Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/323830343a333561343a3a2f33322d3333203d3e20323636323938.roa
File:                     323830343a333561343a3a2f33322d3333203d3e20323636323938.roa (raw, json)
Hash identifier:          cv/zCIltJbPNRnf2b0p2MHpqzBr643d/nDj7EChsb3E=
Subject key identifier:   4F:4B:4F:A6:87:47:13:3C:5D:71:F9:C8:B8:89:25:9F:02:4C:A4:77
Certificate issuer:       /CN=38391C65CACADCE14764C39BDCAF54A341E5BCD3
Certificate serial:       4B1713692CA2188D22C91CCD9E73256E16829BBF
Authority key identifier: 38:39:1C:65:CA:CA:DC:E1:47:64:C3:9B:DC:AF:54:A3:41:E5:BC:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38391C65CACADCE14764C39BDCAF54A341E5BCD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/323830343a333561343a3a2f33322d3333203d3e20323636323938.roa
Signing time:             Mon 13 May 2024 13:44:46 +0000
ROA not before:           Mon 13 May 2024 13:39:46 +0000
ROA not after:            Mon 12 May 2025 13:44:46 +0000
asID:                     266298
IP address blocks:        2804:35a4::/32 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:17:13:69:2c:a2:18:8d:22:c9:1c:cd:9e:73:25:6e:16:82:9b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38391C65CACADCE14764C39BDCAF54A341E5BCD3
        Validity
            Not Before: May 13 13:39:46 2024 GMT
            Not After : May 12 13:44:46 2025 GMT
        Subject: CN=4F4B4FA68747133C5D71F9C8B889259F024CA477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:75:25:19:24:0b:bd:9f:9e:70:88:ad:59:68:
                    bb:9d:ab:43:ee:6a:8e:78:2a:98:8f:86:fa:2b:42:
                    34:1d:3b:07:00:01:e9:22:76:ed:53:75:47:f3:a1:
                    3b:5b:d7:d9:33:bf:57:f1:b1:ef:12:17:a6:00:55:
                    b3:1d:86:f4:db:e7:85:0b:71:ae:e5:51:26:7e:c1:
                    13:29:c9:65:47:d4:f2:14:30:6c:72:cb:1f:c9:b8:
                    66:c3:01:8d:4b:7a:19:e9:c0:3a:ed:b6:04:ce:c3:
                    07:28:89:6e:74:ce:c2:5e:98:42:8d:a0:0c:6a:f8:
                    47:66:1c:58:f7:7e:a6:29:fb:3b:dd:26:40:99:50:
                    f2:5e:96:7c:fe:5f:c8:0c:7c:c0:4e:71:73:6d:ab:
                    45:d1:e3:0f:8a:0a:2b:a2:a0:37:dd:9f:74:58:f5:
                    92:99:3e:98:5b:52:74:a2:21:6d:7d:53:25:70:75:
                    20:6c:02:4b:96:cc:66:32:26:e9:ea:cf:1d:d2:a4:
                    56:c2:8d:68:f0:b0:2f:d2:e8:d0:81:28:d5:42:f3:
                    32:88:00:f6:b5:a7:ef:07:df:4e:11:d1:30:3e:60:
                    3e:a0:5d:32:65:49:a4:fd:9a:ec:25:ee:ea:b2:6e:
                    a3:a7:6f:50:ce:41:8f:cb:e6:98:6d:55:36:55:7d:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4B:4F:A6:87:47:13:3C:5D:71:F9:C8:B8:89:25:9F:02:4C:A4:77
            X509v3 Authority Key Identifier:
                keyid:38:39:1C:65:CA:CA:DC:E1:47:64:C3:9B:DC:AF:54:A3:41:E5:BC:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/38391C65CACADCE14764C39BDCAF54A341E5BCD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38391C65CACADCE14764C39BDCAF54A341E5BCD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/323830343a333561343a3a2f33322d3333203d3e20323636323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:33:9d:3b:95:33:ef:c2:90:61:42:a7:84:b3:d5:02:74:ee:
         83:b5:99:b6:87:8b:ac:e1:7a:8d:b8:f0:be:b3:45:64:a5:97:
         a7:c4:38:03:2b:9d:f5:34:71:2a:06:78:a1:ad:2d:56:57:a6:
         07:5e:5f:76:42:b1:0f:58:7f:be:a1:f3:3b:99:d7:fd:6a:fc:
         22:73:cb:76:44:ad:b2:44:f9:99:e0:55:53:b1:56:51:23:13:
         e5:db:f2:6b:96:60:e9:53:24:90:b3:ad:ec:3a:8c:d3:70:15:
         fc:74:77:e9:40:95:ea:c5:86:df:9d:ec:d4:7d:c9:d2:53:10:
         3a:88:7f:d3:67:39:8e:d4:96:a8:6b:d5:3f:f3:11:ac:42:05:
         27:4e:f6:51:ae:20:0b:0d:b4:4d:b3:a5:74:5f:a2:c0:92:6c:
         95:94:9b:f3:40:05:7f:6a:ff:9d:73:8d:9d:38:57:cc:d6:8c:
         32:6d:2e:b1:77:7a:1e:78:32:04:9d:a2:b1:d6:b1:60:58:8d:
         7c:2f:2a:54:8b:44:60:3a:44:9d:06:f8:76:5b:f1:7a:10:76:
         e1:56:76:15:7f:6f:61:d5:47:f1:e7:59:f7:5a:61:bd:e8:fe:
         37:cb:18:68:53:9d:86:2a:21:44:de:11:ec:76:1d:ed:b3:c6:
         d3:77:de:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 12:10:59 2024 by rpki-client on console-fra.rpki-client.org