Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a333930303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a333930303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          qQNmtnWiSiNf98UTTcigld+c6t5sdawqE2OPwuxqXf0=
Subject key identifier:   61:C8:CF:33:36:CD:9A:3A:0D:EF:98:1C:A3:C0:39:AC:01:5D:8B:D8
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       68D40A4B18A94BCEFDEBD3CB805A50BDDDA223DD
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a333930303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Mon 22 Apr 2024 19:00:41 +0000
ROA not before:           Mon 22 Apr 2024 18:55:41 +0000
ROA not after:            Mon 21 Apr 2025 19:00:41 +0000
asID:                     267458
IP address blocks:        2804:41d0:3900::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d4:0a:4b:18:a9:4b:ce:fd:eb:d3:cb:80:5a:50:bd:dd:a2:23:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr 22 18:55:41 2024 GMT
            Not After : Apr 21 19:00:41 2025 GMT
        Subject: CN=61C8CF3336CD9A3A0DEF981CA3C039AC015D8BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:21:5b:23:4d:98:4c:32:13:e8:75:ca:19:a9:
                    88:78:0a:cf:d8:2b:08:e9:48:30:d9:04:d7:4f:4b:
                    49:95:6e:7f:d5:4c:18:0c:2d:8f:b0:60:0e:29:12:
                    c5:a8:32:21:85:3c:f7:b1:7e:9f:82:46:a5:c4:5d:
                    85:60:68:0d:61:57:69:6e:ce:6f:dd:c5:be:0f:8a:
                    1c:ff:37:72:ca:5e:b9:31:3e:be:97:e8:10:3a:bd:
                    0d:73:fa:3a:1b:d9:25:66:f7:d8:d2:45:e2:97:60:
                    ba:8c:6c:6b:92:ac:10:c7:f3:e2:05:1e:26:39:a7:
                    76:5e:0a:7d:e9:96:38:ef:d3:97:e9:c3:19:c5:59:
                    14:69:15:a3:b9:2f:10:60:24:8d:2d:cb:89:bb:c1:
                    fd:cc:53:25:86:2f:6f:68:8d:74:42:e5:42:1f:36:
                    24:a5:42:88:69:11:b4:ab:75:ba:44:40:67:d2:3a:
                    5b:e6:e5:26:a3:8d:39:a7:59:54:7f:aa:51:03:19:
                    dd:de:5c:62:d8:d7:2c:68:8f:77:b5:fb:06:7d:56:
                    dc:ab:cc:a0:46:12:a4:93:dd:12:ed:fe:fb:a6:d0:
                    c9:6a:07:b3:fa:a8:32:51:98:4c:ae:d0:19:15:81:
                    69:a6:c5:f5:1c:79:d0:08:45:8c:02:ea:12:91:0a:
                    61:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C8:CF:33:36:CD:9A:3A:0D:EF:98:1C:A3:C0:39:AC:01:5D:8B:D8
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a333930303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:3900::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:34:99:c7:aa:ee:44:ca:40:17:7e:ed:90:77:8e:b2:a9:7b:
         e2:94:ce:72:59:31:47:61:25:2c:5e:00:09:84:f7:0e:99:d3:
         08:0b:d3:35:88:b0:36:86:5a:e3:28:e5:87:1a:b4:90:9a:dd:
         0e:ec:cb:62:b7:c7:a5:4a:9c:43:9b:dd:ab:6a:81:fa:25:de:
         87:96:5a:16:2b:95:e4:9d:f3:d8:3c:27:a3:b7:73:9c:62:e6:
         ee:6d:5f:d6:21:85:77:ae:29:96:b2:b0:ee:f5:9a:1c:73:cf:
         73:81:39:46:5b:3e:0f:eb:86:9d:59:bc:67:bf:a5:e5:56:3e:
         f4:a4:ba:42:23:7d:50:71:d9:95:32:c9:a9:76:52:34:68:0d:
         08:d1:12:bb:89:a0:8d:a6:e9:60:45:29:35:29:40:84:98:05:
         59:3d:fc:15:95:ca:3e:f8:92:f5:c7:8e:80:81:d8:1a:5f:8c:
         0d:e4:d4:ab:27:9c:1b:61:b1:dd:6e:ff:98:01:c3:f5:d4:88:
         e9:f6:68:6e:51:1c:4a:d2:7b:b7:82:7d:32:06:ec:2f:8f:0b:
         40:ab:64:46:d2:00:1e:93:5e:3a:b4:8a:f4:79:37:d0:47:7e:
         0e:b0:78:80:7a:1f:9b:64:fe:b4:90:2c:14:c2:83:07:dd:07:
         ba:e3:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 20:23:13 2024 by rpki-client on console-fra.rpki-client.org