Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/323830343a326664383a343030303a3a2f33342d3334203d3e20323634393135.roa
File:                     323830343a326664383a343030303a3a2f33342d3334203d3e20323634393135.roa (raw, json)
Hash identifier:          UdQsq7+qBO9AKzhMos1/i2mncsMcz3S8nwDDRMwmmLU=
Subject key identifier:   73:A4:17:D0:FB:80:26:4D:A2:D3:E6:AB:EB:94:92:49:B3:D2:CC:FA
Certificate issuer:       /CN=998C1B9397A86CDEC286CEC4DB5E599D5429D1EF
Certificate serial:       023F74D1E9BBC8193128BD9663150D83EFCF01A5
Authority key identifier: 99:8C:1B:93:97:A8:6C:DE:C2:86:CE:C4:DB:5E:59:9D:54:29:D1:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/323830343a326664383a343030303a3a2f33342d3334203d3e20323634393135.roa
Signing time:             Thu 04 Apr 2024 13:14:17 +0000
ROA not before:           Thu 04 Apr 2024 13:09:17 +0000
ROA not after:            Thu 03 Apr 2025 13:14:17 +0000
asID:                     264915
IP address blocks:        2804:2fd8:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3f:74:d1:e9:bb:c8:19:31:28:bd:96:63:15:0d:83:ef:cf:01:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998C1B9397A86CDEC286CEC4DB5E599D5429D1EF
        Validity
            Not Before: Apr  4 13:09:17 2024 GMT
            Not After : Apr  3 13:14:17 2025 GMT
        Subject: CN=73A417D0FB80264DA2D3E6ABEB949249B3D2CCFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:d9:64:6f:89:c2:25:92:65:4d:5b:35:80:
                    73:c1:80:95:0c:84:01:d3:42:91:a0:11:cf:29:79:
                    cf:34:2e:8b:6b:b3:ac:28:1e:48:ec:f4:4c:de:5b:
                    f3:9c:0d:fc:b4:b7:98:43:a2:12:f1:06:f6:19:31:
                    6a:8e:e3:44:de:55:92:25:5d:94:86:dd:59:be:8e:
                    33:40:d9:21:9b:c0:e7:fa:19:59:78:2d:91:97:93:
                    47:a4:25:19:d4:4f:5e:5d:4d:0c:4a:fe:3e:29:5f:
                    1a:b3:45:1e:f5:2e:9b:0e:3b:9e:48:47:e6:25:37:
                    5f:15:90:45:13:26:76:48:0c:4c:50:de:35:63:a7:
                    7b:76:32:61:9a:aa:11:1a:92:d5:34:4e:81:70:7a:
                    ca:77:9b:b7:64:3d:01:82:01:6f:d1:5f:30:e8:f8:
                    dc:10:8b:45:0d:63:7d:71:75:2c:b9:b8:e4:a4:5b:
                    cb:96:ed:08:11:17:23:73:2f:cc:48:05:c1:5c:43:
                    02:2f:c9:3d:fb:d0:8c:65:f0:25:51:4e:bb:bd:3e:
                    77:42:f4:ec:f6:12:55:62:e9:b1:22:19:c1:76:06:
                    b5:b9:da:62:e7:e7:e9:98:f0:df:27:02:69:d6:a5:
                    43:aa:b3:0d:7e:43:f7:34:8d:de:05:65:0b:be:6a:
                    ca:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A4:17:D0:FB:80:26:4D:A2:D3:E6:AB:EB:94:92:49:B3:D2:CC:FA
            X509v3 Authority Key Identifier:
                keyid:99:8C:1B:93:97:A8:6C:DE:C2:86:CE:C4:DB:5E:59:9D:54:29:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/323830343a326664383a343030303a3a2f33342d3334203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:33:1d:e3:51:fa:d3:8f:15:3f:26:e8:ed:8a:2d:d4:01:
         5a:17:e6:98:a2:d8:96:fc:5b:a4:81:72:e7:5d:52:c5:33:8a:
         01:78:db:c5:45:e0:a4:9a:14:2c:7e:dc:3d:3c:3e:40:9e:0a:
         7b:19:32:1a:65:a7:e5:bb:14:a8:2f:20:12:75:5d:70:26:7c:
         97:dd:48:97:07:46:a9:6f:7e:93:15:26:de:b4:03:cd:32:68:
         88:c1:00:00:a4:bb:f3:fa:a1:4e:0f:4e:77:13:5d:fd:fc:ef:
         8e:d3:8d:c6:3e:31:4a:ca:b4:2a:e1:15:2b:c5:d9:98:3a:33:
         ea:76:b0:1f:70:66:41:5a:7e:cd:7f:5b:d0:2b:48:87:74:1b:
         8c:56:44:e1:2a:3d:c1:d8:0a:12:31:33:8c:1f:92:dc:02:9b:
         97:7f:21:3d:9e:7e:e1:9f:47:56:9f:27:05:9d:d6:4c:af:65:
         21:94:d5:9c:99:5b:c7:15:ce:39:a9:03:9f:49:52:9d:5a:a4:
         38:7f:b3:7c:3d:4c:bd:b9:c9:83:22:ac:ca:70:eb:c2:71:39:
         5a:64:92:82:f2:b2:83:24:32:45:e5:95:c4:b5:f2:81:c4:a7:
         cf:4d:9a:cc:97:ec:15:dd:5c:01:ae:c4:af:ff:4c:6e:31:b3:
         fb:97:1b:4e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAj900em7yBkxKL2WYxUNg+/PAaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk4QzFCOTM5N0E4NkNERUMyODZDRUM0REI1RTU5OUQ1
NDI5RDFFRjAeFw0yNDA0MDQxMzA5MTdaFw0yNTA0MDMxMzE0MTdaMDMxMTAvBgNV
BAMTKDczQTQxN0QwRkI4MDI2NERBMkQzRTZBQkVCOTQ5MjQ5QjNEMkNDRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9tlkb4nCJZJlTVs1gHPBgJUM
hAHTQpGgEc8pec80Lotrs6woHkjs9EzeW/OcDfy0t5hDohLxBvYZMWqO40TeVZIl
XZSG3Vm+jjNA2SGbwOf6GVl4LZGXk0ekJRnUT15dTQxK/j4pXxqzRR71LpsOO55I
R+YlN18VkEUTJnZIDExQ3jVjp3t2MmGaqhEaktU0ToFwesp3m7dkPQGCAW/RXzDo
+NwQi0UNY31xdSy5uOSkW8uW7QgRFyNzL8xIBcFcQwIvyT370Ixl8CVRTru9PndC
9Oz2ElVi6bEiGcF2BrW52mLn5+mY8N8nAmnWpUOqsw1+Q/c0jd4FZQu+asrdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUc6QX0PuAJk2i0+ar65SSSbPSzPowHwYDVR0j
BBgwFoAUmYwbk5eobN7Chs7E215ZnVQp0e8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUN6RVI2d0FnUnd2RVRNWmtvcmJxTHhNalhSeWNGTVlMbXBlR0t0Q0s3
a2MvMS85OThDMUI5Mzk3QTg2Q0RFQzI4NkNFQzREQjVFNTk5RDU0MjlEMUVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5OEMxQjkzOTdBODZDREVD
Mjg2Q0VDNERCNUU1OTlENTQyOUQxRUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDekVSNndBZ1J3dkVUTVprb3JicUx4TWpYUnljRk1ZTG1wZUdLdENLN2tjLzEv
MzIzODMwMzQzYTMyNjY2NDM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDM5MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEL9hAMA0GCSqGSIb3DQEBCwUA
A4IBAQBA7TMd41H6048VPybo7Yot1AFaF+aYotiW/FukgXLnXVLFM4oBeNvFReCk
mhQsftw9PD5Angp7GTIaZafluxSoLyASdV1wJnyX3UiXB0apb36TFSbetAPNMmiI
wQAApLvz+qFOD053E139/O+O043GPjFKyrQq4RUrxdmYOjPqdrAfcGZBWn7Nf1vQ
K0iHdBuMVkThKj3B2AoSMTOMH5LcApuXfyE9nn7hn0dWnycFndZMr2UhlNWcmVvH
Fc45qQOfSVKdWqQ4f7N8PUy9ucmDIqzKcOvCcTlaZJKC8rKDJDJF5ZXEtfKBxKfP
TZrMl+wV3VwBrsSv/0xuMbP7lxtO
-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:28 2024 by rpki-client on console-ams.rpki-client.org