Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a633030303a3a2f33342d3334203d3e20323637343538.roa
File:                     323830343a343164303a633030303a3a2f33342d3334203d3e20323637343538.roa (raw, json)
Hash identifier:          8Cc/TR//W/7D5Gw4qDQAF68tMwJDeVUTtAzJf7Mp8MI=
Subject key identifier:   4C:CF:07:1B:66:94:AA:33:4F:85:07:53:B2:F3:C1:76:B3:AD:B2:CD
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       235C02DC0FE96C6EFDA2FB50870E5838C330E54F
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a633030303a3a2f33342d3334203d3e20323637343538.roa
Signing time:             Mon 22 Apr 2024 19:01:08 +0000
ROA not before:           Mon 22 Apr 2024 18:56:08 +0000
ROA not after:            Mon 21 Apr 2025 19:01:08 +0000
asID:                     267458
IP address blocks:        2804:41d0:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5c:02:dc:0f:e9:6c:6e:fd:a2:fb:50:87:0e:58:38:c3:30:e5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr 22 18:56:08 2024 GMT
            Not After : Apr 21 19:01:08 2025 GMT
        Subject: CN=4CCF071B6694AA334F850753B2F3C176B3ADB2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:29:d1:d7:96:de:f5:3c:80:4d:bd:26:60:
                    83:95:6d:56:12:a9:18:d1:f8:6a:4a:1c:d2:e5:7d:
                    8c:58:ca:e2:92:dd:34:0e:24:7f:44:79:af:63:5e:
                    03:a1:11:c1:eb:fc:b5:c9:7a:a6:72:a2:bd:d1:73:
                    76:6d:33:32:e6:e1:eb:a2:70:e2:a0:f0:0b:1b:05:
                    74:1d:14:67:1a:82:b1:d6:ba:ea:65:48:0f:7e:0d:
                    79:d3:82:7c:8c:44:9f:ab:bf:78:d0:98:fe:db:e1:
                    35:a5:e4:36:6b:81:d2:74:6d:1e:44:55:08:f1:5f:
                    80:68:2b:e4:c4:5f:f5:cd:3f:94:c3:69:eb:99:db:
                    dc:79:7d:0e:f9:a3:22:98:50:e5:49:ea:64:37:69:
                    d1:80:2f:5c:f1:2d:9f:81:4c:4f:1f:98:37:5f:53:
                    14:e0:0e:68:e4:41:34:95:29:1f:40:5c:a4:f0:d9:
                    95:51:9c:a5:88:a5:1d:88:63:d2:a6:8b:c8:ca:b6:
                    3c:49:eb:d1:01:70:fe:8f:95:75:db:a1:fa:45:9f:
                    f8:2f:23:91:4d:1e:cf:76:d5:38:0e:1d:40:92:86:
                    09:a9:60:f5:79:7e:d3:78:0b:f1:13:a7:21:8d:f9:
                    32:3c:10:e9:59:a6:2b:2e:32:7c:1f:e1:48:cd:e4:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CF:07:1B:66:94:AA:33:4F:85:07:53:B2:F3:C1:76:B3:AD:B2:CD
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a633030303a3a2f33342d3334203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:7b:cf:cb:a3:b8:89:f5:be:90:86:7c:19:6d:4a:1e:94:6e:
         23:ec:0b:93:2d:f8:87:f4:b7:22:9c:1d:59:06:34:bd:e4:37:
         8d:54:85:80:c2:b7:a8:da:38:08:bf:5e:95:bf:1e:97:a3:98:
         e1:80:52:f8:db:c9:a5:a2:78:7d:3b:1a:39:61:6d:12:9a:6c:
         3e:2a:fd:89:b1:da:b2:b8:76:20:9a:a4:f1:17:7b:ac:aa:f4:
         47:9e:a3:cb:38:a6:aa:53:71:40:e3:ac:09:31:b6:fa:64:de:
         06:2a:5c:93:ba:46:24:df:b1:e1:98:e9:23:fe:8b:4c:d0:29:
         c4:c2:45:8d:2c:75:b9:e9:38:35:53:9a:7f:19:54:17:2b:cd:
         51:87:ee:6a:36:65:1e:70:e6:90:4b:12:42:46:0d:81:bd:8a:
         65:cb:ba:42:36:e1:c8:bb:04:16:82:a2:ba:aa:5a:f4:ee:ae:
         4a:79:bc:54:ce:f5:9f:ca:39:b2:0a:7a:aa:c3:f0:06:fc:40:
         ef:a8:51:e1:ef:65:42:15:b3:0c:db:4f:9e:58:4b:70:6a:91:
         6d:ef:13:d7:e1:82:00:76:cb:ca:eb:4c:13:ab:ae:89:0e:39:
         19:4a:00:31:6a:f2:30:e5:0b:bf:aa:e5:66:f0:43:21:0d:44:
         66:57:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 22:21:33 2024 by rpki-client on console-ams.rpki-client.org