Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a3a2f33322d3336203d3e20323632343630.roa
File:                     323830343a3462343a3a2f33322d3336203d3e20323632343630.roa (raw, json)
Hash identifier:          93WW3EaHq45k3p8zEE5kUWjWUDVNSEayIgSgNukBEbM=
Subject key identifier:   18:7B:4E:5C:AD:91:1E:22:C3:35:4F:FD:74:82:39:77:23:8A:1A:BD
Certificate issuer:       /CN=3A3DF525158206E0B66C8FD23D86B1780F642002
Certificate serial:       6CEE4E04F78E61DCF143F6A4A25003D4833FEDA5
Authority key identifier: 3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a3a2f33322d3336203d3e20323632343630.roa
Signing time:             Thu 03 Oct 2024 12:17:07 +0000
ROA not before:           Thu 03 Oct 2024 12:12:07 +0000
ROA not after:            Thu 02 Oct 2025 12:17:07 +0000
asID:                     262460
IP address blocks:        2804:4b4::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ee:4e:04:f7:8e:61:dc:f1:43:f6:a4:a2:50:03:d4:83:3f:ed:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3DF525158206E0B66C8FD23D86B1780F642002
        Validity
            Not Before: Oct  3 12:12:07 2024 GMT
            Not After : Oct  2 12:17:07 2025 GMT
        Subject: CN=187B4E5CAD911E22C3354FFD74823977238A1ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:fa:7b:96:84:cb:84:a0:8f:2f:dc:4e:d1:
                    c4:84:dd:98:b3:46:fc:12:68:34:c3:2c:47:b1:79:
                    54:00:be:ab:d4:3a:22:13:37:dd:f7:8c:b0:2c:b8:
                    48:00:22:5d:02:23:a8:4d:89:e5:42:41:42:55:5f:
                    07:c7:df:26:5f:b1:59:13:d9:41:99:44:62:ba:54:
                    a8:06:76:6f:bb:8e:94:bf:97:93:42:94:d0:80:7a:
                    d9:52:d3:20:64:71:9f:0d:35:17:ec:aa:ea:46:cf:
                    72:5b:70:7d:7f:57:1c:f3:5f:75:71:fe:d0:b6:e5:
                    a3:1a:96:b3:00:4d:64:ed:4e:d8:5b:e6:be:42:67:
                    18:8e:a2:01:b6:b2:25:0d:e2:14:0c:4a:2a:c8:f9:
                    87:17:47:90:78:31:7d:bd:8a:6d:3e:c7:89:68:bf:
                    a4:02:f9:ef:e8:59:3a:4f:38:ea:1e:c9:3d:d3:e9:
                    00:76:4f:5f:ff:f6:0b:fc:9e:ea:6b:06:8b:8a:1c:
                    d5:fd:37:24:93:34:35:b4:c7:05:be:3d:cc:3d:f6:
                    4f:00:80:47:ae:50:f7:17:cc:32:21:3d:3b:4f:c3:
                    3e:d7:d4:89:b0:60:c7:cd:53:c0:1e:bb:ba:9f:65:
                    f6:33:54:00:10:86:a5:15:72:03:c4:19:9a:0b:e5:
                    a6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7B:4E:5C:AD:91:1E:22:C3:35:4F:FD:74:82:39:77:23:8A:1A:BD
            X509v3 Authority Key Identifier:
                keyid:3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3A3DF525158206E0B66C8FD23D86B1780F642002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a3a2f33322d3336203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:72:ac:d8:19:25:b7:5a:bb:42:43:3e:f4:53:95:f3:a6:9b:
         87:01:75:8e:a5:31:2c:45:ea:04:5d:fc:9f:0e:9e:5d:0d:89:
         67:b0:66:03:08:25:cb:09:c0:4b:c4:30:4c:48:7b:71:f4:38:
         2a:b1:79:24:5a:7e:3a:d9:24:f6:bc:e7:14:03:9e:74:02:a6:
         13:e3:f0:69:11:d7:06:4c:e8:76:06:a3:06:80:0e:72:90:84:
         be:ef:6f:7f:4d:a8:cb:fd:f2:17:ed:a3:da:cd:15:71:e4:35:
         26:3f:49:71:0a:92:af:a2:cc:62:3a:b6:a1:72:9e:e9:e4:36:
         93:8a:94:5a:26:1e:dc:ed:d0:d2:ef:15:21:0e:84:c0:ba:e3:
         2e:75:26:8e:90:cd:48:74:68:a8:91:8c:47:45:80:b3:e1:fc:
         a3:89:31:c8:a7:a2:2c:12:44:6e:c4:ac:6c:6b:26:0a:3a:19:
         6b:86:20:e9:24:ad:64:17:97:b9:da:be:52:ae:0a:65:32:a5:
         d6:74:fb:2b:c2:f3:a4:67:29:c6:59:bd:7f:1b:f4:bf:44:85:
         9d:e5:2e:80:96:e2:44:a9:c3:a6:b3:80:25:81:83:cc:a9:06:
         d5:e5:99:12:03:df:56:18:00:da:4f:fe:59:7b:6a:3d:54:d8:
         58:87:c1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 12:04:38 2024 by rpki-client on console-ams.rpki-client.org