Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/323830313a38303a323830303a3a2f34302d3634203d3e20323632343431.roa
File:                     323830313a38303a323830303a3a2f34302d3634203d3e20323632343431.roa (raw, json)
Hash identifier:          Y9NSYdKMUdUOKSQhVzvL2sb8S0Gwtx1Rwxsi/BiLNHY=
Subject key identifier:   E1:AF:81:EA:2D:AC:C5:6A:90:CB:C7:30:63:F0:AF:30:2A:56:A3:94
Certificate issuer:       /CN=7E0A7927CD2D738E5D781ED3A37E2DED1BE97EF7
Certificate serial:       0CE03E61569F145B9E629C9C739561082EA14599
Authority key identifier: 7E:0A:79:27:CD:2D:73:8E:5D:78:1E:D3:A3:7E:2D:ED:1B:E9:7E:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E0A7927CD2D738E5D781ED3A37E2DED1BE97EF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/323830313a38303a323830303a3a2f34302d3634203d3e20323632343431.roa
Signing time:             Tue 21 Mar 2023 17:08:41 +0000
ROA not before:           Tue 21 Mar 2023 17:03:41 +0000
ROA not after:            Tue 19 Mar 2024 17:08:41 +0000
asID:                     262441
IP address blocks:        2801:80:2800::/40 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e0:3e:61:56:9f:14:5b:9e:62:9c:9c:73:95:61:08:2e:a1:45:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E0A7927CD2D738E5D781ED3A37E2DED1BE97EF7
        Validity
            Not Before: Mar 21 17:03:41 2023 GMT
            Not After : Mar 19 17:08:41 2024 GMT
        Subject: CN=E1AF81EA2DACC56A90CBC73063F0AF302A56A394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:61:d8:0d:a4:dc:0f:33:b5:3b:a0:ea:7f:
                    84:ea:de:7d:bb:a3:23:49:94:71:6b:91:73:70:36:
                    3b:3f:85:7f:f8:19:50:0b:23:d7:7b:19:ef:d4:d1:
                    56:cd:d5:cb:49:05:49:bb:f5:2e:4d:52:53:ee:03:
                    08:f4:dc:8e:f3:6b:39:7f:aa:f7:c5:b0:0d:2f:67:
                    a4:5e:c6:7f:9d:74:e3:27:7f:a0:5e:fe:e4:3e:96:
                    9c:de:5a:3d:87:48:7e:8c:53:2e:92:48:88:ae:8d:
                    7f:49:51:c9:6d:7c:d2:52:e5:48:10:f2:fc:10:a3:
                    8d:9f:6d:e2:eb:18:54:6d:0b:c9:58:c7:a1:f4:f8:
                    3c:9c:6b:bf:ab:f5:b1:e6:e3:b8:7a:95:13:df:c1:
                    45:64:5a:99:e5:1a:24:ef:3a:96:92:91:1e:3c:28:
                    37:e1:8b:cf:18:b2:a6:c0:f6:c5:f7:e6:b6:6b:6e:
                    02:07:7b:ea:bd:c6:b4:e9:50:fd:61:8e:a0:b1:71:
                    e4:44:c4:6a:8a:2a:dc:e1:e8:cd:e3:8f:d0:d1:8b:
                    59:c7:57:cc:7f:ed:2b:70:d7:c1:bb:91:7d:74:67:
                    f7:21:4f:07:7c:fb:d9:d4:b0:37:28:c6:37:a6:41:
                    38:0b:a0:6a:fc:75:a9:3a:69:fa:bd:e5:81:a8:65:
                    4b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AF:81:EA:2D:AC:C5:6A:90:CB:C7:30:63:F0:AF:30:2A:56:A3:94
            X509v3 Authority Key Identifier:
                keyid:7E:0A:79:27:CD:2D:73:8E:5D:78:1E:D3:A3:7E:2D:ED:1B:E9:7E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/7E0A7927CD2D738E5D781ED3A37E2DED1BE97EF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E0A7927CD2D738E5D781ED3A37E2DED1BE97EF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/323830313a38303a323830303a3a2f34302d3634203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:f0:28:7a:99:9e:7a:ea:58:f5:59:d2:1a:2c:e9:80:eb:d2:
         0d:d6:52:55:70:11:e9:9c:55:86:f7:9a:fc:f9:69:ee:40:4e:
         4c:a2:6b:a7:82:06:54:7d:67:1e:8d:ae:57:a5:57:eb:5f:dc:
         8d:f1:1d:21:76:b7:eb:99:b2:d5:b6:3f:5f:d4:17:f2:9a:18:
         10:7a:41:91:db:9e:e0:5f:e7:ba:32:ac:04:f0:7c:07:30:d4:
         8a:21:cb:8b:c5:6c:eb:b5:7f:75:13:90:b0:c8:ae:b5:76:71:
         b1:a4:91:bd:fc:ec:4d:27:a0:4a:c8:c2:5b:77:fd:d3:8a:1e:
         85:6c:6f:12:b8:c7:47:c0:91:26:e9:1b:f5:27:fc:1d:ed:bf:
         72:dc:e3:21:c5:df:0a:d4:14:15:24:5b:91:93:fd:be:6f:3d:
         09:34:2a:c2:fb:ec:f3:d8:39:57:79:1b:30:9e:92:fc:b3:d0:
         cb:a3:74:c5:84:99:36:35:37:16:52:dd:67:1e:23:a9:c0:ac:
         6b:42:c1:12:92:10:bc:d3:5d:dc:0d:6f:64:7f:af:4a:49:6f:
         dc:2b:fe:65:2c:e9:a3:6b:0f:b9:a7:e9:56:df:2e:a2:4c:64:
         6c:26:87:92:89:22:81:dd:be:92:bc:17:44:2f:8b:da:1f:03:
         78:3c:fb:4c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUDOA+YVafFFueYpycc5VhCC6hRZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UwQTc5MjdDRDJENzM4RTVENzgxRUQzQTM3RTJERUQx
QkU5N0VGNzAeFw0yMzAzMjExNzAzNDFaFw0yNDAzMTkxNzA4NDFaMDMxMTAvBgNV
BAMTKEUxQUY4MUVBMkRBQ0M1NkE5MENCQzczMDYzRjBBRjMwMkE1NkEzOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3kmHYDaTcDzO1O6Dqf4Tq3n27
oyNJlHFrkXNwNjs/hX/4GVALI9d7Ge/U0VbN1ctJBUm79S5NUlPuAwj03I7zazl/
qvfFsA0vZ6Rexn+ddOMnf6Be/uQ+lpzeWj2HSH6MUy6SSIiujX9JUcltfNJS5UgQ
8vwQo42fbeLrGFRtC8lYx6H0+Dyca7+r9bHm47h6lRPfwUVkWpnlGiTvOpaSkR48
KDfhi88YsqbA9sX35rZrbgIHe+q9xrTpUP1hjqCxceRExGqKKtzh6M3jj9DRi1nH
V8x/7Stw18G7kX10Z/chTwd8+9nUsDcoxjemQTgLoGr8dak6afq95YGoZUuBAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQU4a+B6i2sxWqQy8cwY/CvMCpWo5QwHwYDVR0j
BBgwFoAUfgp5J80tc45deB7To34t7RvpfvcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3VIcmU3RXdNeExnN05aVWU3b0hneXNDYXdvZjJXbzhLc2ZCTjFDVTRB
VncvMC83RTBBNzkyN0NEMkQ3MzhFNUQ3ODFFRDNBMzdFMkRFRDFCRTk3RUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFMEE3OTI3Q0QyRDczOEU1
RDc4MUVEM0EzN0UyREVEMUJFOTdFRjcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN1SHJlN0V3TXhMZzdOWlVlN29IZ3lzQ2F3b2YyV284S3NmQk4xQ1U0QVZ3LzAv
MzIzODMwMzEzYTM4MzAzYTMyMzgzMDMwM2EzYTJmMzQzMDJkMzYzNDIwM2QzZTIw
MzIzNjMyMzQzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAEAgCgwDQYJKoZIhvcNAQELBQADggEB
ADbwKHqZnnrqWPVZ0hos6YDr0g3WUlVwEemcVYb3mvz5ae5ATkyia6eCBlR9Zx6N
rlelV+tf3I3xHSF2t+uZstW2P1/UF/KaGBB6QZHbnuBf57oyrATwfAcw1Iohy4vF
bOu1f3UTkLDIrrV2cbGkkb387E0noErIwlt3/dOKHoVsbxK4x0fAkSbpG/Un/B3t
v3Lc4yHF3wrUFBUkW5GT/b5vPQk0KsL77PPYOVd5GzCekvyz0MujdMWEmTY1NxZS
3WceI6nArGtCwRKSELzTXdwNb2R/r0pJb9wr/mUs6aNrD7mn6VbfLqJMZGwmh5KJ
IoHdvpK8F0Qvi9ofA3g8+0w=
-----END CERTIFICATE-----
Generated at Sun Feb 18 22:08:57 2024 by rpki-client on console-ams.rpki-client.org