Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a643030303a3a2f33362d3336203d3e20323633363431.roa
File:                     323830343a313039343a643030303a3a2f33362d3336203d3e20323633363431.roa (raw, json)
Hash identifier:          7/iccFGXGgIEBTFV7jAvVN/yOFOcgRrR8SfHkckaJRE=
Subject key identifier:   F7:5A:E4:50:53:ED:FB:D9:28:AD:AA:66:88:4D:0E:1C:7B:C5:19:8A
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       7B5E0A35A51EC50EBEA158101B7E63834FEF0A71
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a643030303a3a2f33362d3336203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:34 +0000
ROA not before:           Tue 05 Dec 2023 15:39:34 +0000
ROA not after:            Tue 03 Dec 2024 15:44:34 +0000
asID:                     263641
IP address blocks:        2804:1094:d000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5e:0a:35:a5:1e:c5:0e:be:a1:58:10:1b:7e:63:83:4f:ef:0a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:34 2023 GMT
            Not After : Dec  3 15:44:34 2024 GMT
        Subject: CN=F75AE45053EDFBD928ADAA66884D0E1C7BC5198A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:70:57:19:d5:f7:45:9d:86:05:ac:95:f3:
                    ad:c9:76:c4:c6:77:49:e2:39:8a:2c:ac:65:43:49:
                    a9:7a:89:ae:c1:a6:31:62:9f:86:f1:f6:49:6b:d8:
                    20:3d:65:2b:0b:fc:20:e4:26:75:40:9a:71:5d:99:
                    b7:0d:ea:d6:57:01:9b:2e:8a:32:48:3a:90:db:bf:
                    fd:14:87:b0:38:ae:ae:61:7d:45:71:84:ce:91:19:
                    0a:3c:70:19:e4:be:15:21:07:1d:c4:74:07:cb:03:
                    fb:f2:52:e7:f0:fa:1d:2c:04:bc:89:a4:4c:38:d7:
                    6d:e8:02:21:bd:4b:4b:e5:74:85:f6:bc:9b:2b:9a:
                    c4:f3:7d:61:49:bc:f4:9b:63:62:7d:a8:05:10:56:
                    0e:c7:7a:9e:37:f3:dc:f3:91:a9:0f:f0:0d:fb:fd:
                    9d:dc:6b:2d:79:29:55:3d:76:dd:c2:90:81:32:99:
                    0c:b0:11:25:8d:55:eb:a2:3a:fb:e1:9c:a3:1a:f7:
                    a6:8b:70:5b:e9:07:b6:66:74:c0:a5:00:31:3f:bf:
                    a3:ce:d7:03:2d:25:47:ce:b6:6a:e5:60:8d:a6:62:
                    d3:7f:d3:cf:05:87:e5:88:51:0f:6a:c7:d7:96:b7:
                    4c:7e:28:8c:38:5f:03:07:69:65:ab:cc:17:54:ce:
                    9d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5A:E4:50:53:ED:FB:D9:28:AD:AA:66:88:4D:0E:1C:7B:C5:19:8A
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a643030303a3a2f33362d3336203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c1:71:a3:98:7b:1d:a4:f7:06:78:ea:8a:e4:74:41:8d:ac:77:
         77:cb:91:d5:04:9d:8a:9b:3d:42:2a:27:8e:3b:e5:97:de:dd:
         1f:f1:be:c9:bf:48:4e:50:8f:d0:a0:ad:5d:24:b3:13:c0:0e:
         98:22:6d:c6:81:dc:c2:83:aa:1f:56:b6:38:01:c3:69:76:1c:
         e3:90:28:73:70:57:9e:d0:ac:d8:b5:18:8d:58:18:d8:fe:85:
         57:6b:34:70:9e:75:c0:fc:50:68:96:93:95:8e:66:49:24:5b:
         bc:70:a4:08:d1:1d:14:76:22:49:35:ee:0f:12:24:3c:37:93:
         8d:7b:62:5c:5a:f3:db:1f:12:1f:c9:9d:3e:51:1b:c3:24:b7:
         c4:f3:2d:38:92:f8:ef:61:62:cc:0c:d7:d7:8e:2e:6e:69:b3:
         52:ac:cb:f8:10:f7:9f:20:2f:62:be:53:d8:8d:58:ef:97:23:
         ce:35:60:83:29:be:03:67:c6:36:d3:11:c5:8b:b6:2e:89:29:
         f2:58:4c:80:af:39:b5:9b:9e:ec:df:83:be:ae:ee:c7:14:b8:
         04:3c:6e:56:87:19:4a:cc:88:16:06:5c:3f:8b:61:89:cf:96:
         c3:05:49:23:16:4e:e9:db:ed:14:09:37:7e:7f:a8:97:a4:d2:
         09:0e:56:7d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUe14KNaUexQ6+oVgQG35jg0/vCnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFFRjAzMzQxQTZFQzVBNzhBQThCMkU5MkQ5QjlBRDA1
OEMzQzMyODAeFw0yMzEyMDUxNTM5MzRaFw0yNDEyMDMxNTQ0MzRaMDMxMTAvBgNV
BAMTKEY3NUFFNDUwNTNFREZCRDkyOEFEQUE2Njg4NEQwRTFDN0JDNTE5OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2XBXGdX3RZ2GBayV863JdsTG
d0niOYosrGVDSal6ia7BpjFin4bx9klr2CA9ZSsL/CDkJnVAmnFdmbcN6tZXAZsu
ijJIOpDbv/0Uh7A4rq5hfUVxhM6RGQo8cBnkvhUhBx3EdAfLA/vyUufw+h0sBLyJ
pEw4123oAiG9S0vldIX2vJsrmsTzfWFJvPSbY2J9qAUQVg7Hep4389zzkakP8A37
/Z3cay15KVU9dt3CkIEymQywESWNVeuiOvvhnKMa96aLcFvpB7ZmdMClADE/v6PO
1wMtJUfOtmrlYI2mYtN/088Fh+WIUQ9qx9eWt0x+KIw4XwMHaWWrzBdUzp05AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU91rkUFPt+9korapmiE0OHHvFGYowHwYDVR0j
BBgwFoAUiu8DNBpuxaeKqLLpLZua0FjDwygwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm
a2EvMC84QUVGMDMzNDFBNkVDNUE3OEFBOEIyRTkyRDlCOUFEMDU4QzNDMzI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBRUYwMzM0MUE2RUM1QTc4
QUE4QjJFOTJEOUI5QUQwNThDM0MzMjguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv
MzIzODMwMzQzYTMxMzAzOTM0M2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEJTQMA0GCSqGSIb3DQEBCwUA
A4IBAQDBcaOYex2k9wZ46orkdEGNrHd3y5HVBJ2Kmz1CKieOO+WX3t0f8b7Jv0hO
UI/QoK1dJLMTwA6YIm3GgdzCg6ofVrY4AcNpdhzjkChzcFee0KzYtRiNWBjY/oVX
azRwnnXA/FBolpOVjmZJJFu8cKQI0R0UdiJJNe4PEiQ8N5ONe2JcWvPbHxIfyZ0+
URvDJLfE8y04kvjvYWLMDNfXji5uabNSrMv4EPefIC9ivlPYjVjvlyPONWCDKb4D
Z8Y20xHFi7YuiSnyWEyArzm1m57s34O+ru7HFLgEPG5WhxlKzIgWBlw/i2GJz5bD
BUkjFk7p2+0UCTd+f6iXpNIJDlZ9
-----END CERTIFICATE-----
Generated at Fri Jan 19 01:49:37 2024 by rpki-client on console-ams.rpki-client.org