Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a653030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a653030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          2e1CmAbDs+XAeAvBheEicMzHTc8W9JLXTn8aFjZCCvw=
Subject key identifier:   0B:4C:3D:D4:32:76:45:7A:E2:A2:7B:AE:69:22:52:02:25:2C:11:AE
Certificate issuer:       /CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Certificate serial:       0AC5B5AA529ED05B7B4DE03A01012C605F0896F3
Authority key identifier: 85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a653030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Thu 04 Apr 2024 00:08:30 +0000
ROA not before:           Thu 04 Apr 2024 00:03:30 +0000
ROA not after:            Thu 03 Apr 2025 00:08:30 +0000
asID:                     267942
IP address blocks:        2804:5590:e000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c5:b5:aa:52:9e:d0:5b:7b:4d:e0:3a:01:01:2c:60:5f:08:96:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
        Validity
            Not Before: Apr  4 00:03:30 2024 GMT
            Not After : Apr  3 00:08:30 2025 GMT
        Subject: CN=0B4C3DD43276457AE2A27BAE69225202252C11AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:db:93:b7:b8:ff:bf:6c:21:8a:0f:d2:51:
                    55:b3:f0:41:3c:22:18:97:4f:7d:86:ff:42:ca:37:
                    ae:33:57:5d:28:55:d4:10:72:35:68:02:75:da:78:
                    5d:09:ad:9b:14:b8:81:93:d5:a6:8a:f6:94:2e:60:
                    b5:ff:1d:00:5a:09:07:eb:17:8d:05:7b:18:b5:2f:
                    44:4f:81:cd:07:c5:56:f1:64:6f:d5:bb:4c:75:e7:
                    17:82:52:05:cd:9b:48:63:25:d7:b1:98:72:55:3f:
                    0d:11:ac:6d:70:de:d1:e5:cd:1d:33:d1:73:06:7e:
                    43:88:0a:50:3c:2a:79:62:19:06:c5:82:ea:85:f1:
                    2a:94:03:d0:d1:fe:a4:c8:e1:3f:9b:c3:96:c8:44:
                    13:4c:d0:63:60:6d:e3:1b:28:b6:72:bf:92:f8:77:
                    ea:87:e8:be:0e:2d:4c:7b:83:ac:fd:19:74:06:d6:
                    c1:c4:65:58:3b:96:d9:e4:be:9f:c9:cd:fb:8e:b0:
                    d0:1a:74:77:d7:f6:09:ff:ba:4d:86:c4:eb:a9:cd:
                    a3:08:58:ed:58:34:04:74:7e:07:7e:41:b8:66:94:
                    27:86:60:8a:5c:c8:81:d7:20:5a:d3:1a:4a:86:89:
                    cb:d4:aa:6b:00:f3:c7:ed:c1:f5:83:5f:73:73:12:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4C:3D:D4:32:76:45:7A:E2:A2:7B:AE:69:22:52:02:25:2C:11:AE
            X509v3 Authority Key Identifier:
                keyid:85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a653030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:09:b0:c3:8c:f2:d1:45:3e:95:36:9b:36:71:b7:3b:1c:
         da:b2:6b:5d:aa:e8:27:a7:9a:45:a0:05:92:26:ca:fb:67:81:
         1f:83:98:f2:ee:32:81:fd:f9:62:b5:9e:64:10:e4:72:cb:62:
         7e:a1:30:bf:c7:0c:f3:15:d2:5a:a2:d7:82:80:88:38:40:f0:
         b4:4c:b3:be:e5:4f:8f:68:18:d5:88:cf:23:6e:67:05:ec:9e:
         9f:e6:2e:e9:06:76:d4:2a:90:a2:3c:2b:18:fb:69:a3:92:b2:
         24:21:7c:92:4f:20:67:6d:2f:1d:a6:2d:48:cf:a9:b6:2c:2e:
         38:6e:0d:e6:e8:75:03:b6:25:44:95:4b:af:68:b5:fe:cd:e2:
         3c:c9:50:b0:ef:60:0f:00:73:5c:90:5f:25:a9:ff:29:f6:ca:
         e4:89:72:bc:3e:60:7f:92:6d:97:cd:78:de:0d:bb:32:94:a1:
         0d:2f:59:3b:2b:41:0a:8b:be:e4:0b:de:e3:c5:77:bb:e8:0a:
         6e:c6:ec:f2:91:91:64:f3:ac:b6:85:99:07:bb:1d:ad:eb:6e:
         76:b0:a1:a3:19:d4:a9:5b:a6:34:52:c5:39:75:0e:50:cf:2b:
         d9:83:00:b5:fb:23:74:20:b2:d6:f0:54:ab:3d:8b:d0:b2:25:
         68:a8:fa:bb
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCsW1qlKe0Ft7TeA6AQEsYF8IlvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVDNjZGODYyMTM5RUU5NzJCM0REODIxMTE3QjgyNERE
OEI2RjlEMDAeFw0yNDA0MDQwMDAzMzBaFw0yNTA0MDMwMDA4MzBaMDMxMTAvBgNV
BAMTKDBCNEMzREQ0MzI3NjQ1N0FFMkEyN0JBRTY5MjI1MjAyMjUyQzExQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4duTt7j/v2whig/SUVWz8EE8
IhiXT32G/0LKN64zV10oVdQQcjVoAnXaeF0JrZsUuIGT1aaK9pQuYLX/HQBaCQfr
F40Fexi1L0RPgc0HxVbxZG/Vu0x15xeCUgXNm0hjJdexmHJVPw0RrG1w3tHlzR0z
0XMGfkOIClA8KnliGQbFguqF8SqUA9DR/qTI4T+bw5bIRBNM0GNgbeMbKLZyv5L4
d+qH6L4OLUx7g6z9GXQG1sHEZVg7ltnkvp/JzfuOsNAadHfX9gn/uk2GxOupzaMI
WO1YNAR0fgd+QbhmlCeGYIpcyIHXIFrTGkqGicvUqmsA88ftwfWDX3NzEh89AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUC0w91DJ2RXrionuuaSJSAiUsEa4wHwYDVR0j
BBgwFoAUhcZvhiE57pcrPdghEXuCTdi2+dAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUNCbkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0
aUEvMS84NUM2NkY4NjIxMzlFRTk3MkIzREQ4MjExMTdCODI0REQ4QjZGOUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1QzY2Rjg2MjEzOUVFOTcy
QjNERDgyMTExN0I4MjRERDhCNkY5RDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDQm5GTnBja3ZQZU4xcFVwdllVN2pSNTJIcGIxWDZESDRVd3hQeXdydGlBLzEv
MzIzODMwMzQzYTM1MzUzOTMwM2E2NTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVZDgMA0GCSqGSIb3DQEBCwUA
A4IBAQBq4wmww4zy0UU+lTabNnG3Oxzasmtdqugnp5pFoAWSJsr7Z4Efg5jy7jKB
/flitZ5kEORyy2J+oTC/xwzzFdJaoteCgIg4QPC0TLO+5U+PaBjViM8jbmcF7J6f
5i7pBnbUKpCiPCsY+2mjkrIkIXySTyBnbS8dpi1Iz6m2LC44bg3m6HUDtiVElUuv
aLX+zeI8yVCw72APAHNckF8lqf8p9srkiXK8PmB/km2XzXjeDbsylKENL1k7K0EK
i77kC97jxXe76ApuxuzykZFk86y2hZkHux2t6252sKGjGdSpW6Y0UsU5dQ5QzyvZ
gwC1+yN0ILLW8FSrPYvQsiVoqPq7
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org