Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa
File:                     323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa (raw, json)
Hash identifier:          DHE7VakFPxbQpndMPTE+NwtsT09TvBZLRpG6rh7HJn4=
Subject key identifier:   D2:39:5D:0D:F8:B6:B0:88:FF:4C:49:67:BC:5B:80:A0:70:80:68:4E
Certificate issuer:       /CN=4151665D0EB84AB3092E3766EA6EA61155041F3D
Certificate serial:       66738330EE3AC2A4CF395B4686D81AA88E6EFAF6
Authority key identifier: 41:51:66:5D:0E:B8:4A:B3:09:2E:37:66:EA:6E:A6:11:55:04:1F:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa
Signing time:             Wed 03 Apr 2024 23:04:42 +0000
ROA not before:           Wed 03 Apr 2024 22:59:42 +0000
ROA not after:            Wed 02 Apr 2025 23:04:42 +0000
asID:                     271298
IP address blocks:        2804:7950:8000::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:73:83:30:ee:3a:c2:a4:cf:39:5b:46:86:d8:1a:a8:8e:6e:fa:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4151665D0EB84AB3092E3766EA6EA61155041F3D
        Validity
            Not Before: Apr  3 22:59:42 2024 GMT
            Not After : Apr  2 23:04:42 2025 GMT
        Subject: CN=D2395D0DF8B6B088FF4C4967BC5B80A07080684E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:46:08:b0:9c:74:2d:55:31:7f:ca:6b:a3:
                    f3:c8:19:d6:1e:f1:fd:25:a2:1c:1a:9d:83:f5:62:
                    65:bf:57:dd:e2:49:a7:01:6b:ab:ac:9a:a1:f2:b4:
                    de:17:9a:1b:72:60:c7:27:95:ff:21:60:a7:b3:41:
                    b7:7e:ba:b1:e5:42:d5:8c:78:58:4e:47:09:00:c2:
                    80:8a:c4:fc:1e:4c:6e:a0:93:c9:b6:0b:54:f2:ca:
                    bb:b5:d1:90:ea:7b:86:ca:9c:82:55:65:75:b2:ed:
                    df:c2:e5:17:4b:6f:b6:77:75:85:73:a6:d0:83:21:
                    88:9f:c8:fe:8d:13:99:64:a3:16:a1:90:91:98:cc:
                    f5:b0:4b:32:d8:1d:39:a4:8d:c5:c2:48:42:b7:9d:
                    19:c8:9c:76:8a:48:e9:45:94:03:53:86:ea:cc:51:
                    2d:1c:49:41:30:91:a2:f9:18:f8:1d:48:a8:63:b4:
                    e8:b4:d4:96:2f:a1:37:6b:64:de:9f:39:40:36:60:
                    a3:3a:48:32:86:8f:f0:ae:50:a2:f8:2f:c0:57:03:
                    73:62:56:06:bb:a0:19:8c:72:ae:c9:6c:69:d7:b7:
                    7a:84:02:bd:92:3f:24:a4:02:8f:d6:ce:5b:42:cf:
                    ee:f0:7b:df:5c:8b:c5:f7:4c:fd:1f:36:2c:b2:db:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:5D:0D:F8:B6:B0:88:FF:4C:49:67:BC:5B:80:A0:70:80:68:4E
            X509v3 Authority Key Identifier:
                keyid:41:51:66:5D:0E:B8:4A:B3:09:2E:37:66:EA:6E:A6:11:55:04:1F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:38:4d:a5:0a:48:f4:2f:e7:cf:63:9c:03:af:25:8b:15:04:
         ce:29:3e:b3:00:13:ab:d3:f7:10:04:bc:83:6a:15:db:12:d8:
         e9:1c:38:32:52:e5:ca:61:9d:e2:80:6a:54:f5:72:d1:c6:1c:
         3a:9e:0f:eb:9e:d8:26:35:d6:30:b2:83:22:7e:b5:aa:9d:ff:
         e6:38:df:a6:98:e0:cd:71:8a:0e:8b:91:20:13:3f:5b:2e:e4:
         41:1c:29:06:5f:49:97:ec:c9:19:3d:44:97:8b:b4:98:98:a2:
         42:58:19:dd:c3:9d:52:bf:54:66:ce:72:a5:39:4b:6e:56:1d:
         a5:b0:b3:ea:c2:95:bb:84:eb:6f:42:9c:d0:97:2c:88:27:e8:
         04:96:23:8d:ea:cb:e0:c9:59:98:59:b2:27:ca:a8:09:2a:59:
         d5:3d:1a:3c:7d:ab:68:68:25:48:ef:20:b4:96:1a:4d:d8:c2:
         8c:34:a3:2e:1d:23:19:be:93:99:aa:c0:12:de:a3:7f:90:44:
         6c:0f:1d:fb:48:45:d5:26:36:0c:9a:1c:30:9f:96:61:6a:27:
         c1:87:68:b1:54:e7:1f:bf:37:d1:71:9b:dc:10:09:28:91:23:
         e1:31:3c:73:87:2c:67:c9:ad:a7:37:a9:8d:fc:5a:e3:a6:fc:
         ea:b7:b0:63
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZnODMO46wqTPOVtGhtgaqI5u+vYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1MTY2NUQwRUI4NEFCMzA5MkUzNzY2RUE2RUE2MTE1
NTA0MUYzRDAeFw0yNDA0MDMyMjU5NDJaFw0yNTA0MDIyMzA0NDJaMDMxMTAvBgNV
BAMTKEQyMzk1RDBERjhCNkIwODhGRjRDNDk2N0JDNUI4MEEwNzA4MDY4NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7V0YIsJx0LVUxf8pro/PIGdYe
8f0lohwanYP1YmW/V93iSacBa6usmqHytN4XmhtyYMcnlf8hYKezQbd+urHlQtWM
eFhORwkAwoCKxPweTG6gk8m2C1Tyyru10ZDqe4bKnIJVZXWy7d/C5RdLb7Z3dYVz
ptCDIYifyP6NE5lkoxahkJGYzPWwSzLYHTmkjcXCSEK3nRnInHaKSOlFlANThurM
US0cSUEwkaL5GPgdSKhjtOi01JYvoTdrZN6fOUA2YKM6SDKGj/CuUKL4L8BXA3Ni
Vga7oBmMcq7JbGnXt3qEAr2SPySkAo/WzltCz+7we99ci8X3TP0fNiyy23qpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU0jldDfi2sIj/TElnvFuAoHCAaE4wHwYDVR0j
BBgwFoAUQVFmXQ64SrMJLjdm6m6mEVUEHz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmtTcm1LV1liMXVNU3hOOFVQN016YlVBNUJWZ2dVd1E5QnlQZEhIOGJD
eDYvMS80MTUxNjY1RDBFQjg0QUIzMDkyRTM3NjZFQTZFQTYxMTU1MDQxRjNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNTE2NjVEMEVCODRBQjMw
OTJFMzc2NkVBNkVBNjExNTUwNDFGM0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJrU3JtS1dZYjF1TVN4TjhVUDdNemJVQTVCVmdnVXdROUJ5UGRISDhiQ3g2LzEv
MzIzODMwMzQzYTM3MzkzNTMwM2EzODMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMTMyMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEeVCAMA0GCSqGSIb3DQEBCwUA
A4IBAQBpOE2lCkj0L+fPY5wDryWLFQTOKT6zABOr0/cQBLyDahXbEtjpHDgyUuXK
YZ3igGpU9XLRxhw6ng/rntgmNdYwsoMifrWqnf/mON+mmODNcYoOi5EgEz9bLuRB
HCkGX0mX7MkZPUSXi7SYmKJCWBndw51Sv1RmznKlOUtuVh2lsLPqwpW7hOtvQpzQ
lyyIJ+gEliON6svgyVmYWbInyqgJKlnVPRo8fatoaCVI7yC0lhpN2MKMNKMuHSMZ
vpOZqsAS3qN/kERsDx37SEXVJjYMmhwwn5ZhaifBh2ixVOcfvzfRcZvcEAkokSPh
MTxzhyxnya2nN6mN/Frjpvzqt7Bj
-----END CERTIFICATE-----
Generated at Sun Jun 9 13:39:22 2024 by rpki-client on console-ams.rpki-client.org