Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/0/323830343a363863343a3a2f33322d3334203d3e20323639373134.roa
File:                     323830343a363863343a3a2f33322d3334203d3e20323639373134.roa (raw, json)
Hash identifier:          5GiEkn4MlM2u2Wsu8KaToseBPAaJ5gibMwVcN+kDdow=
Subject key identifier:   FB:A4:C3:BC:2B:63:AC:6E:E2:B4:AE:AF:85:10:92:2C:5C:A4:B0:04
Certificate issuer:       /CN=7A505803B24BA3E165A39A8F91D2FB85B3F41874
Certificate serial:       6D6166176927F14FFB576EDC661DE949643D3D99
Authority key identifier: 7A:50:58:03:B2:4B:A3:E1:65:A3:9A:8F:91:D2:FB:85:B3:F4:18:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A505803B24BA3E165A39A8F91D2FB85B3F41874.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/0/323830343a363863343a3a2f33322d3334203d3e20323639373134.roa
Signing time:             Tue 09 Jan 2024 17:58:53 +0000
ROA not before:           Tue 09 Jan 2024 17:53:53 +0000
ROA not after:            Tue 07 Jan 2025 17:58:53 +0000
asID:                     269714
IP address blocks:        2804:68c4::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:61:66:17:69:27:f1:4f:fb:57:6e:dc:66:1d:e9:49:64:3d:3d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A505803B24BA3E165A39A8F91D2FB85B3F41874
        Validity
            Not Before: Jan  9 17:53:53 2024 GMT
            Not After : Jan  7 17:58:53 2025 GMT
        Subject: CN=FBA4C3BC2B63AC6EE2B4AEAF8510922C5CA4B004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:20:51:1f:04:65:8f:4e:7d:2e:8f:e7:ee:c0:
                    e5:b7:c2:25:f9:e8:b0:2a:f5:86:a1:ab:28:8d:60:
                    54:9c:8f:93:4a:60:70:87:fe:34:2b:a9:80:ce:0a:
                    9f:8d:31:57:de:5b:a4:26:e0:db:6b:46:dd:59:24:
                    b5:c2:03:94:b3:45:16:45:0c:52:c2:5c:c9:09:f7:
                    ba:7e:bc:48:1a:03:0d:f7:c7:23:b7:99:7a:14:4c:
                    69:8e:52:d4:dc:31:f6:6d:a7:49:2f:60:ed:3c:cd:
                    5a:b1:a8:4b:f9:01:a8:a1:a1:ae:e8:7d:d7:8d:7b:
                    2a:e9:f8:d8:55:42:70:7e:66:01:6f:52:be:8f:76:
                    f5:cb:81:4e:b0:e8:75:9d:35:a6:2e:e0:dd:72:01:
                    1c:9b:d9:1e:a7:bf:80:af:a8:a2:5c:03:cf:ae:29:
                    7e:7f:65:7c:20:7a:1b:bb:d2:d2:81:6c:24:26:d0:
                    13:4c:49:04:76:19:f3:47:63:5a:35:94:bf:03:2e:
                    e7:b9:1b:c9:86:f1:9b:3b:26:ab:b4:6d:86:c0:b5:
                    9e:59:38:eb:ba:b8:b1:1e:bb:b4:94:b9:55:28:dc:
                    56:b4:67:3c:34:8a:97:0e:3f:31:2f:00:3b:be:d4:
                    2b:aa:6f:57:f2:06:2a:ab:9d:5b:fb:57:5e:ae:a4:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A4:C3:BC:2B:63:AC:6E:E2:B4:AE:AF:85:10:92:2C:5C:A4:B0:04
            X509v3 Authority Key Identifier:
                keyid:7A:50:58:03:B2:4B:A3:E1:65:A3:9A:8F:91:D2:FB:85:B3:F4:18:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/0/7A505803B24BA3E165A39A8F91D2FB85B3F41874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A505803B24BA3E165A39A8F91D2FB85B3F41874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/0/323830343a363863343a3a2f33322d3334203d3e20323639373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         d4:b3:42:b3:5a:aa:b2:09:73:73:38:e3:c4:19:1e:87:21:60:
         5e:db:60:ff:df:92:0e:6c:64:ed:40:a3:bf:65:9b:24:39:46:
         f3:75:2c:10:a5:93:de:ba:c8:94:9d:93:c6:5b:91:fe:cf:15:
         10:ec:47:46:53:2c:7a:02:4a:72:c5:4b:93:1a:9b:64:01:e0:
         12:51:e1:cb:f5:40:cc:89:c8:02:14:35:ed:97:09:4d:d9:ec:
         5b:62:99:60:96:49:18:42:ed:4e:97:ac:20:bc:00:56:ff:09:
         23:f0:57:4c:3a:b2:6b:76:6d:a3:97:65:fd:4b:0f:d8:6e:ea:
         56:7a:71:b0:5a:29:e7:9d:03:56:df:b4:70:5b:07:16:b5:b9:
         7d:30:7e:97:7f:be:fb:b8:29:59:21:f4:62:c2:93:f9:f1:9f:
         91:de:40:aa:9d:85:52:cb:24:c1:27:a0:60:ed:aa:be:3d:4d:
         97:f6:d6:69:d0:46:a5:52:79:c2:44:9a:9f:fa:45:81:03:32:
         4e:e2:f0:a3:c1:10:eb:62:43:44:52:65:e3:3e:1c:07:26:6b:
         7d:e9:92:19:3d:c6:3a:fc:74:1d:51:eb:1e:1e:10:87:b7:b0:
         4e:07:1a:dc:54:52:95:77:33:56:88:16:08:b1:91:5a:a5:66:
         79:84:0e:6a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbWFmF2kn8U/7V27cZh3pSWQ9PZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E1MDU4MDNCMjRCQTNFMTY1QTM5QThGOTFEMkZCODVC
M0Y0MTg3NDAeFw0yNDAxMDkxNzUzNTNaFw0yNTAxMDcxNzU4NTNaMDMxMTAvBgNV
BAMTKEZCQTRDM0JDMkI2M0FDNkVFMkI0QUVBRjg1MTA5MjJDNUNBNEIwMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVIFEfBGWPTn0uj+fuwOW3wiX5
6LAq9YahqyiNYFScj5NKYHCH/jQrqYDOCp+NMVfeW6Qm4NtrRt1ZJLXCA5SzRRZF
DFLCXMkJ97p+vEgaAw33xyO3mXoUTGmOUtTcMfZtp0kvYO08zVqxqEv5Aaihoa7o
fdeNeyrp+NhVQnB+ZgFvUr6PdvXLgU6w6HWdNaYu4N1yARyb2R6nv4CvqKJcA8+u
KX5/ZXwgehu70tKBbCQm0BNMSQR2GfNHY1o1lL8DLue5G8mG8Zs7Jqu0bYbAtZ5Z
OOu6uLEeu7SUuVUo3Fa0Zzw0ipcOPzEvADu+1Cuqb1fyBiqrnVv7V16upCOxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+6TDvCtjrG7itK6vhRCSLFyksAQwHwYDVR0j
BBgwFoAUelBYA7JLo+Flo5qPkdL7hbP0GHQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHk0S3VSN2VWajVncjUxZmdQbVpMUXFKb1pqY0ViSmhxWnA1ZG1QVjlt
blYvMC83QTUwNTgwM0IyNEJBM0UxNjVBMzlBOEY5MUQyRkI4NUIzRjQxODc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBNTA1ODAzQjI0QkEzRTE2
NUEzOUE4RjkxRDJGQjg1QjNGNDE4NzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h5NEt1UjdlVmo1Z3I1MWZnUG1aTFFxSm9aamNFYkpocVpwNWRtUFY5bW5WLzAv
MzIzODMwMzQzYTM2Mzg2MzM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM5
MzczMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARoxDANBgkqhkiG9w0BAQsFAAOCAQEA1LNCs1qq
sglzczjjxBkehyFgXttg/9+SDmxk7UCjv2WbJDlG83UsEKWT3rrIlJ2TxluR/s8V
EOxHRlMsegJKcsVLkxqbZAHgElHhy/VAzInIAhQ17ZcJTdnsW2KZYJZJGELtTpes
ILwAVv8JI/BXTDqya3Zto5dl/UsP2G7qVnpxsFop550DVt+0cFsHFrW5fTB+l3++
+7gpWSH0YsKT+fGfkd5Aqp2FUsskwSegYO2qvj1Nl/bWadBGpVJ5wkSan/pFgQMy
TuLwo8EQ62JDRFJl4z4cByZrfemSGT3GOvx0HVHrHh4Qh7ewTgca3FRSlXczVogW
CLGRWqVmeYQOag==
-----END CERTIFICATE-----
Generated at Sun Feb 11 12:07:02 2024 by rpki-client on console-ams.rpki-client.org