Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/323830343a333239303a633030303a3a2f33342d3334203d3e20323635303835.roa
File:                     323830343a333239303a633030303a3a2f33342d3334203d3e20323635303835.roa (raw, json)
Hash identifier:          y+9VgaIoqvRyD/q6J385UstfzQcDUK4m1vJVlWh4FoQ=
Subject key identifier:   35:C6:14:55:06:B9:BC:E2:33:46:58:4F:B2:06:F1:49:95:63:0A:2D
Certificate issuer:       /CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Certificate serial:       1EED5BBD8DE17C839D134ABB54630582E7D47FDE
Authority key identifier: 8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/323830343a333239303a633030303a3a2f33342d3334203d3e20323635303835.roa
Signing time:             Fri 05 Apr 2024 00:27:24 +0000
ROA not before:           Fri 05 Apr 2024 00:22:24 +0000
ROA not after:            Fri 04 Apr 2025 00:27:24 +0000
asID:                     265085
IP address blocks:        2804:3290:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ed:5b:bd:8d:e1:7c:83:9d:13:4a:bb:54:63:05:82:e7:d4:7f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
        Validity
            Not Before: Apr  5 00:22:24 2024 GMT
            Not After : Apr  4 00:27:24 2025 GMT
        Subject: CN=35C6145506B9BCE23346584FB206F14995630A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:bb:2f:6e:31:80:0e:04:91:de:d0:3c:f5:
                    04:31:87:95:4b:bb:df:e8:d1:10:04:cf:5b:d4:5f:
                    6a:e9:18:d1:ac:a2:ac:e0:38:5b:c6:bb:fa:80:49:
                    4b:be:0f:7d:96:ce:8a:4e:34:0d:16:36:1b:3b:1c:
                    e7:19:65:4a:87:00:77:67:90:9f:5c:3b:66:13:83:
                    eb:a4:22:2b:1e:1d:c6:86:08:63:57:be:01:d2:8b:
                    e8:a3:53:03:9c:ce:f9:a4:f4:a7:19:24:cd:cd:99:
                    01:24:15:e9:5e:50:d6:0b:f6:7e:1f:90:9e:17:af:
                    4d:29:a7:76:a7:4f:2a:40:8a:48:2f:bb:72:ff:67:
                    ed:28:eb:fe:38:bc:cb:17:31:62:de:d9:9f:c8:01:
                    fa:95:3c:d8:82:32:d9:6f:95:20:55:05:01:e3:99:
                    ef:62:eb:0e:90:50:66:7b:7e:14:9f:ab:72:00:32:
                    85:5b:ab:83:b3:05:19:01:78:33:5e:c8:80:59:b9:
                    90:5e:16:a1:03:8c:30:9d:ad:1d:ac:2f:c9:2c:f9:
                    68:44:be:a9:03:89:7d:fb:cd:2b:ba:a6:0c:e4:a5:
                    e7:41:5e:41:98:c0:0f:6a:3f:04:9d:c0:32:f5:54:
                    b0:ab:a3:b8:31:9b:37:dc:9f:8d:fe:b1:b2:2a:c4:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C6:14:55:06:B9:BC:E2:33:46:58:4F:B2:06:F1:49:95:63:0A:2D
            X509v3 Authority Key Identifier:
                keyid:8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/323830343a333239303a633030303a3a2f33342d3334203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3290:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9a:4b:f7:66:6b:db:e8:38:8e:9a:94:cc:ff:e4:eb:88:7a:50:
         41:7f:52:93:c9:51:46:7f:a5:89:9d:23:8d:8d:7a:32:a5:c9:
         6c:ba:7b:b0:df:9f:6f:39:3a:11:73:2b:29:fd:5d:8a:1c:cf:
         48:80:5f:99:fb:f5:b6:28:3e:26:64:c4:a5:00:dc:51:78:bf:
         15:f0:ef:7f:73:a5:ad:f2:46:cb:4d:56:6a:6f:b5:27:ee:76:
         f2:ce:41:4e:63:7a:d4:40:b9:05:4e:31:83:1b:44:b5:5e:bd:
         06:87:56:61:d7:b1:3b:83:57:d9:ce:63:18:3c:10:7e:b1:f0:
         95:d7:0b:cf:a2:01:2e:a6:f1:0f:7a:b0:75:1b:fb:6f:f5:57:
         14:40:22:24:b8:60:1f:53:af:af:35:f4:ce:e4:76:43:c4:da:
         a5:64:c8:94:dc:f2:c7:96:ec:51:fb:06:eb:c8:ac:22:2a:3d:
         3a:bb:f4:b3:b9:c1:e2:fd:5b:c6:73:1a:a8:a7:0b:eb:1f:db:
         10:22:36:6b:32:63:23:ee:88:c0:d9:d1:9c:46:bc:fb:47:70:
         68:2d:c3:02:6d:62:ab:3f:69:9f:d7:4b:d1:21:38:55:20:20:
         ec:f3:7b:c3:17:5a:e0:ab:94:82:cc:86:6f:27:f4:7a:4c:48:
         7e:1e:9e:11
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHu1bvY3hfIOdE0q7VGMFgufUf94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY2ODk3OEFGQkM5NzA0NDE3NUY3NjQ4Q0IzM0EyREIz
RTE3QTlEQjAeFw0yNDA0MDUwMDIyMjRaFw0yNTA0MDQwMDI3MjRaMDMxMTAvBgNV
BAMTKDM1QzYxNDU1MDZCOUJDRTIzMzQ2NTg0RkIyMDZGMTQ5OTU2MzBBMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7bsvbjGADgSR3tA89QQxh5VL
u9/o0RAEz1vUX2rpGNGsoqzgOFvGu/qASUu+D32WzopONA0WNhs7HOcZZUqHAHdn
kJ9cO2YTg+ukIiseHcaGCGNXvgHSi+ijUwOczvmk9KcZJM3NmQEkFeleUNYL9n4f
kJ4Xr00pp3anTypAikgvu3L/Z+0o6/44vMsXMWLe2Z/IAfqVPNiCMtlvlSBVBQHj
me9i6w6QUGZ7fhSfq3IAMoVbq4OzBRkBeDNeyIBZuZBeFqEDjDCdrR2sL8ks+WhE
vqkDiX37zSu6pgzkpedBXkGYwA9qPwSdwDL1VLCro7gxmzfcn43+sbIqxKXPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUNcYUVQa5vOIzRlhPsgbxSZVjCi0wHwYDVR0j
BBgwFoAUj2iXivvJcEQXX3ZIyzOi2z4XqdswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pXc1hHcUFwWjJkQTRGWE1RTU1VTlNkQ1p2OUpLbUdmQ0pjSFh0ZXpr
QlIvMS84RjY4OTc4QUZCQzk3MDQ0MTc1Rjc2NDhDQjMzQTJEQjNFMTdBOURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGNjg5NzhBRkJDOTcwNDQx
NzVGNzY0OENCMzNBMkRCM0UxN0E5REIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNKV3NYR3FBcFoyZEE0RlhNUU1NVU5TZENadjlKS21HZkNKY0hYdGV6a0JSLzEv
MzIzODMwMzQzYTMzMzIzOTMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTMwMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEMpDAMA0GCSqGSIb3DQEBCwUA
A4IBAQCaS/dma9voOI6alMz/5OuIelBBf1KTyVFGf6WJnSONjXoypclsunuw359v
OToRcysp/V2KHM9IgF+Z+/W2KD4mZMSlANxReL8V8O9/c6Wt8kbLTVZqb7Un7nby
zkFOY3rUQLkFTjGDG0S1Xr0Gh1Zh17E7g1fZzmMYPBB+sfCV1wvPogEupvEPerB1
G/tv9VcUQCIkuGAfU6+vNfTO5HZDxNqlZMiU3PLHluxR+wbryKwiKj06u/SzucHi
/VvGcxqopwvrH9sQIjZrMmMj7ojA2dGcRrz7R3BoLcMCbWKrP2mf10vRIThVICDs
83vDF1rgq5SCzIZvJ/R6TEh+Hp4R
-----END CERTIFICATE-----
Generated at Sat Jul 27 07:54:51 2024 by rpki-client on console-ams.rpki-client.org