Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a343030303a3a2f33342d3334203d3e20323637343538.roa
File:                     323830343a343164303a343030303a3a2f33342d3334203d3e20323637343538.roa (raw, json)
Hash identifier:          VxJ9jcDAdWs/KfU8QgmE/vpeSCMb+4vrwtaX/8i+O3s=
Subject key identifier:   4A:D4:E0:5A:69:89:05:20:A8:DE:D8:CA:E1:23:03:80:6D:AC:FA:0B
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       525CF37C757EC7CA93D49D6DDBED43917E2359E1
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a343030303a3a2f33342d3334203d3e20323637343538.roa
Signing time:             Mon 22 Apr 2024 19:01:08 +0000
ROA not before:           Mon 22 Apr 2024 18:56:08 +0000
ROA not after:            Mon 21 Apr 2025 19:01:08 +0000
asID:                     267458
IP address blocks:        2804:41d0:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5c:f3:7c:75:7e:c7:ca:93:d4:9d:6d:db:ed:43:91:7e:23:59:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr 22 18:56:08 2024 GMT
            Not After : Apr 21 19:01:08 2025 GMT
        Subject: CN=4AD4E05A69890520A8DED8CAE12303806DACFA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8b:28:52:b2:e8:e0:92:bb:b1:67:f1:c2:c5:
                    d9:84:d4:f6:74:3f:0b:ad:d7:dc:33:78:38:a1:51:
                    f5:f9:21:d9:77:96:46:24:47:00:23:61:a3:17:03:
                    2c:76:77:bc:10:4b:b5:97:74:11:7f:d9:eb:06:cf:
                    e7:d1:cf:37:c4:94:d0:c4:16:82:5f:6d:5f:7b:ae:
                    d3:ff:93:36:f4:df:d3:e8:14:4f:69:81:9c:98:8a:
                    f0:50:d5:eb:94:a0:b3:a5:6e:da:74:a7:d3:6a:e5:
                    26:5c:6d:6d:65:e5:6d:a0:f8:6f:e8:18:5c:1b:ae:
                    5f:d8:ee:de:6f:b3:0f:6c:83:b5:fa:67:7c:22:66:
                    3d:c9:55:ca:4e:65:16:6c:39:79:28:b9:39:c1:b2:
                    15:c8:fb:94:e1:95:14:78:b4:7e:c4:7b:e1:c4:9c:
                    bb:a9:0c:e6:ed:a5:f4:cf:fb:19:d7:b6:3a:a4:78:
                    63:60:17:9f:24:05:86:cb:99:0e:5d:e7:7f:cf:be:
                    c8:e9:ee:b7:94:97:2a:15:16:ca:21:0f:26:f3:94:
                    ce:70:58:5b:19:4f:56:f7:84:31:96:86:e4:bb:0f:
                    d0:81:4a:c6:c7:d4:17:79:85:eb:6c:c9:24:da:01:
                    29:cd:63:b3:2d:71:83:3d:e0:44:94:eb:7d:29:a3:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D4:E0:5A:69:89:05:20:A8:DE:D8:CA:E1:23:03:80:6D:AC:FA:0B
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a343030303a3a2f33342d3334203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:41:0c:1e:c7:95:61:78:84:aa:8e:ef:56:12:41:1b:2c:0f:
         42:5f:a7:48:69:b5:2b:f2:7e:54:c1:99:0b:c3:0d:45:77:11:
         62:f9:67:60:20:b7:7d:a9:ec:01:38:c1:2d:ad:fe:4b:2e:da:
         be:7c:fd:0b:e1:e5:2e:56:5e:6f:c3:32:66:80:0d:7a:ac:4b:
         4d:4c:eb:5f:34:d0:f6:cf:53:af:a1:ef:c0:db:f7:60:a8:b1:
         8c:99:57:81:1b:ec:6e:46:4a:db:8a:d6:38:63:71:51:d2:46:
         4b:c1:00:7f:bb:46:01:06:d7:db:a8:04:3e:a0:bf:ae:b2:70:
         00:a3:6a:85:0f:18:04:cf:81:a8:68:92:0b:93:20:01:50:44:
         84:42:3e:6b:83:4d:9c:86:b7:bf:a8:ea:31:4d:88:ad:ce:22:
         a2:1c:ea:90:c3:97:25:42:4c:70:53:29:4d:23:51:71:5d:66:
         b8:03:3d:c8:aa:f2:dc:3e:78:6e:cb:08:50:43:50:35:05:25:
         21:01:30:a4:26:1a:05:00:51:b8:fa:be:84:48:4d:37:6e:d6:
         9e:50:5c:28:93:21:55:48:36:0b:9c:58:73:0c:c7:b8:47:47:
         8b:ac:f5:59:19:4a:79:ae:25:b2:6f:5f:31:ea:0c:37:38:1d:
         af:70:b6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 22:21:33 2024 by rpki-client on console-ams.rpki-client.org