Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a343430303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a343430303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          UV77ezWgSGAK6VCFY5dV6aKKIwul5yjJHoZUzW7G6QE=
Subject key identifier:   BF:5C:8B:B0:EE:4C:53:4C:59:6F:F1:CA:8D:ED:C2:72:A3:40:AC:E8
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       57499D4F3EA3B3A21B9E746EC41EF4FC0B4B5B8F
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a343430303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:15 +0000
ROA not before:           Thu 04 Apr 2024 02:02:15 +0000
ROA not after:            Thu 03 Apr 2025 02:07:15 +0000
asID:                     267458
IP address blocks:        2804:41d0:4400::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:49:9d:4f:3e:a3:b3:a2:1b:9e:74:6e:c4:1e:f4:fc:0b:4b:5b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:15 2024 GMT
            Not After : Apr  3 02:07:15 2025 GMT
        Subject: CN=BF5C8BB0EE4C534C596FF1CA8DEDC272A340ACE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:eb:28:4a:20:51:67:66:7d:96:22:91:5e:
                    43:2a:d9:d4:d7:96:59:78:4a:3f:d0:82:f2:23:6a:
                    f7:51:4d:f8:a6:05:ed:37:d1:2f:04:00:d6:1b:aa:
                    da:56:37:a4:98:75:bf:5f:85:6c:ab:09:bf:8f:f4:
                    fd:2a:e1:6e:f4:fe:d0:f4:56:24:e3:46:f1:cd:ae:
                    68:21:c2:5e:50:9f:f7:86:68:0c:fa:fa:99:d8:30:
                    99:e1:f7:a9:64:52:1f:f7:d8:46:4e:ae:86:96:d8:
                    c0:3a:04:2d:d8:8d:88:70:8c:d3:1c:9b:dd:b6:fd:
                    66:5b:8f:df:01:02:53:45:53:40:d3:b8:f7:68:27:
                    9c:04:b6:ed:35:71:49:bd:3b:3e:e9:a4:98:f4:6f:
                    e4:ce:c4:df:8a:7c:94:f2:4a:0e:9a:58:27:d0:ac:
                    1a:f6:95:7d:e3:96:f2:04:28:f2:aa:78:22:c8:b6:
                    2b:99:9e:4a:5a:57:88:c3:23:e4:b6:3a:06:08:5c:
                    d5:a5:da:fb:1f:91:d5:3e:26:c9:74:c0:ba:c4:05:
                    7f:48:2f:c6:ab:5b:68:80:2c:26:11:f0:86:0b:27:
                    74:8f:d1:86:a3:1f:fd:b4:45:a3:aa:81:4c:f1:b7:
                    28:1a:b3:d3:b1:56:d4:3f:04:b4:92:47:df:9e:60:
                    d2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5C:8B:B0:EE:4C:53:4C:59:6F:F1:CA:8D:ED:C2:72:A3:40:AC:E8
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a343430303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:a1:ab:8e:58:bc:3f:b7:ad:4d:4c:98:53:e2:ca:9c:c3:c5:
         30:4f:cd:1a:b0:b8:43:4d:a1:92:30:72:d2:b4:23:36:5d:5d:
         1b:59:79:14:d3:3c:be:91:6f:8c:52:31:f1:4f:94:12:0e:3a:
         6d:a4:45:73:52:9c:cd:d6:89:06:b9:a8:c5:5b:fd:5c:d1:16:
         11:9c:16:57:51:ca:b5:bf:d1:f1:db:2a:53:c4:f3:0f:c8:9b:
         d9:da:77:2c:ab:fb:1d:45:ed:0f:af:36:8e:4c:ff:ec:a8:db:
         24:6b:7c:d7:e6:8e:41:07:e1:ab:4e:ac:7e:e9:d7:8d:c4:a2:
         c5:2b:9f:e3:e5:f8:fa:5e:9c:68:03:b2:b0:bc:82:dd:41:04:
         e7:01:02:6d:36:de:9f:4c:b3:66:32:8c:d5:9a:3a:f8:02:99:
         37:f2:37:7a:42:98:d8:fe:00:15:c5:16:9c:f8:2c:c5:0f:b5:
         f1:04:7e:74:f7:11:61:b8:c9:78:c2:56:12:87:1e:58:c0:25:
         46:9b:64:d3:26:b8:1f:f2:9e:ce:bb:2f:8a:05:a3:22:ed:a0:
         3d:fd:40:da:d7:5d:da:c2:d2:5f:4b:6e:50:22:99:b9:6b:6e:
         fc:8e:dc:7b:2f:84:4d:0f:5b:6d:21:66:e9:2f:dc:8d:ad:6f:
         50:ea:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 20:23:13 2024 by rpki-client on console-fra.rpki-client.org