Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a3a2f33342d3334203d3e20323731333737.roa
File:                     323830343a376138383a3a2f33342d3334203d3e20323731333737.roa (raw, json)
Hash identifier:          sFGSWGE5QyEi3wwW1AocqUnb0N2towJPlnyEz73mtcU=
Subject key identifier:   3F:C5:7D:91:DB:1C:7E:C0:77:C1:01:74:AC:81:D0:70:11:58:CE:2F
Certificate issuer:       /CN=9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4
Certificate serial:       670AF8E4C9D94FF85246539D5BE65ECE5EE29DCF
Authority key identifier: 9E:D5:67:F8:6A:DA:E8:8C:DC:1B:94:F0:F1:6C:0A:36:55:A1:C4:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a3a2f33342d3334203d3e20323731333737.roa
Signing time:             Sat 08 Jun 2024 01:11:20 +0000
ROA not before:           Sat 08 Jun 2024 01:06:20 +0000
ROA not after:            Sat 07 Jun 2025 01:11:20 +0000
asID:                     271377
IP address blocks:        2804:7a88::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0a:f8:e4:c9:d9:4f:f8:52:46:53:9d:5b:e6:5e:ce:5e:e2:9d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4
        Validity
            Not Before: Jun  8 01:06:20 2024 GMT
            Not After : Jun  7 01:11:20 2025 GMT
        Subject: CN=3FC57D91DB1C7EC077C10174AC81D0701158CE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:4e:a4:7a:53:e5:d9:00:51:fe:56:a8:80:
                    02:3f:4b:98:29:80:26:8a:d7:b4:85:36:75:6c:52:
                    f8:98:55:b6:c9:54:11:0b:8d:20:3c:28:9a:69:75:
                    96:da:70:bd:c6:49:1a:72:91:9a:33:c0:59:53:f9:
                    e4:ec:d7:d3:bc:95:bc:20:d1:d1:78:21:7f:3e:b9:
                    2c:5a:90:c8:63:ec:18:71:ca:93:56:82:52:90:d4:
                    92:1b:90:c3:78:bf:65:08:5a:35:7c:02:c0:d2:6f:
                    27:9f:81:d3:6a:97:d5:14:0b:6b:2c:1c:64:8b:2c:
                    2b:64:8f:fe:e9:fc:fc:5c:20:c3:99:9f:e0:0e:b9:
                    63:bb:c0:f6:52:9f:de:e0:e5:ec:a5:24:3f:2a:00:
                    28:4c:54:90:49:cc:d3:08:bd:94:18:cf:e9:a8:89:
                    45:92:0b:c1:e1:a4:8e:ee:2a:c0:52:94:40:0d:ae:
                    5b:21:8f:b8:17:78:a7:43:5a:b2:1f:1c:55:ac:9e:
                    ae:91:7f:44:df:01:1f:29:28:fd:b0:65:ea:e5:ad:
                    ad:66:af:41:4b:ef:aa:15:04:94:7a:d2:67:68:06:
                    e6:10:5b:80:ac:99:ee:6d:86:c1:3e:50:0b:0e:d5:
                    70:ee:e3:05:0d:b8:a2:92:b2:d8:8a:4f:a1:f2:33:
                    e3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C5:7D:91:DB:1C:7E:C0:77:C1:01:74:AC:81:D0:70:11:58:CE:2F
            X509v3 Authority Key Identifier:
                keyid:9E:D5:67:F8:6A:DA:E8:8C:DC:1B:94:F0:F1:6C:0A:36:55:A1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a3a2f33342d3334203d3e20323731333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a88::/34

    Signature Algorithm: sha256WithRSAEncryption
         90:b3:b5:d4:36:06:1c:ad:95:f7:a1:26:a8:11:3d:44:20:27:
         74:af:c6:d4:84:7c:17:9e:eb:7e:a6:d1:e5:27:14:2e:15:97:
         20:32:dd:cb:96:22:aa:d8:18:a5:58:5b:85:48:58:3f:b7:e9:
         a1:1f:9e:1e:03:54:1b:0c:a1:49:10:8c:ac:03:89:93:f0:c5:
         00:3f:8f:a3:63:bb:76:9a:16:ac:16:e3:6e:7e:5b:29:d2:3d:
         d2:82:d8:fa:40:25:69:38:13:94:48:cb:36:a2:f8:4c:ec:1a:
         8d:66:5d:d3:3c:01:dc:54:17:59:cc:6e:6c:88:a7:61:76:d3:
         9d:0a:e7:c0:52:a2:6d:fb:9c:c0:20:ef:e9:78:80:5b:be:26:
         c5:c1:8d:0b:b2:fb:48:09:05:ad:5f:0a:b2:26:17:f1:91:95:
         2b:4f:f9:d9:ab:77:25:ab:3c:d5:b5:fb:34:5f:3c:73:29:ea:
         bd:8b:f5:a5:00:93:1b:df:87:3e:ad:1b:34:ca:d3:c8:43:9e:
         a5:82:3a:b3:71:ed:c2:5a:97:3a:a6:eb:3a:84:df:a7:ca:87:
         1e:41:50:83:0d:7b:ae:2a:6d:28:be:19:e5:0d:b0:92:76:a4:
         7f:fe:79:39:e2:77:84:68:26:87:5c:10:59:a1:dc:b0:33:86:
         3e:a4:c1:ca
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZwr45MnZT/hSRlOdW+Zezl7inc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVENTY3Rjg2QURBRTg4Q0RDMUI5NEYwRjE2QzBBMzY1
NUExQzRFNDAeFw0yNDA2MDgwMTA2MjBaFw0yNTA2MDcwMTExMjBaMDMxMTAvBgNV
BAMTKDNGQzU3RDkxREIxQzdFQzA3N0MxMDE3NEFDODFEMDcwMTE1OENFMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0U6kelPl2QBR/laogAI/S5gp
gCaK17SFNnVsUviYVbbJVBELjSA8KJppdZbacL3GSRpykZozwFlT+eTs19O8lbwg
0dF4IX8+uSxakMhj7BhxypNWglKQ1JIbkMN4v2UIWjV8AsDSbyefgdNql9UUC2ss
HGSLLCtkj/7p/PxcIMOZn+AOuWO7wPZSn97g5eylJD8qAChMVJBJzNMIvZQYz+mo
iUWSC8HhpI7uKsBSlEANrlshj7gXeKdDWrIfHFWsnq6Rf0TfAR8pKP2wZerlra1m
r0FL76oVBJR60mdoBuYQW4Csme5thsE+UAsO1XDu4wUNuKKSstiKT6HyM+M/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUP8V9kdscfsB3wQF0rIHQcBFYzi8wHwYDVR0j
BBgwFoAUntVn+Gra6IzcG5Tw8WwKNlWhxOQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFUxbWpUWW0xWEdnZk03dFhxSHNERjROa2dzRndrOGJpd3Z4SGN6RWVm
dXQvMC85RUQ1NjdGODZBREFFODhDREMxQjk0RjBGMTZDMEEzNjU1QTFDNEU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFRDU2N0Y4NkFEQUU4OENE
QzFCOTRGMEYxNkMwQTM2NTVBMUM0RTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRVMW1qVFltMVhHZ2ZNN3RYcUhzREY0Tmtnc0Z3azhiaXd2eEhjekVlZnV0LzAv
MzIzODMwMzQzYTM3NjEzODM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMx
MzMzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAR6iAAwDQYJKoZIhvcNAQELBQADggEBAJCztdQ2
BhytlfehJqgRPUQgJ3SvxtSEfBee636m0eUnFC4VlyAy3cuWIqrYGKVYW4VIWD+3
6aEfnh4DVBsMoUkQjKwDiZPwxQA/j6Nju3aaFqwW425+WynSPdKC2PpAJWk4E5RI
yzai+EzsGo1mXdM8AdxUF1nMbmyIp2F2050K58BSom37nMAg7+l4gFu+JsXBjQuy
+0gJBa1fCrImF/GRlStP+dmrdyWrPNW1+zRfPHMp6r2L9aUAkxvfhz6tGzTK08hD
nqWCOrNx7cJalzqm6zqE36fKhx5BUIMNe64qbSi+GeUNsJJ2pH/+eTnid4RoJodc
EFmh3LAzhj6kwco=
-----END CERTIFICATE-----
Generated at Wed Jun 26 19:05:27 2024 by rpki-client on console-fra.rpki-client.org