Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a666630303a3a2f34322d3432203d3e20323637343930.roa
File:                     323830343a343234383a666630303a3a2f34322d3432203d3e20323637343930.roa (raw, json)
Hash identifier:          WxrAWAnR27nD8CBLfkjbIkaFEhgSl54D41TJRfp/U0E=
Subject key identifier:   59:D7:77:88:F5:79:57:C7:7A:8C:20:B5:58:5C:EC:AB:80:73:C0:90
Certificate issuer:       /CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
Certificate serial:       48063ED73A13339C9C6B5AA97CE81216A15AE155
Authority key identifier: 43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a666630303a3a2f34322d3432203d3e20323637343930.roa
Signing time:             Sat 04 May 2024 04:52:30 +0000
ROA not before:           Sat 04 May 2024 04:47:30 +0000
ROA not after:            Sat 03 May 2025 04:52:30 +0000
asID:                     267490
IP address blocks:        2804:4248:ff00::/42 maxlen: 42

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:06:3e:d7:3a:13:33:9c:9c:6b:5a:a9:7c:e8:12:16:a1:5a:e1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
        Validity
            Not Before: May  4 04:47:30 2024 GMT
            Not After : May  3 04:52:30 2025 GMT
        Subject: CN=59D77788F57957C77A8C20B5585CECAB8073C090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:f8:14:35:3b:8c:03:78:9f:04:db:df:4b:
                    1c:e5:11:94:8a:ac:06:54:ed:3c:64:ce:5b:84:42:
                    ee:b3:77:31:f1:f8:a4:b5:c7:1f:fc:69:fe:86:e5:
                    02:20:96:3f:8a:63:37:06:cd:9d:40:ba:b6:a7:8c:
                    b6:a5:3d:d6:22:1a:46:f4:da:35:73:5f:08:64:32:
                    db:c9:96:8c:f1:f2:db:d5:8d:a3:54:c2:86:5b:60:
                    e0:4e:b6:73:48:ba:9a:91:5c:6f:3d:33:dc:0d:ff:
                    ec:f9:d2:9e:16:57:11:f1:db:77:0d:11:25:0b:28:
                    58:9e:b6:82:22:53:46:80:92:7d:0f:cd:3d:b0:b8:
                    76:ac:5c:29:f5:f7:b8:1d:96:8d:d8:3d:75:55:c1:
                    29:12:81:64:61:40:67:5f:14:5c:f3:7b:1c:c7:17:
                    2c:5a:96:2f:ec:cd:cf:cb:6e:1f:54:e0:8f:46:e1:
                    29:f6:f4:a5:55:f1:ef:2e:c8:2b:74:b3:ad:d9:9f:
                    b4:56:c9:c9:54:c7:ee:1f:1b:d0:1e:0e:ed:fc:d6:
                    94:e8:b7:95:64:78:7a:d7:5d:4c:e7:35:b4:88:b0:
                    48:98:8d:7f:f5:6e:55:14:f3:ca:1a:3b:a2:8e:58:
                    d6:8e:37:41:e5:d3:db:09:13:81:ec:c6:7e:79:d5:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D7:77:88:F5:79:57:C7:7A:8C:20:B5:58:5C:EC:AB:80:73:C0:90
            X509v3 Authority Key Identifier:
                keyid:43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a666630303a3a2f34322d3432203d3e20323637343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4248:ff00::/42

    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:20:5c:e6:5b:20:3b:2f:84:d7:5c:5e:33:20:b9:c7:9d:
         a3:c4:f8:40:d6:59:60:1b:dc:dd:f8:6e:4c:97:3e:4d:18:ca:
         b4:63:77:3a:44:27:74:b4:2b:e3:d8:c0:63:86:7a:0c:4e:bb:
         2e:f1:d2:3b:b8:ed:e9:bc:cc:f6:00:e8:44:14:be:0b:49:34:
         d5:39:73:4d:7f:e9:b4:92:89:55:48:1f:63:ef:73:b1:c6:16:
         c2:3c:c0:04:6b:21:dd:21:1c:0b:16:89:47:4c:0b:89:bd:07:
         ae:6f:8b:d3:e6:6f:4c:99:2a:e9:5f:63:b4:cf:be:64:7f:96:
         09:f0:f7:70:26:57:00:6b:5e:43:32:be:d2:f0:62:ca:bd:16:
         d5:99:67:83:8b:bb:08:0e:2b:51:c0:9c:b6:6e:80:85:51:b2:
         82:b4:0e:f8:d3:90:84:01:63:68:b5:a5:ef:13:93:fa:d1:18:
         f7:26:cc:65:2a:2c:b9:0f:e8:b8:43:45:52:f4:06:0d:fc:60:
         ea:3d:c9:ca:e5:00:03:7d:61:e1:1a:89:fe:7a:57:a0:84:b2:
         32:a4:ad:64:78:f8:0c:60:ae:fe:84:d7:dc:b0:00:cb:f5:b4:
         b8:ee:b3:48:f3:df:64:a3:99:97:3d:0f:f1:db:98:bb:c1:82:
         fa:08:68:4f
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUSAY+1zoTM5yca1qpfOgSFqFa4VUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNCRUMzMjFENkUxRUYzREZEMTVDQTY3QzE3MEVDRjlB
OTQ0MjVCNjAeFw0yNDA1MDQwNDQ3MzBaFw0yNTA1MDMwNDUyMzBaMDMxMTAvBgNV
BAMTKDU5RDc3Nzg4RjU3OTU3Qzc3QThDMjBCNTU4NUNFQ0FCODA3M0MwOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcGPgUNTuMA3ifBNvfSxzlEZSK
rAZU7TxkzluEQu6zdzHx+KS1xx/8af6G5QIglj+KYzcGzZ1AuranjLalPdYiGkb0
2jVzXwhkMtvJlozx8tvVjaNUwoZbYOBOtnNIupqRXG89M9wN/+z50p4WVxHx23cN
ESULKFietoIiU0aAkn0PzT2wuHasXCn197gdlo3YPXVVwSkSgWRhQGdfFFzzexzH
Fyxali/szc/Lbh9U4I9G4Sn29KVV8e8uyCt0s63Zn7RWyclUx+4fG9AeDu381pTo
t5VkeHrXXUznNbSIsEiYjX/1blUU88oaO6KOWNaON0Hl09sJE4Hsxn551TaRAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUWdd3iPV5V8d6jCC1WFzsq4BzwJAwHwYDVR0j
BBgwFoAUQ77DIdbh7z39FcpnwXDs+alEJbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RpVGVHVzVIR1h2OEV2eUxaZDFVTjl5dENiNUFDNXVIZkxlY3VvS0NT
S04vMC80M0JFQzMyMUQ2RTFFRjNERkQxNUNBNjdDMTcwRUNGOUE5NDQyNUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQkVDMzIxRDZFMUVGM0RG
RDE1Q0E2N0MxNzBFQ0Y5QTk0NDI1QjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0aVRlR1c1SEdYdjhFdnlMWmQxVU45eXRDYjVBQzV1SGZMZWN1b0tDU0tOLzAv
MzIzODMwMzQzYTM0MzIzNDM4M2E2NjY2MzAzMDNhM2EyZjM0MzIyZDM0MzIyMDNk
M2UyMDMyMzYzNzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigEQkj/ADANBgkqhkiG9w0BAQsF
AAOCAQEAKx8gXOZbIDsvhNdcXjMgucedo8T4QNZZYBvc3fhuTJc+TRjKtGN3OkQn
dLQr49jAY4Z6DE67LvHSO7jt6bzM9gDoRBS+C0k01TlzTX/ptJKJVUgfY+9zscYW
wjzABGsh3SEcCxaJR0wLib0Hrm+L0+ZvTJkq6V9jtM++ZH+WCfD3cCZXAGteQzK+
0vBiyr0W1Zlng4u7CA4rUcCctm6AhVGygrQO+NOQhAFjaLWl7xOT+tEY9ybMZSos
uQ/ouENFUvQGDfxg6j3JyuUAA31h4RqJ/npXoISyMqStZHj4DGCu/oTX3LAAy/W0
uO6zSPPfZKOZlz0P8duYu8GC+ghoTw==
-----END CERTIFICATE-----
Generated at Wed Aug 28 14:17:29 2024 by rpki-client on console-ams.rpki-client.org