Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/323830343a376562383a3a2f33322d313238203d3e20323731363433.roa
File:                     323830343a376562383a3a2f33322d313238203d3e20323731363433.roa (raw, json)
Hash identifier:          N32lCGWl8+fUSGAg1p9Ho+R4cAMyFe2FoqVuWeMt6VM=
Subject key identifier:   D2:B1:EB:FD:11:0C:5B:BD:32:F9:09:D1:57:2C:85:C5:3C:89:78:04
Certificate issuer:       /CN=88CEE51396FC7EA2E1797C3145706CC31E530813
Certificate serial:       0BA6790B54935D69FA6AE23C55FFD5CAE4EFC025
Authority key identifier: 88:CE:E5:13:96:FC:7E:A2:E1:79:7C:31:45:70:6C:C3:1E:53:08:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88CEE51396FC7EA2E1797C3145706CC31E530813.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/323830343a376562383a3a2f33322d313238203d3e20323731363433.roa
Signing time:             Thu 16 May 2024 04:48:36 +0000
ROA not before:           Thu 16 May 2024 04:43:36 +0000
ROA not after:            Thu 15 May 2025 04:48:36 +0000
asID:                     271643
IP address blocks:        2804:7eb8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a6:79:0b:54:93:5d:69:fa:6a:e2:3c:55:ff:d5:ca:e4:ef:c0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88CEE51396FC7EA2E1797C3145706CC31E530813
        Validity
            Not Before: May 16 04:43:36 2024 GMT
            Not After : May 15 04:48:36 2025 GMT
        Subject: CN=D2B1EBFD110C5BBD32F909D1572C85C53C897804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:ab:69:5a:b0:f8:da:29:78:97:46:ad:9a:
                    32:18:c7:ca:50:26:01:41:5c:24:cd:fc:0c:a4:8e:
                    89:25:38:ef:a1:3f:3b:4d:f6:83:4f:29:e6:e0:f6:
                    2f:ae:81:e3:30:2c:59:aa:5c:e0:47:0c:87:5f:5b:
                    0d:60:1a:c4:f2:e3:d8:5a:90:95:9b:6d:f0:56:47:
                    f1:15:d1:7d:67:a6:38:d6:91:dc:cc:4d:bb:ee:f1:
                    44:a6:1c:52:bf:ce:97:07:62:36:95:b7:28:05:fc:
                    fa:32:a2:93:6b:22:10:7a:5f:3b:3f:e9:96:ed:3d:
                    5f:93:df:ce:78:21:63:7b:07:c2:96:0e:90:d8:b9:
                    d5:5d:f8:7c:ae:2f:4c:a9:c2:cb:7d:71:33:d3:53:
                    e4:0b:05:4a:34:09:7a:02:ef:c9:6e:8d:83:cb:73:
                    65:ee:0e:3e:a5:d2:45:ba:c0:e0:88:f5:9f:4b:f1:
                    7a:42:0a:36:35:6a:bb:d3:db:38:60:75:18:e7:e6:
                    41:05:8b:99:d7:01:75:2c:52:5d:81:80:af:af:4d:
                    80:d9:4e:06:1b:08:8a:48:9c:f8:1a:36:25:e6:ab:
                    b8:ec:23:b1:ba:df:2a:1a:44:3b:04:62:fa:19:6e:
                    ad:05:5d:f5:b9:88:c7:52:e4:10:ef:de:8d:38:c2:
                    9b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B1:EB:FD:11:0C:5B:BD:32:F9:09:D1:57:2C:85:C5:3C:89:78:04
            X509v3 Authority Key Identifier:
                keyid:88:CE:E5:13:96:FC:7E:A2:E1:79:7C:31:45:70:6C:C3:1E:53:08:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/88CEE51396FC7EA2E1797C3145706CC31E530813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88CEE51396FC7EA2E1797C3145706CC31E530813.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/323830343a376562383a3a2f33322d313238203d3e20323731363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7eb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:49:0f:a3:3d:45:e8:10:3b:10:1d:2e:1e:fc:96:4a:d2:71:
         53:7b:b8:8b:f0:13:ed:be:a8:a2:df:28:9c:f4:1e:9b:12:3c:
         ec:53:3d:02:b5:31:b2:49:8a:8f:5e:f4:d5:8e:af:c5:e6:33:
         a6:f3:e6:8c:ed:a0:05:64:97:5c:be:e1:49:47:1e:e6:09:5b:
         31:66:0a:19:21:07:03:32:e2:af:e8:c8:26:e9:a7:4c:10:c6:
         5f:b8:70:b5:6a:6e:01:9f:a9:81:c0:5a:35:26:0d:9c:4b:19:
         3a:fb:42:f4:36:9d:70:12:64:db:1b:1e:bb:71:7d:74:8f:0d:
         39:35:5e:3c:1c:29:81:71:5d:82:51:2e:50:f4:37:09:4f:d0:
         6d:dc:24:11:01:8d:01:7a:eb:ee:8a:17:11:02:7e:22:5e:44:
         67:b6:eb:a7:3e:b9:b0:6c:7d:27:95:0f:d4:84:1b:f2:e2:67:
         a7:ae:d6:c0:ef:92:0c:eb:3f:08:09:5d:45:46:35:8e:c6:9a:
         0b:3b:7d:73:cb:b2:25:a1:ff:16:58:64:33:9f:9c:42:dd:b7:
         b4:ea:f4:3b:30:98:39:ca:86:30:7f:80:7d:3a:d8:70:f1:65:
         8c:be:07:13:1b:8b:04:ce:57:9a:93:f2:fe:25:4f:fa:b6:75:
         9b:35:e3:13
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUC6Z5C1STXWn6auI8Vf/VyuTvwCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhDRUU1MTM5NkZDN0VBMkUxNzk3QzMxNDU3MDZDQzMx
RTUzMDgxMzAeFw0yNDA1MTYwNDQzMzZaFw0yNTA1MTUwNDQ4MzZaMDMxMTAvBgNV
BAMTKEQyQjFFQkZEMTEwQzVCQkQzMkY5MDlEMTU3MkM4NUM1M0M4OTc4MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2LqtpWrD42il4l0atmjIYx8pQ
JgFBXCTN/AykjoklOO+hPztN9oNPKebg9i+ugeMwLFmqXOBHDIdfWw1gGsTy49ha
kJWbbfBWR/EV0X1npjjWkdzMTbvu8USmHFK/zpcHYjaVtygF/PoyopNrIhB6Xzs/
6ZbtPV+T3854IWN7B8KWDpDYudVd+HyuL0ypwst9cTPTU+QLBUo0CXoC78lujYPL
c2XuDj6l0kW6wOCI9Z9L8XpCCjY1arvT2zhgdRjn5kEFi5nXAXUsUl2BgK+vTYDZ
TgYbCIpInPgaNiXmq7jsI7G63yoaRDsEYvoZbq0FXfW5iMdS5BDv3o04wptNAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU0rHr/REMW70y+QnRVyyFxTyJeAQwHwYDVR0j
BBgwFoAUiM7lE5b8fqLheXwxRXBswx5TCBMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3Z4YlBqVnM1UmtISjZQVjJMQkhHemhtVWFCWWpyQ3B0UEtSSHJKQ01F
SnUvMC84OENFRTUxMzk2RkM3RUEyRTE3OTdDMzE0NTcwNkNDMzFFNTMwODEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4Q0VFNTEzOTZGQzdFQTJF
MTc5N0MzMTQ1NzA2Q0MzMUU1MzA4MTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN2eGJQalZzNVJrSEo2UFYyTEJIR3pobVVhQllqckNwdFBLUkhySkNNRUp1LzAv
MzIzODMwMzQzYTM3NjU2MjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNjM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBH64MA0GCSqGSIb3DQEBCwUAA4IBAQAQSQ+j
PUXoEDsQHS4e/JZK0nFTe7iL8BPtvqii3yic9B6bEjzsUz0CtTGySYqPXvTVjq/F
5jOm8+aM7aAFZJdcvuFJRx7mCVsxZgoZIQcDMuKv6Mgm6adMEMZfuHC1am4Bn6mB
wFo1Jg2cSxk6+0L0Np1wEmTbGx67cX10jw05NV48HCmBcV2CUS5Q9DcJT9Bt3CQR
AY0BeuvuihcRAn4iXkRntuunPrmwbH0nlQ/UhBvy4menrtbA75IM6z8ICV1FRjWO
xpoLO31zy7Ilof8WWGQzn5xC3be06vQ7MJg5yoYwf4B9Othw8WWMvgcTG4sEzlea
k/L+JU/6tnWbNeMT
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:39:57 2024 by rpki-client on console-fra.rpki-client.org