Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/323830343a333730303a3a2f33322d3338203d3e20323632333132.roa
File:                     323830343a333730303a3a2f33322d3338203d3e20323632333132.roa (raw, json)
Hash identifier:          Z3Ga/+4VSpfdaZojElgKXEBQ71gMr0SmSDZ+iVXeSC8=
Subject key identifier:   28:C2:58:F7:DD:76:B9:B5:F4:87:74:9E:4D:3C:B2:75:92:02:08:ED
Certificate issuer:       /CN=F2CD5FED741CA6B950C251A988CDCE78F96EDBAB
Certificate serial:       33FE83542F0A4E64839C65881E6B0FDF649BB89C
Authority key identifier: F2:CD:5F:ED:74:1C:A6:B9:50:C2:51:A9:88:CD:CE:78:F9:6E:DB:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/323830343a333730303a3a2f33322d3338203d3e20323632333132.roa
Signing time:             Thu 04 Apr 2024 10:29:37 +0000
ROA not before:           Thu 04 Apr 2024 10:24:37 +0000
ROA not after:            Thu 03 Apr 2025 10:29:37 +0000
asID:                     262312
IP address blocks:        2804:3700::/32 maxlen: 38

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fe:83:54:2f:0a:4e:64:83:9c:65:88:1e:6b:0f:df:64:9b:b8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CD5FED741CA6B950C251A988CDCE78F96EDBAB
        Validity
            Not Before: Apr  4 10:24:37 2024 GMT
            Not After : Apr  3 10:29:37 2025 GMT
        Subject: CN=28C258F7DD76B9B5F487749E4D3CB275920208ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:76:43:92:ae:18:45:bd:59:62:05:fc:ae:
                    6e:3c:76:29:ad:19:fd:35:e9:ac:3f:e3:be:7e:7f:
                    19:ee:25:7a:e7:1f:2d:24:39:c0:81:54:2f:28:bf:
                    a0:4b:32:7c:93:21:18:f0:dc:c3:77:76:eb:5c:ae:
                    af:0f:6f:36:40:1f:b8:e6:59:16:24:ab:87:06:24:
                    f9:77:be:00:ee:d4:dd:b0:99:eb:59:c0:4c:fb:14:
                    e3:29:cc:8c:dd:0f:9a:1d:1b:86:fb:11:65:94:21:
                    d3:27:63:f1:6b:eb:fe:65:35:53:b9:c1:4d:43:c2:
                    39:a0:5c:9b:e5:43:e2:88:bf:1c:8f:e9:e2:6f:5d:
                    eb:6a:2d:71:00:40:19:90:40:bb:04:c9:46:41:f8:
                    50:16:73:87:e5:9b:61:58:36:5a:2d:ca:4e:97:63:
                    bf:f9:a9:c4:e7:17:75:30:2a:d0:20:e0:59:32:fb:
                    d5:e1:f3:8a:c1:5c:b9:80:c6:cd:fc:17:49:dd:56:
                    6b:b1:28:b6:99:08:ef:03:f2:a0:57:04:3a:f3:a0:
                    6a:07:20:dc:39:5b:10:8b:1a:96:3f:db:39:81:34:
                    7f:d9:24:c2:f6:0e:93:d8:18:e4:db:60:89:44:2c:
                    fe:6f:03:c8:66:1d:9b:0b:c9:93:5b:a3:e3:09:2c:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C2:58:F7:DD:76:B9:B5:F4:87:74:9E:4D:3C:B2:75:92:02:08:ED
            X509v3 Authority Key Identifier:
                keyid:F2:CD:5F:ED:74:1C:A6:B9:50:C2:51:A9:88:CD:CE:78:F9:6E:DB:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/323830343a333730303a3a2f33322d3338203d3e20323632333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3700::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:04:8d:03:31:b8:19:57:7a:84:0a:28:6f:4f:f5:78:b9:49:
         d6:df:f5:c4:72:a1:44:69:32:39:84:df:59:0c:ff:04:a5:b4:
         ff:50:89:08:61:cc:97:35:92:d4:b5:f8:37:89:f2:66:27:cc:
         84:a2:32:f5:ad:15:88:aa:20:e2:e1:0d:6d:3b:18:83:a6:ad:
         37:e2:a8:04:27:96:53:b0:ea:68:df:fb:50:e5:ae:05:2e:99:
         9f:6e:3b:1d:a8:3e:78:ec:6c:6e:05:25:18:2d:81:39:e9:e1:
         cb:cc:94:a2:da:28:58:5a:2c:5b:4f:6d:f4:5d:d3:90:88:34:
         ff:4e:29:47:c0:73:09:14:2e:88:98:fd:08:dd:0b:59:65:41:
         bc:51:f4:c3:98:59:bd:5b:4c:09:da:df:fa:22:4b:84:f4:dc:
         f6:99:98:c6:32:52:33:07:94:e0:77:1f:d0:96:fe:d7:f6:99:
         e1:f1:2b:58:3d:e5:50:aa:9d:20:95:01:71:a4:7d:77:00:d4:
         29:9a:8e:a0:e6:50:54:dc:df:2a:38:22:0b:c7:ba:e5:7c:3e:
         07:30:5c:2d:0b:89:66:e6:67:3f:06:e8:d6:b4:0d:cd:97:9a:
         33:49:f1:f3:85:09:08:55:36:9d:3a:a6:15:13:01:b0:bc:c8:
         7f:f2:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:16:44 2024 by rpki-client on console-ams.rpki-client.org