Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/323830343a373830343a3a2f33322d3438203d3e20323731323135.roa
File:                     323830343a373830343a3a2f33322d3438203d3e20323731323135.roa (raw, json)
Hash identifier:          6MJGtIZeCLNjIp6uIFbYVnrysOQ/qRv6lel2RfWHC2g=
Subject key identifier:   3B:4A:50:C4:91:09:FD:4E:0F:E0:12:F4:8D:32:CB:4D:02:E0:62:69
Certificate issuer:       /CN=8702862D58ADBCEEF55F0F75AEB7256E85D1C96E
Certificate serial:       1437DCBCBFCEE8F6232BB38CD69F3BBBB950319C
Authority key identifier: 87:02:86:2D:58:AD:BC:EE:F5:5F:0F:75:AE:B7:25:6E:85:D1:C9:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8702862D58ADBCEEF55F0F75AEB7256E85D1C96E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/323830343a373830343a3a2f33322d3438203d3e20323731323135.roa
Signing time:             Tue 06 Aug 2024 02:03:30 +0000
ROA not before:           Tue 06 Aug 2024 01:58:30 +0000
ROA not after:            Tue 05 Aug 2025 02:03:30 +0000
asID:                     271215
IP address blocks:        2804:7804::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:37:dc:bc:bf:ce:e8:f6:23:2b:b3:8c:d6:9f:3b:bb:b9:50:31:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8702862D58ADBCEEF55F0F75AEB7256E85D1C96E
        Validity
            Not Before: Aug  6 01:58:30 2024 GMT
            Not After : Aug  5 02:03:30 2025 GMT
        Subject: CN=3B4A50C49109FD4E0FE012F48D32CB4D02E06269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:99:ae:d2:26:2e:b4:b2:70:c1:32:d5:f1:
                    c8:be:d3:54:cf:22:08:e7:7b:df:cd:0b:a9:82:21:
                    09:19:0b:61:af:1b:1b:e1:30:63:dd:0c:a0:10:70:
                    a1:34:05:27:6f:3a:c2:2f:f0:23:ef:7c:63:aa:1c:
                    bc:87:98:57:02:33:e1:7d:a4:70:39:4e:9e:d3:bd:
                    22:8b:d9:3e:89:03:81:bb:a8:8f:11:91:9d:e2:14:
                    cd:7f:f7:a5:e7:31:7b:a7:3b:bb:34:97:94:b5:ec:
                    f1:4d:90:4c:bb:e3:b8:fe:e4:68:74:eb:7b:d5:a4:
                    b2:e6:90:62:8e:8a:49:16:c6:3d:f7:2d:26:dd:53:
                    1b:8b:9d:fd:e8:30:b5:1b:e6:1b:fe:f8:a3:c8:c6:
                    66:e4:39:d1:e9:8d:95:4b:f2:36:b5:a0:15:aa:79:
                    74:7f:e5:af:a5:8b:aa:84:41:97:7b:cd:6a:3f:50:
                    cd:1c:c3:c4:2e:94:92:25:39:a1:53:f3:bc:d7:4f:
                    d0:a6:47:75:cc:c5:72:34:cd:6c:24:1c:9d:13:ea:
                    4d:94:08:d5:01:e5:45:32:84:d5:c1:10:e4:15:ca:
                    88:de:d3:42:a1:bb:00:ae:58:5d:54:a1:45:91:d6:
                    62:f8:6a:20:6b:bf:b4:c1:05:db:1d:6e:9f:a7:b1:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4A:50:C4:91:09:FD:4E:0F:E0:12:F4:8D:32:CB:4D:02:E0:62:69
            X509v3 Authority Key Identifier:
                keyid:87:02:86:2D:58:AD:BC:EE:F5:5F:0F:75:AE:B7:25:6E:85:D1:C9:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/8702862D58ADBCEEF55F0F75AEB7256E85D1C96E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8702862D58ADBCEEF55F0F75AEB7256E85D1C96E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/323830343a373830343a3a2f33322d3438203d3e20323731323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7804::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:37:f6:8f:d5:47:d0:92:6b:02:cf:f9:ac:c9:3f:39:23:75:
         ca:c2:9a:be:ed:cf:95:98:cf:e2:0e:ad:55:75:1e:87:ca:d5:
         fb:ed:9f:fd:45:ef:3a:d8:bd:59:17:be:e4:69:92:d1:8c:a5:
         77:ee:2a:39:4b:37:57:05:c9:57:37:1f:f5:ab:75:5c:66:5c:
         ce:58:2a:ba:9a:60:ba:1d:ae:e2:0e:6a:4e:b4:3e:b6:b8:46:
         61:4a:63:35:b3:90:66:21:ce:cb:6f:86:a0:aa:68:8d:48:1b:
         6c:24:06:17:fc:5e:83:e3:2b:1a:4f:8e:52:7c:71:68:4d:21:
         d1:7b:f9:9b:b1:4f:2e:35:55:d5:4b:61:52:26:5f:ff:d5:fa:
         88:15:a6:09:a5:3d:c4:72:7b:61:a9:45:d1:5a:fd:02:65:68:
         a2:65:38:fc:f5:da:f6:dc:4a:6b:f5:ef:2c:fd:b1:33:09:e1:
         3e:2d:10:71:5c:1c:76:53:2d:7d:29:76:1e:22:bf:e2:31:02:
         fa:f2:6a:3c:dd:83:f6:84:91:bb:45:24:a2:0e:ad:de:e6:c4:
         39:73:88:e5:bd:0f:11:fa:72:5c:4d:c4:8e:f0:0e:e4:6d:ab:
         1e:c6:71:76:73:26:1f:c2:75:06:60:3e:9a:4c:b7:e5:0f:01:
         72:b0:46:92
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFDfcvL/O6PYjK7OM1p87u7lQMZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwMjg2MkQ1OEFEQkNFRUY1NUYwRjc1QUVCNzI1NkU4
NUQxQzk2RTAeFw0yNDA4MDYwMTU4MzBaFw0yNTA4MDUwMjAzMzBaMDMxMTAvBgNV
BAMTKDNCNEE1MEM0OTEwOUZENEUwRkUwMTJGNDhEMzJDQjREMDJFMDYyNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTZmu0iYutLJwwTLV8ci+01TP
Igjne9/NC6mCIQkZC2GvGxvhMGPdDKAQcKE0BSdvOsIv8CPvfGOqHLyHmFcCM+F9
pHA5Tp7TvSKL2T6JA4G7qI8RkZ3iFM1/96XnMXunO7s0l5S17PFNkEy747j+5Gh0
63vVpLLmkGKOikkWxj33LSbdUxuLnf3oMLUb5hv++KPIxmbkOdHpjZVL8ja1oBWq
eXR/5a+li6qEQZd7zWo/UM0cw8QulJIlOaFT87zXT9CmR3XMxXI0zWwkHJ0T6k2U
CNUB5UUyhNXBEOQVyoje00KhuwCuWF1UoUWR1mL4aiBrv7TBBdsdbp+nsVeDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUO0pQxJEJ/U4P4BL0jTLLTQLgYmkwHwYDVR0j
BBgwFoAUhwKGLVitvO71Xw91rrclboXRyW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0RYNEhMYUYxRHM0cDNqMnZTSGs3MjgzSlp6UDhSUjd1dU02R3pCU2pw
R2cvMC84NzAyODYyRDU4QURCQ0VFRjU1RjBGNzVBRUI3MjU2RTg1RDFDOTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MDI4NjJENThBREJDRUVG
NTVGMEY3NUFFQjcyNTZFODVEMUM5NkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNEWDRITGFGMURzNHAzajJ2U0hrNzI4M0paelA4UlI3dXVNNkd6QlNqcEdnLzAv
MzIzODMwMzQzYTM3MzgzMDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzIzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR4BDANBgkqhkiG9w0BAQsFAAOCAQEAszf2j9VH
0JJrAs/5rMk/OSN1ysKavu3PlZjP4g6tVXUeh8rV++2f/UXvOti9WRe+5GmS0Yyl
d+4qOUs3VwXJVzcf9at1XGZczlgquppguh2u4g5qTrQ+trhGYUpjNbOQZiHOy2+G
oKpojUgbbCQGF/xeg+MrGk+OUnxxaE0h0Xv5m7FPLjVV1UthUiZf/9X6iBWmCaU9
xHJ7YalF0Vr9AmVoomU4/PXa9txKa/XvLP2xMwnhPi0QcVwcdlMtfSl2HiK/4jEC
+vJqPN2D9oSRu0Ukog6t3ubEOXOI5b0PEfpyXE3EjvAO5G2rHsZxdnMmH8J1BmA+
mky35Q8BcrBGkg==
-----END CERTIFICATE-----
Generated at Thu Oct 10 02:31:55 2024 by rpki-client on console-ams.rpki-client.org