Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a383030303a3a2f33342d3334203d3e20323632333132.roa
File:                     323830343a333730303a383030303a3a2f33342d3334203d3e20323632333132.roa (raw, json)
Hash identifier:          BNbblN4W2rTU0RSjLENZvLI4vSZlQpA3WNfnz14R0Jw=
Subject key identifier:   24:0D:A0:64:BB:8D:C5:75:2B:43:52:E6:2C:5C:24:ED:5B:FB:6C:3A
Certificate issuer:       /CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
Certificate serial:       050AAC425EDB4E9E4913B780C13F43FC7419B3C4
Authority key identifier: 2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a383030303a3a2f33342d3334203d3e20323632333132.roa
Signing time:             Fri 16 Aug 2024 16:26:21 +0000
ROA not before:           Fri 16 Aug 2024 16:21:21 +0000
ROA not after:            Fri 15 Aug 2025 16:26:21 +0000
asID:                     262312
IP address blocks:        2804:3700:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0a:ac:42:5e:db:4e:9e:49:13:b7:80:c1:3f:43:fc:74:19:b3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
        Validity
            Not Before: Aug 16 16:21:21 2024 GMT
            Not After : Aug 15 16:26:21 2025 GMT
        Subject: CN=240DA064BB8DC5752B4352E62C5C24ED5BFB6C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:34:a1:d2:d4:1e:3e:a4:ee:51:ac:6f:cb:
                    10:25:85:8d:8e:c8:2f:2f:00:f4:84:bd:64:c3:15:
                    a0:c8:c5:b5:17:00:58:ca:65:b7:93:dc:97:b6:17:
                    80:a7:aa:e8:e2:26:e0:ef:38:65:8c:04:a8:cc:c1:
                    a7:67:be:f6:ae:d0:e5:d2:c4:4a:e6:6a:8d:95:c0:
                    96:e7:ea:c2:e8:d6:86:56:f3:0b:8c:54:df:5c:af:
                    65:3e:37:ad:d3:bb:ac:d9:e1:9f:a7:55:34:91:a4:
                    b4:10:16:8b:62:3a:e8:ac:71:55:4e:d0:75:9c:d6:
                    3e:c2:a1:63:de:f6:0c:d3:61:f1:04:c1:60:3a:23:
                    e5:fd:6f:5c:e5:d5:2c:94:7b:6b:a4:ed:a4:cb:22:
                    c1:e1:e7:f7:6a:97:4f:78:5d:d2:0b:47:e6:0f:c3:
                    f4:e3:82:bb:c1:34:c4:0e:d4:09:23:09:9e:7a:0d:
                    d0:97:dc:73:80:b5:5c:af:1c:b1:c6:e9:4f:de:68:
                    5e:fb:71:28:3b:c2:6c:63:ad:f3:4e:69:ed:b6:31:
                    57:82:99:8d:33:bc:5c:52:b5:ab:7f:d6:a4:75:02:
                    27:4e:28:96:c8:15:7b:6e:61:f5:0e:02:28:62:53:
                    5b:49:34:43:4a:1f:09:57:68:a0:7a:c8:8a:87:de:
                    49:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0D:A0:64:BB:8D:C5:75:2B:43:52:E6:2C:5C:24:ED:5B:FB:6C:3A
            X509v3 Authority Key Identifier:
                keyid:2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/2D960C563AE2AE7815A5AFF54826A703C1669FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a383030303a3a2f33342d3334203d3e20323632333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3700:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         41:97:46:c5:a0:d3:70:33:5c:46:fb:70:bb:77:1e:8a:44:bb:
         8f:4c:82:ab:21:86:a8:61:a4:18:68:11:fc:9d:f1:db:9f:78:
         a9:11:27:bb:34:36:f5:4e:11:e1:7e:1a:d5:23:b2:5d:76:6a:
         ff:12:40:41:a4:f4:4f:8b:95:1c:c7:1e:a9:c9:d6:20:4b:6f:
         e8:c7:13:1e:36:34:97:3c:f7:4f:19:ee:e9:b2:47:90:14:19:
         6e:fb:41:d0:74:a4:1f:e4:a5:06:59:5a:7f:d9:cf:06:35:67:
         d9:b7:0d:eb:c4:70:bd:5e:00:6a:16:a3:52:45:7a:9f:67:71:
         89:56:4c:c0:91:2c:c5:4d:86:b1:ed:5e:89:ec:94:d7:09:b1:
         ea:55:2c:ce:3c:ac:e7:d8:25:1e:4e:ec:87:48:9f:b3:68:15:
         ba:74:1a:dd:dc:c4:39:9a:ac:cd:66:1b:5f:40:9f:2e:9a:c9:
         9e:25:4b:70:b8:3b:d5:3f:4e:f3:02:57:72:26:2b:31:2c:48:
         9b:19:9f:4d:2d:d0:7e:62:fd:20:d4:cb:34:d4:e0:9a:35:7a:
         c7:fc:54:84:99:21:37:f1:ad:4a:94:24:1a:ae:f8:10:32:81:
         8a:46:a9:f0:93:4c:1d:f4:a1:ce:25:cb:bf:ee:f4:8c:29:d2:
         ec:aa:e8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 09:29:22 2024 by rpki-client on console-fra.rpki-client.org