Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a373030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a373030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          gVF1GZoYROCuMDRbdCGKTH2PS/iVkQP7hGEvQcr45hc=
Subject key identifier:   98:87:69:8C:4C:A8:46:9E:FB:EA:BB:94:A4:87:21:D4:89:49:32:21
Certificate issuer:       /CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Certificate serial:       3B8BE7EFF2FEC7D915711B010D3563848958C78B
Authority key identifier: 85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a373030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Thu 04 Apr 2024 00:08:30 +0000
ROA not before:           Thu 04 Apr 2024 00:03:30 +0000
ROA not after:            Thu 03 Apr 2025 00:08:30 +0000
asID:                     267942
IP address blocks:        2804:5590:7000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8b:e7:ef:f2:fe:c7:d9:15:71:1b:01:0d:35:63:84:89:58:c7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
        Validity
            Not Before: Apr  4 00:03:30 2024 GMT
            Not After : Apr  3 00:08:30 2025 GMT
        Subject: CN=9887698C4CA8469EFBEABB94A48721D489493221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:b6:d6:11:78:a1:c0:79:5d:bc:87:6a:26:
                    db:af:d6:54:8f:e9:a8:76:5d:d6:fe:f7:52:3c:86:
                    3c:e6:64:1c:3d:fb:74:f3:46:57:6a:75:21:09:93:
                    b2:4c:60:2e:d7:d4:36:b0:40:e5:d3:8c:36:2a:ef:
                    96:fd:5c:41:d2:27:1c:a2:b8:8d:17:c6:74:43:3e:
                    ed:b4:9c:06:ce:a6:83:11:be:0d:ce:f8:81:fd:a8:
                    5f:28:c8:84:7b:a5:71:36:f0:d9:3e:53:87:62:c3:
                    c6:63:c1:85:d7:52:ad:20:75:32:70:2c:93:86:b5:
                    a7:98:c9:df:a7:88:63:16:17:e2:6f:d7:2a:72:c7:
                    cf:cf:2c:ff:f3:d4:0d:87:21:c9:e4:8f:af:42:aa:
                    fe:d2:87:cf:c9:97:24:c7:79:2f:f1:2c:cf:4b:cc:
                    83:3e:4c:33:5c:ce:fb:6a:d9:07:46:62:43:30:56:
                    10:0a:6c:3f:bd:97:72:10:42:e4:76:b8:b4:ad:e3:
                    ef:26:b4:52:a6:93:04:f2:fb:fd:d6:f2:5c:82:01:
                    02:ba:77:49:a3:57:18:0f:7b:e5:20:3f:7b:3f:e9:
                    05:0f:f7:72:46:03:b3:6c:dc:57:73:b2:d1:c1:46:
                    05:8d:a6:06:cd:2b:31:81:ed:6a:fb:fa:3b:bc:de:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:87:69:8C:4C:A8:46:9E:FB:EA:BB:94:A4:87:21:D4:89:49:32:21
            X509v3 Authority Key Identifier:
                keyid:85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a373030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:c1:cb:fd:55:9d:e9:8e:b0:55:75:e6:e0:db:e4:63:79:90:
         58:f6:db:54:0d:3d:d7:65:40:55:14:ce:29:ff:07:f7:81:fe:
         73:88:0d:3e:3a:1c:6f:ba:42:b1:b7:b3:00:88:20:fe:28:71:
         68:b9:bc:47:ab:91:54:23:49:12:8f:d8:02:66:f4:81:d3:97:
         50:dd:7d:69:30:62:96:93:79:bc:04:30:7b:b3:e1:34:81:c4:
         d6:d4:cd:4d:8b:5d:35:e3:28:d9:76:88:23:bc:1d:8f:df:91:
         f6:fd:d4:47:76:c2:64:99:c6:9d:1f:3a:70:91:96:74:b1:05:
         e2:1a:9a:aa:1f:55:ff:40:fe:47:2f:08:ae:26:50:cf:83:d9:
         72:c8:7a:11:62:9e:1a:80:e9:74:f7:05:98:9a:c2:7b:af:eb:
         da:29:bd:93:78:14:35:e9:56:cc:93:c3:00:6c:0f:fa:93:de:
         ea:2a:a8:c9:6f:47:8e:6d:98:4b:c9:28:27:f6:8c:cb:80:d1:
         cd:ba:64:9e:d3:fc:59:65:40:57:3e:c6:1b:71:20:33:c9:bc:
         4c:97:a4:c7:7b:85:59:6e:c2:20:ef:95:e3:13:bf:de:c4:77:
         88:06:9d:a6:47:71:e7:2d:48:4b:81:12:27:b5:e3:f8:58:17:
         51:3d:57:cd
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUO4vn7/L+x9kVcRsBDTVjhIlYx4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVDNjZGODYyMTM5RUU5NzJCM0REODIxMTE3QjgyNERE
OEI2RjlEMDAeFw0yNDA0MDQwMDAzMzBaFw0yNTA0MDMwMDA4MzBaMDMxMTAvBgNV
BAMTKDk4ODc2OThDNENBODQ2OUVGQkVBQkI5NEE0ODcyMUQ0ODk0OTMyMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvrbWEXihwHldvIdqJtuv1lSP
6ah2Xdb+91I8hjzmZBw9+3TzRldqdSEJk7JMYC7X1DawQOXTjDYq75b9XEHSJxyi
uI0XxnRDPu20nAbOpoMRvg3O+IH9qF8oyIR7pXE28Nk+U4diw8ZjwYXXUq0gdTJw
LJOGtaeYyd+niGMWF+Jv1ypyx8/PLP/z1A2HIcnkj69Cqv7Sh8/JlyTHeS/xLM9L
zIM+TDNczvtq2QdGYkMwVhAKbD+9l3IQQuR2uLSt4+8mtFKmkwTy+/3W8lyCAQK6
d0mjVxgPe+UgP3s/6QUP93JGA7Ns3FdzstHBRgWNpgbNKzGB7Wr7+ju83rvzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUmIdpjEyoRp776ruUpIch1IlJMiEwHwYDVR0j
BBgwFoAUhcZvhiE57pcrPdghEXuCTdi2+dAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUNCbkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0
aUEvMS84NUM2NkY4NjIxMzlFRTk3MkIzREQ4MjExMTdCODI0REQ4QjZGOUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1QzY2Rjg2MjEzOUVFOTcy
QjNERDgyMTExN0I4MjRERDhCNkY5RDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDQm5GTnBja3ZQZU4xcFVwdllVN2pSNTJIcGIxWDZESDRVd3hQeXdydGlBLzEv
MzIzODMwMzQzYTM1MzUzOTMwM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVZBwMA0GCSqGSIb3DQEBCwUA
A4IBAQBQwcv9VZ3pjrBVdebg2+RjeZBY9ttUDT3XZUBVFM4p/wf3gf5ziA0+Ohxv
ukKxt7MAiCD+KHFoubxHq5FUI0kSj9gCZvSB05dQ3X1pMGKWk3m8BDB7s+E0gcTW
1M1Ni1014yjZdogjvB2P35H2/dRHdsJkmcadHzpwkZZ0sQXiGpqqH1X/QP5HLwiu
JlDPg9lyyHoRYp4agOl09wWYmsJ7r+vaKb2TeBQ16VbMk8MAbA/6k97qKqjJb0eO
bZhLySgn9ozLgNHNumSe0/xZZUBXPsYbcSAzybxMl6THe4VZbsIg75XjE7/exHeI
Bp2mR3HnLUhLgRInteP4WBdRPVfN
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org