Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a393030303a3a2f34382d3438203d3e20323637343930.roa
File:                     323830343a343234383a393030303a3a2f34382d3438203d3e20323637343930.roa (raw, json)
Hash identifier:          ini51zNJNZ9TWLjObQgNHToFianHAA2A+z5gK/IA5ks=
Subject key identifier:   20:7F:2F:6C:A8:08:8F:EA:F3:FF:AF:D1:01:D4:34:3A:BC:1D:AB:98
Certificate issuer:       /CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
Certificate serial:       46F0714B8CC202BC5D92ED4A78B85F20F572B56F
Authority key identifier: 43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a393030303a3a2f34382d3438203d3e20323637343930.roa
Signing time:             Sat 04 May 2024 04:52:30 +0000
ROA not before:           Sat 04 May 2024 04:47:30 +0000
ROA not after:            Sat 03 May 2025 04:52:30 +0000
asID:                     267490
IP address blocks:        2804:4248:9000::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f0:71:4b:8c:c2:02:bc:5d:92:ed:4a:78:b8:5f:20:f5:72:b5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
        Validity
            Not Before: May  4 04:47:30 2024 GMT
            Not After : May  3 04:52:30 2025 GMT
        Subject: CN=207F2F6CA8088FEAF3FFAFD101D4343ABC1DAB98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7d:32:d1:63:69:d8:b9:7f:76:93:b5:09:38:
                    4d:96:23:07:74:4e:d1:75:9c:bd:bd:2d:37:fc:b9:
                    0c:47:75:af:21:4d:c5:c6:55:e8:bf:a2:f6:32:9c:
                    21:69:c4:d6:1a:34:e6:4f:22:d1:4e:f6:69:35:0d:
                    fe:f8:69:9f:97:04:c9:06:f9:1e:0a:4c:ad:af:fb:
                    21:43:1b:c2:41:35:29:6d:c9:e9:e4:b9:b8:67:07:
                    f9:9c:19:a7:f7:d5:94:d6:1b:fa:3f:a2:ea:cb:d1:
                    f9:6a:2b:7b:03:1d:ec:68:7a:3f:16:c7:23:23:d9:
                    4d:e6:cd:a1:ef:c4:64:60:07:75:9d:07:8a:bb:9b:
                    21:2f:da:0f:b2:c0:e1:76:c8:5d:7f:42:bd:e0:2f:
                    88:43:56:05:b3:20:c7:a0:aa:e7:16:d6:7c:af:ac:
                    86:bd:c2:6a:81:d1:25:20:43:a2:23:dd:33:78:44:
                    78:be:3a:05:b5:e7:ae:ef:5c:14:c8:29:1b:b0:1b:
                    a1:d4:b6:02:56:f7:aa:a8:cb:74:f0:f7:9c:e5:ab:
                    d0:d2:d0:82:ea:5e:2d:8b:72:79:03:40:e2:a2:38:
                    70:9a:0d:b4:15:cb:8b:ba:e7:7b:4d:22:38:31:c4:
                    93:29:7e:29:d8:34:54:8c:08:02:b8:e0:96:1c:ef:
                    b3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7F:2F:6C:A8:08:8F:EA:F3:FF:AF:D1:01:D4:34:3A:BC:1D:AB:98
            X509v3 Authority Key Identifier:
                keyid:43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a393030303a3a2f34382d3438203d3e20323637343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4248:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:51:ac:b4:08:32:de:f7:bf:67:4d:f7:85:4b:03:94:22:6d:
         23:b1:63:91:c7:e1:75:37:97:c3:bb:33:d5:af:e8:d4:a3:a4:
         85:6f:0e:3f:03:ef:1b:59:07:37:f4:d8:e2:52:db:4f:d4:86:
         26:ac:b2:7f:00:6a:7a:c8:77:bb:f6:3f:49:d4:a4:96:bc:7b:
         a3:e0:dd:d2:d7:0b:b4:bc:89:64:98:02:06:aa:dd:22:cf:67:
         e9:5e:0f:da:ad:af:52:15:ee:27:4a:54:a6:87:90:7f:03:58:
         92:b0:11:51:00:ec:9e:70:33:11:d1:3a:be:a4:02:09:ff:c4:
         6a:36:bb:28:f3:70:50:94:88:89:95:72:df:5d:3c:18:2c:76:
         9a:6a:32:4f:05:c3:eb:8b:fe:f7:36:a9:cf:0d:53:bb:10:aa:
         fe:74:79:d7:e7:b4:6d:86:0b:3d:a4:6b:3b:3f:c6:8a:0b:94:
         5f:94:15:8d:5d:4c:b9:ac:f8:11:5c:d1:1c:24:82:aa:90:4b:
         e1:f3:ca:82:93:cb:53:b3:41:0e:4f:05:ec:21:e0:57:b5:d4:
         5b:b7:08:d4:5a:0e:ca:54:e7:3f:26:52:48:a2:a1:1a:eb:c8:
         f4:e3:fc:ea:59:14:f3:72:dc:48:54:3a:0a:a1:34:5c:b0:61:
         4b:f8:09:21
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIURvBxS4zCArxdku1KeLhfIPVytW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNCRUMzMjFENkUxRUYzREZEMTVDQTY3QzE3MEVDRjlB
OTQ0MjVCNjAeFw0yNDA1MDQwNDQ3MzBaFw0yNTA1MDMwNDUyMzBaMDMxMTAvBgNV
BAMTKDIwN0YyRjZDQTgwODhGRUFGM0ZGQUZEMTAxRDQzNDNBQkMxREFCOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDefTLRY2nYuX92k7UJOE2WIwd0
TtF1nL29LTf8uQxHda8hTcXGVei/ovYynCFpxNYaNOZPItFO9mk1Df74aZ+XBMkG
+R4KTK2v+yFDG8JBNSltyenkubhnB/mcGaf31ZTWG/o/ourL0flqK3sDHexoej8W
xyMj2U3mzaHvxGRgB3WdB4q7myEv2g+ywOF2yF1/Qr3gL4hDVgWzIMegqucW1nyv
rIa9wmqB0SUgQ6Ij3TN4RHi+OgW1567vXBTIKRuwG6HUtgJW96qoy3Tw95zlq9DS
0ILqXi2LcnkDQOKiOHCaDbQVy4u653tNIjgxxJMpfinYNFSMCAK44JYc77OVAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUIH8vbKgIj+rz/6/RAdQ0Orwdq5gwHwYDVR0j
BBgwFoAUQ77DIdbh7z39FcpnwXDs+alEJbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RpVGVHVzVIR1h2OEV2eUxaZDFVTjl5dENiNUFDNXVIZkxlY3VvS0NT
S04vMC80M0JFQzMyMUQ2RTFFRjNERkQxNUNBNjdDMTcwRUNGOUE5NDQyNUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQkVDMzIxRDZFMUVGM0RG
RDE1Q0E2N0MxNzBFQ0Y5QTk0NDI1QjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0aVRlR1c1SEdYdjhFdnlMWmQxVU45eXRDYjVBQzV1SGZMZWN1b0tDU0tOLzAv
MzIzODMwMzQzYTM0MzIzNDM4M2EzOTMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEQkiQADANBgkqhkiG9w0BAQsF
AAOCAQEAdVGstAgy3ve/Z033hUsDlCJtI7FjkcfhdTeXw7sz1a/o1KOkhW8OPwPv
G1kHN/TY4lLbT9SGJqyyfwBqesh3u/Y/SdSklrx7o+Dd0tcLtLyJZJgCBqrdIs9n
6V4P2q2vUhXuJ0pUpoeQfwNYkrARUQDsnnAzEdE6vqQCCf/Eaja7KPNwUJSIiZVy
3108GCx2mmoyTwXD64v+9zapzw1TuxCq/nR51+e0bYYLPaRrOz/GiguUX5QVjV1M
uaz4EVzRHCSCqpBL4fPKgpPLU7NBDk8F7CHgV7XUW7cI1FoOylTnPyZSSKKhGuvI
9OP86lkU83LcSFQ6CqE0XLBhS/gJIQ==
-----END CERTIFICATE-----
Generated at Wed Aug 28 13:39:36 2024 by rpki-client on console-fra.rpki-client.org