Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa
File:                     323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa (raw, json)
Hash identifier:          v8TEHVL3NsvMkVEoYtFSLilxeswnc0e4WIcKpsxf6i8=
Subject key identifier:   96:CD:89:2E:5E:6D:53:C6:D1:D2:45:05:26:98:49:14:CF:F1:46:30
Certificate issuer:       /CN=69055FBEBF6785F771BFF701242EF920E00482FD
Certificate serial:       0A0BB36775C60B7AB57F4A1E91A18DE2A6E646B4
Authority key identifier: 69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa
Signing time:             Tue 30 Jul 2024 12:24:02 +0000
ROA not before:           Tue 30 Jul 2024 12:19:02 +0000
ROA not after:            Tue 29 Jul 2025 12:24:02 +0000
asID:                     268678
IP address blocks:        2804:54ec:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0b:b3:67:75:c6:0b:7a:b5:7f:4a:1e:91:a1:8d:e2:a6:e6:46:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69055FBEBF6785F771BFF701242EF920E00482FD
        Validity
            Not Before: Jul 30 12:19:02 2024 GMT
            Not After : Jul 29 12:24:02 2025 GMT
        Subject: CN=96CD892E5E6D53C6D1D2450526984914CFF14630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:c1:7e:7e:a0:e6:7d:f8:d0:d6:85:33:e8:
                    2e:d1:3a:a7:ee:77:19:2c:b7:30:8f:8d:7f:ad:6a:
                    f1:19:c9:0a:21:a6:c9:71:84:76:65:8a:b4:0f:d7:
                    32:49:de:ee:00:5b:69:03:b7:21:f4:d9:e6:f8:8e:
                    4e:b1:10:16:95:da:f6:47:f7:7e:6e:67:c8:8e:31:
                    6e:91:ee:ff:a8:f3:7d:a1:9c:4c:69:89:b2:4b:be:
                    b7:df:81:b2:8a:c6:4f:0c:c6:70:dc:94:e4:d0:22:
                    76:67:4d:98:6d:97:eb:69:0d:f7:28:c9:77:07:b1:
                    30:28:73:40:ec:23:fb:e1:83:03:1a:7a:6c:b0:7c:
                    3c:44:d3:b1:7a:ca:21:25:ed:30:69:e0:be:c3:13:
                    83:fd:4d:dd:9d:f1:65:77:3f:49:99:5d:52:5e:b3:
                    f1:af:97:68:e4:dc:7a:82:d0:18:b1:4f:f4:24:2b:
                    8f:96:b1:9f:39:80:13:08:43:b3:7b:8b:05:27:ef:
                    3c:af:15:cf:45:c9:c7:eb:e3:45:db:d0:be:e9:bd:
                    ed:21:50:ad:b0:12:97:30:67:d0:fc:3d:25:4f:ca:
                    3b:20:91:0f:87:6d:9b:99:d7:15:62:dc:f4:d2:4a:
                    8e:7c:dc:f9:a5:25:bd:7c:ee:b9:e9:ca:52:46:14:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CD:89:2E:5E:6D:53:C6:D1:D2:45:05:26:98:49:14:CF:F1:46:30
            X509v3 Authority Key Identifier:
                keyid:69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/69055FBEBF6785F771BFF701242EF920E00482FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b3:df:5f:56:78:d9:b0:d9:20:a8:0a:04:35:7c:54:1a:da:a9:
         55:59:4d:9c:27:25:c5:bd:d1:a8:91:b2:c6:4f:8e:1c:ab:0d:
         bf:50:96:0c:83:d9:84:03:92:28:d5:a4:5a:e3:70:e6:b4:42:
         61:a1:b6:c7:be:33:19:13:f8:e0:b0:8f:ca:ed:e6:af:08:cb:
         68:df:f7:00:ee:95:65:e2:9a:3b:d2:ef:30:f7:dc:72:74:46:
         98:b7:87:98:fd:86:ad:d2:96:fd:8b:73:bf:f6:6e:3c:a8:ed:
         e9:19:1a:95:08:ac:1d:8e:09:9d:e4:8f:75:c1:23:db:2f:c6:
         8d:5f:0f:c9:ca:3f:4e:fc:ed:6e:c7:21:47:d3:eb:ca:2e:ef:
         7f:a3:12:94:ba:40:0f:ab:9e:c0:8a:45:3b:0c:2e:45:9f:9a:
         21:23:63:b7:1a:f9:83:80:cc:f3:5c:a0:7a:13:e4:e0:ad:89:
         8c:0f:9e:ea:73:73:8a:89:96:28:52:4e:89:ed:4e:02:b5:5e:
         69:58:d3:1d:2c:bd:a0:c5:75:c4:b3:05:2c:5e:77:95:46:ce:
         4d:12:de:6c:0b:c8:f6:91:59:86:b4:58:64:4e:25:02:15:b7:
         19:0e:aa:8e:79:6f:2d:49:23:4b:70:17:3a:cf:6b:3c:82:bc:
         9e:fe:df:28
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCguzZ3XGC3q1f0oekaGN4qbmRrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkwNTVGQkVCRjY3ODVGNzcxQkZGNzAxMjQyRUY5MjBF
MDA0ODJGRDAeFw0yNDA3MzAxMjE5MDJaFw0yNTA3MjkxMjI0MDJaMDMxMTAvBgNV
BAMTKDk2Q0Q4OTJFNUU2RDUzQzZEMUQyNDUwNTI2OTg0OTE0Q0ZGMTQ2MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDcF+fqDmffjQ1oUz6C7ROqfu
dxkstzCPjX+tavEZyQohpslxhHZlirQP1zJJ3u4AW2kDtyH02eb4jk6xEBaV2vZH
935uZ8iOMW6R7v+o832hnExpibJLvrffgbKKxk8MxnDclOTQInZnTZhtl+tpDfco
yXcHsTAoc0DsI/vhgwMaemywfDxE07F6yiEl7TBp4L7DE4P9Td2d8WV3P0mZXVJe
s/Gvl2jk3HqC0BixT/QkK4+WsZ85gBMIQ7N7iwUn7zyvFc9Fycfr40Xb0L7pve0h
UK2wEpcwZ9D8PSVPyjsgkQ+HbZuZ1xVi3PTSSo583PmlJb187rnpylJGFPnnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUls2JLl5tU8bR0kUFJphJFM/xRjAwHwYDVR0j
BBgwFoAUaQVfvr9nhfdxv/cBJC75IOAEgv0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy
VHovMC82OTA1NUZCRUJGNjc4NUY3NzFCRkY3MDEyNDJFRjkyMEUwMDQ4MkZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5MDU1RkJFQkY2Nzg1Rjc3
MUJGRjcwMTI0MkVGOTIwRTAwNDgyRkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzAv
MzIzODMwMzQzYTM1MzQ2NTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVOzAMA0GCSqGSIb3DQEBCwUA
A4IBAQCz319WeNmw2SCoCgQ1fFQa2qlVWU2cJyXFvdGokbLGT44cqw2/UJYMg9mE
A5Io1aRa43DmtEJhobbHvjMZE/jgsI/K7eavCMto3/cA7pVl4po70u8w99xydEaY
t4eY/Yat0pb9i3O/9m48qO3pGRqVCKwdjgmd5I91wSPbL8aNXw/Jyj9O/O1uxyFH
0+vKLu9/oxKUukAPq57AikU7DC5Fn5ohI2O3GvmDgMzzXKB6E+TgrYmMD57qc3OK
iZYoUk6J7U4CtV5pWNMdLL2gxXXEswUsXneVRs5NEt5sC8j2kVmGtFhkTiUCFbcZ
DqqOeW8tSSNLcBc6z2s8grye/t8o
-----END CERTIFICATE-----
Generated at Wed Oct 30 04:37:28 2024 by rpki-client on console-ams.rpki-client.org