Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/323830343a316230343a3a2f33322d3438203d3e203533303438.roa
File:                     323830343a316230343a3a2f33322d3438203d3e203533303438.roa (raw, json)
Hash identifier:          BRIX8CHGyFlfH9JtWXjqQIN3WWPiPdHeuKYX+FUzxak=
Subject key identifier:   51:48:BE:70:27:30:A2:8D:4B:FF:0C:8B:B3:4A:7E:C3:D9:9E:F1:1B
Certificate issuer:       /CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5
Certificate serial:       41BDB2D88D52041C050DC07897A3C4E76E31737E
Authority key identifier: DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/323830343a316230343a3a2f33322d3438203d3e203533303438.roa
Signing time:             Thu 04 Apr 2024 17:31:50 +0000
ROA not before:           Thu 04 Apr 2024 17:26:50 +0000
ROA not after:            Thu 03 Apr 2025 17:31:50 +0000
asID:                     53048
IP address blocks:        2804:1b04::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bd:b2:d8:8d:52:04:1c:05:0d:c0:78:97:a3:c4:e7:6e:31:73:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5
        Validity
            Not Before: Apr  4 17:26:50 2024 GMT
            Not After : Apr  3 17:31:50 2025 GMT
        Subject: CN=5148BE702730A28D4BFF0C8BB34A7EC3D99EF11B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:20:25:06:34:e1:b4:71:7d:10:c1:24:ce:
                    5a:97:11:29:9d:8b:9f:ab:8b:4d:af:48:a5:43:53:
                    54:8e:24:00:aa:03:a4:22:c3:d7:00:77:c2:5a:2f:
                    0f:dc:36:fc:80:9e:ca:bd:99:2a:d3:9f:6a:ec:7c:
                    ef:cf:16:3e:97:db:ca:de:eb:a2:83:cb:d4:99:d6:
                    0e:5a:3f:8e:d8:e5:38:32:b6:38:bd:93:6f:59:fa:
                    af:e6:dd:92:b9:d2:f8:91:e9:1f:06:61:6e:9a:0f:
                    df:ff:85:b3:7e:89:b2:6b:d4:24:e0:31:65:1f:02:
                    f4:c0:2c:43:66:9f:48:4e:36:bb:8c:7b:34:5a:c8:
                    c5:e6:89:28:b7:83:3f:3e:2f:62:39:b2:d7:9a:55:
                    1e:f0:cf:ee:6c:25:37:cd:8a:8f:0c:e9:b5:e6:65:
                    fa:fa:2e:5e:fa:72:eb:52:71:aa:4d:ad:6c:aa:cb:
                    64:34:d1:49:c1:69:90:b9:57:d4:b2:57:99:64:d3:
                    5a:cd:35:ad:e5:61:33:c9:0c:ce:2d:e7:e4:80:3b:
                    81:f9:14:5a:31:ab:b0:a9:e4:cf:97:f0:f3:1a:7f:
                    bf:20:76:43:8c:15:4b:86:b0:3a:44:db:81:9e:58:
                    13:94:e1:2e:31:93:5e:90:55:35:e6:82:8f:6b:7b:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:48:BE:70:27:30:A2:8D:4B:FF:0C:8B:B3:4A:7E:C3:D9:9E:F1:1B
            X509v3 Authority Key Identifier:
                keyid:DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/323830343a316230343a3a2f33322d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:60:ba:c0:f5:c4:bd:c8:db:5a:9a:20:5b:84:cb:1c:9f:83:
         1a:44:51:ee:88:35:db:13:77:c9:5a:1b:e1:6b:c9:f6:6c:1f:
         53:af:a1:98:74:6c:ae:f5:f6:0e:6e:cd:20:71:1a:ff:f7:69:
         7e:cc:aa:ec:28:22:08:fc:46:50:9b:6d:79:a2:53:d6:c9:e8:
         e5:13:62:ca:77:53:cc:d6:4e:16:6e:ec:40:22:3a:ae:7b:e7:
         80:fe:eb:56:ee:a9:6b:57:7d:29:9d:48:52:2e:cc:23:61:67:
         9b:57:4e:70:83:1e:4a:04:4d:96:c6:a7:2a:d4:3c:14:fe:9c:
         a0:0f:8c:e6:23:8b:ef:bd:55:83:b2:0c:9f:9e:ba:02:91:b5:
         bf:17:6a:06:3a:7c:f1:bf:86:c4:ad:39:dd:35:fa:7c:d2:ff:
         97:1c:b7:20:ba:bf:c6:3a:8c:ea:61:56:b5:72:b6:d8:a8:f6:
         5b:f9:43:f3:d3:d3:fc:ed:d7:d7:3e:b3:a4:22:fc:67:26:e4:
         d5:57:0f:e1:fd:1a:cd:1c:1e:e8:40:04:e3:f6:43:cb:60:f5:
         b1:48:66:69:db:97:44:2e:4f:f1:44:73:bd:f9:5d:73:d4:6c:
         79:32:23:c1:0d:0c:df:83:6b:10:9b:f6:fd:a9:30:a8:fb:13:
         88:60:c4:75
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQb2y2I1SBBwFDcB4l6PE524xc34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIwRkI1REMxMDIyNDA4RDNCMzJEN0U5NDdCMDAzMUU1
RUMxOENDNTAeFw0yNDA0MDQxNzI2NTBaFw0yNTA0MDMxNzMxNTBaMDMxMTAvBgNV
BAMTKDUxNDhCRTcwMjczMEEyOEQ0QkZGMEM4QkIzNEE3RUMzRDk5RUYxMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFSAlBjThtHF9EMEkzlqXESmd
i5+ri02vSKVDU1SOJACqA6Qiw9cAd8JaLw/cNvyAnsq9mSrTn2rsfO/PFj6X28re
66KDy9SZ1g5aP47Y5Tgytji9k29Z+q/m3ZK50viR6R8GYW6aD9//hbN+ibJr1CTg
MWUfAvTALENmn0hONruMezRayMXmiSi3gz8+L2I5steaVR7wz+5sJTfNio8M6bXm
Zfr6Ll76cutScapNrWyqy2Q00UnBaZC5V9SyV5lk01rNNa3lYTPJDM4t5+SAO4H5
FFoxq7Cp5M+X8PMaf78gdkOMFUuGsDpE24GeWBOU4S4xk16QVTXmgo9rexyPAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUUUi+cCcwoo1L/wyLs0p+w9me8RswHwYDVR0j
BBgwFoAU2w+13BAiQI07MtfpR7ADHl7BjMUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF
QWkvMS9EQjBGQjVEQzEwMjI0MDhEM0IzMkQ3RTk0N0IwMDMxRTVFQzE4Q0M1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCMEZCNURDMTAyMjQwOEQz
QjMyRDdFOTQ3QjAwMzFFNUVDMThDQzUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYNXVmeDJuclJDa3Y3c2VZcXVQR2UxY0hVU3BqWTFWWVZvUjRCZ05DRUFpLzEv
MzIzODMwMzQzYTMxNjIzMDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMzMw
MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGwQwDQYJKoZIhvcNAQELBQADggEBAFJgusD1xL3I
21qaIFuEyxyfgxpEUe6INdsTd8laG+FryfZsH1OvoZh0bK719g5uzSBxGv/3aX7M
quwoIgj8RlCbbXmiU9bJ6OUTYsp3U8zWThZu7EAiOq5754D+61buqWtXfSmdSFIu
zCNhZ5tXTnCDHkoETZbGpyrUPBT+nKAPjOYji++9VYOyDJ+eugKRtb8XagY6fPG/
hsStOd01+nzS/5cctyC6v8Y6jOphVrVyttio9lv5Q/PT0/zt19c+s6Qi/Gcm5NVX
D+H9Gs0cHuhABOP2Q8tg9bFIZmnbl0QuT/FEc735XXPUbHkyI8ENDN+DaxCb9v2p
MKj7E4hgxHU=
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:26:44 2024 by rpki-client on console-ams.rpki-client.org