0:
                    23:79:b4:a1:9a:a9:24:4f:1f:03:94:36:97:66:94:
                    9a:09:23:1f:c7:6a:48:1a:65:79:09:fe:43:9b:69:
                    b2:10:1c:b9:b6:92:66:d8:3c:15:4a:2b:9c:71:7b:
                    3a:ce:fa:bd:ec:e5:0d:8e:28:fa:f8:29:8e:09:3d:
                    78:d0:92:a5:e6:79:2a:26:26:6f:7d:fe:5b:1e:18:
                    37:75:db:e6:a9:79:44:42:fa:56:14:ca:37:26:c1:
                    40:1a:1a:05:8b:0e:ce:43:e5:f7:0a:81:50:8c:fd:
                    7a:29:fc:b7:39:89:64:6f:10:81:08:91:75:2e:67:
                    32:9f:6f:ce:e0:d3:1c:8a:d9:89:af:82:2f:e9:03:
                    fc:95:bb:dd:cf:a9:62:7d:3c:df:59:9f:6d:15:74:
                    60:ed:1a:e7:ab:22:7b:f4:0c:48:04:b8:5f:ac:38:
                    6a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:83:CE:04:7E:69:05:BC:20:B3:C1:CC:93:15:AF:DC:7C:47:F4:61
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a333830303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         da:be:fe:34:57:d9:20:ec:97:2b:13:3a:d7:20:10:0e:e5:64:
         1c:5a:35:83:5b:ff:f3:82:96:aa:ba:29:1f:04:5d:23:04:eb:
         0f:6f:47:b4:d2:c7:d1:92:26:99:df:36:31:66:3d:d0:b3:c6:
         f7:27:8b:fb:ad:af:2c:52:58:0f:aa:0d:67:e6:14:c3:34:f1:
         3a:9f:42:5a:43:cf:60:6d:67:af:66:7f:bf:db:48:3c:dd:0d:
         fe:79:e7:91:21:3d:84:5d:24:74:29:40:44:c1:86:12:69:44:
         c6:ef:be:43:e5:48:65:97:56:05:f7:18:18:44:b5:ed:fe:49:
         79:17:63:b2:47:0a:e3:4b:db:19:95:37:cc:e9:97:ed:7d:e4:
         2c:2c:3d:70:8d:45:f9:fa:e8:cf:6b:f0:26:e0:c1:85:28:d7:
         6b:d3:fd:1a:38:b9:76:0a:eb:0f:93:41:08:bd:5b:42:27:8f:
         fb:e0:37:b9:f4:99:db:06:57:97:0a:e5:2e:cf:da:fe:7f:bd:
         04:c8:37:81:4a:0b:ef:7a:5b:d7:bf:c7:d9:a9:84:1f:ba:af:
         2e:0a:5c:3b:d8:84:70:db:52:4e:c5:2c:92:10:d3:bb:b3:60:
         74:0c:08:fb:45:30:d8:44:a1:54:6a:e8:cf:cf:4c:57:92:b2:
         10:b1:7f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 22:21:33 2024 by rpki-client on console-ams.rpki-client.org