Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa
File:                     323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa (raw, json)
Hash identifier:          bnR6+MluvkR2ZlltKwhW2Yzd42jrgQBo5i3uJn6yzMM=
Subject key identifier:   F6:EC:1C:D7:8A:A4:39:28:88:50:A8:8D:F9:45:56:95:CD:FF:FF:B5
Certificate issuer:       /CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
Certificate serial:       1B33E2D9A57B30F4FF40D4EAA93955E0191C921A
Authority key identifier: AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa
Signing time:             Thu 04 Apr 2024 18:24:04 +0000
ROA not before:           Thu 04 Apr 2024 18:19:04 +0000
ROA not after:            Thu 03 Apr 2025 18:24:04 +0000
asID:                     264936
IP address blocks:        2804:3034:120::/43 maxlen: 43

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:33:e2:d9:a5:7b:30:f4:ff:40:d4:ea:a9:39:55:e0:19:1c:92:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
        Validity
            Not Before: Apr  4 18:19:04 2024 GMT
            Not After : Apr  3 18:24:04 2025 GMT
        Subject: CN=F6EC1CD78AA439288850A88DF9455695CDFFFFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:50:16:58:59:7b:fd:46:05:4e:87:25:8b:
                    23:25:c9:65:6f:8b:97:86:b2:7b:5e:5e:3e:a3:01:
                    16:a6:85:28:f8:49:2b:38:a8:7f:40:cf:58:98:0d:
                    5d:55:28:c4:e8:98:90:8b:b9:d1:2c:79:59:45:b6:
                    d1:20:3c:dc:4d:82:12:16:e2:f9:19:42:3f:d9:80:
                    13:c8:71:f8:97:92:7e:5d:5b:31:9d:81:ba:8f:b8:
                    2e:c6:f7:90:d8:33:71:75:19:e3:8d:3e:33:c4:95:
                    ff:de:a8:0e:f3:3d:73:cf:36:d5:c4:57:ad:60:4c:
                    12:93:80:81:7d:39:b0:45:c6:7f:b5:67:15:d8:3b:
                    3d:68:63:8e:46:b3:99:a7:f4:b4:c4:fe:b7:4c:8b:
                    96:3e:75:1c:ae:1d:d1:97:75:07:e8:6f:56:80:2a:
                    b1:cb:7a:93:5c:39:1f:3e:3e:03:da:0e:2b:f0:0e:
                    76:cf:d7:e8:69:8f:1d:8b:f6:e5:65:bd:db:20:85:
                    52:0f:42:40:76:00:69:43:db:52:73:32:37:5e:31:
                    95:12:3c:e2:b2:18:7a:61:47:a0:71:20:36:7c:4d:
                    be:72:db:ce:8a:8a:30:61:62:4a:cd:4f:79:a5:b3:
                    d8:a9:9e:f4:ab:df:2f:d7:a5:df:ee:3d:c5:7b:a5:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EC:1C:D7:8A:A4:39:28:88:50:A8:8D:F9:45:56:95:CD:FF:FF:B5
            X509v3 Authority Key Identifier:
                keyid:AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:120::/43

    Signature Algorithm: sha256WithRSAEncryption
         2a:18:93:8a:9c:bb:18:a9:5e:44:52:0d:d2:7d:0d:ed:cf:3c:
         79:50:2b:94:4d:0b:9e:d1:f7:b2:c0:39:05:8a:d1:7c:a3:cd:
         e0:60:8c:0f:20:f2:5b:b7:32:63:c1:d2:db:bd:71:71:96:01:
         0e:4a:9f:ad:e8:fc:a9:6d:13:36:fa:35:c5:cd:9d:d4:83:e2:
         6f:53:79:84:92:f9:55:11:8e:58:c8:14:ea:ab:e8:47:90:9b:
         72:89:c7:68:a1:b9:c6:be:9d:8b:9d:2d:95:f1:e3:09:00:29:
         cc:75:d8:37:61:84:e6:f3:e0:28:2a:92:2f:74:5b:f9:c5:11:
         fc:70:ab:f2:f0:69:47:6b:ec:72:24:c0:c2:03:ea:dc:6d:e6:
         e1:0c:3b:76:37:d5:43:08:af:47:f2:db:6e:75:2d:c6:4e:0e:
         d3:68:12:5d:22:22:cd:cc:c2:08:b6:30:5a:f6:8d:a6:97:ab:
         eb:86:00:ad:e8:ae:59:50:4c:98:15:7a:33:01:2c:df:e2:17:
         c2:ae:1e:09:f5:98:a1:03:8c:3b:ca:fe:49:d7:5d:d2:e7:b6:
         52:6c:51:eb:41:2d:80:f8:9d:fa:e8:1b:2f:48:cb:bd:ba:db:
         af:36:b8:6d:9c:15:9d:76:cf:74:96:6a:52:0f:76:e7:41:93:
         ab:e4:7a:06
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUGzPi2aV7MPT/QNTqqTlV4BkckhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI0MDAzOUIxRTVEMDUwOUM1MUNDMzU4N0JFRjZFRDJB
MERGRTczRTAeFw0yNDA0MDQxODE5MDRaFw0yNTA0MDMxODI0MDRaMDMxMTAvBgNV
BAMTKEY2RUMxQ0Q3OEFBNDM5Mjg4ODUwQTg4REY5NDU1Njk1Q0RGRkZGQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzVAWWFl7/UYFTocliyMlyWVv
i5eGsnteXj6jARamhSj4SSs4qH9Az1iYDV1VKMTomJCLudEseVlFttEgPNxNghIW
4vkZQj/ZgBPIcfiXkn5dWzGdgbqPuC7G95DYM3F1GeONPjPElf/eqA7zPXPPNtXE
V61gTBKTgIF9ObBFxn+1ZxXYOz1oY45Gs5mn9LTE/rdMi5Y+dRyuHdGXdQfob1aA
KrHLepNcOR8+PgPaDivwDnbP1+hpjx2L9uVlvdsghVIPQkB2AGlD21JzMjdeMZUS
POKyGHphR6BxIDZ8Tb5y286KijBhYkrNT3mls9ipnvSr3y/Xpd/uPcV7pbJfAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU9uwc14qkOSiIUKiN+UVWlc3//7UwHwYDVR0j
BBgwFoAUq0ADmx5dBQnFHMNYe+9u0qDf5z4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMS9BQjQwMDM5QjFFNUQwNTA5QzUxQ0MzNTg3QkVGNkVEMkEwREZFNzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCNDAwMzlCMUU1RDA1MDlD
NTFDQzM1ODdCRUY2RUQyQTBERkU3M0UuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzEv
MzIzODMwMzQzYTMzMzAzMzM0M2EzMTMyMzAzYTNhMmYzNDMzMmQzNDMzMjAzZDNl
MjAzMjM2MzQzOTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwUoBDA0ASAwDQYJKoZIhvcNAQELBQAD
ggEBACoYk4qcuxipXkRSDdJ9De3PPHlQK5RNC57R97LAOQWK0XyjzeBgjA8g8lu3
MmPB0tu9cXGWAQ5Kn63o/KltEzb6NcXNndSD4m9TeYSS+VURjljIFOqr6EeQm3KJ
x2ihuca+nYudLZXx4wkAKcx12DdhhObz4Cgqki90W/nFEfxwq/LwaUdr7HIkwMID
6txt5uEMO3Y31UMIr0fy2251LcZODtNoEl0iIs3Mwgi2MFr2jaaXq+uGAK3orllQ
TJgVejMBLN/iF8KuHgn1mKEDjDvK/knXXdLntlJsUetBLYD4nfroGy9Iy7262682
uG2cFZ12z3SWalIPdudBk6vkegY=
-----END CERTIFICATE-----
Generated at Sat Oct 5 08:16:16 2024 by rpki-client on console-fra.rpki-client.org