Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa
File:                     323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa (raw, json)
Hash identifier:          K4NO78XQCsLDJWfNU+9d8F9Bfgn8mdTVdHIACRXwQVo=
Subject key identifier:   46:E1:6F:1C:69:5F:CD:BB:5D:1E:9E:D3:F1:4C:A2:1F:00:F9:91:67
Certificate issuer:       /CN=E16D74041965C3729D5552BEFB00E767BB091F4E
Certificate serial:       68A2F859A79E88E646A0BD5D54BF9CB1A3BF8718
Authority key identifier: E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa
Signing time:             Thu 04 Apr 2024 07:20:45 +0000
ROA not before:           Thu 04 Apr 2024 07:15:45 +0000
ROA not after:            Thu 03 Apr 2025 07:20:45 +0000
asID:                     268678
IP address blocks:        2804:54ec:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a2:f8:59:a7:9e:88:e6:46:a0:bd:5d:54:bf:9c:b1:a3:bf:87:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16D74041965C3729D5552BEFB00E767BB091F4E
        Validity
            Not Before: Apr  4 07:15:45 2024 GMT
            Not After : Apr  3 07:20:45 2025 GMT
        Subject: CN=46E16F1C695FCDBB5D1E9ED3F14CA21F00F99167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:f4:a9:f9:e6:1e:5a:3b:4b:f1:86:1d:98:
                    59:ac:71:ce:cf:ce:e9:3e:ab:60:64:6d:d9:fd:e5:
                    dd:68:1e:a1:23:43:7a:a8:02:01:7c:58:44:59:48:
                    d9:84:46:1c:df:00:12:b5:3a:ff:16:c5:c0:e9:b3:
                    52:53:03:a4:03:60:2d:87:de:ee:1b:6f:ef:2a:ab:
                    15:af:5a:de:d2:86:b0:17:73:e1:84:90:5f:0c:1f:
                    0a:1a:76:fc:16:0d:a4:9c:45:6d:95:ef:1b:56:07:
                    84:d1:88:b2:f6:32:cc:88:9d:76:8f:37:b4:2b:3e:
                    3d:7c:22:67:f4:ce:9e:25:6c:86:c4:6b:41:13:07:
                    e7:9f:c0:3c:b2:59:db:1c:d4:8b:ef:56:a3:4f:48:
                    b6:91:dd:03:af:2a:cb:48:bb:43:c7:74:e2:ff:81:
                    11:e5:25:18:e1:36:1e:41:bc:11:39:a0:d5:2a:98:
                    83:e0:27:c1:5a:ff:72:f8:55:fd:4f:1a:b1:ad:6f:
                    0f:20:85:f0:b2:f0:61:3c:3f:e1:d3:6d:15:f9:b3:
                    cb:d1:1e:7e:7d:47:f2:ee:26:91:7a:e2:e4:05:e5:
                    5c:c5:bc:9a:0e:c6:14:67:80:4f:24:69:dd:64:08:
                    84:fe:fb:ff:1a:4a:fc:ef:60:87:b8:ee:28:ed:b3:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E1:6F:1C:69:5F:CD:BB:5D:1E:9E:D3:F1:4C:A2:1F:00:F9:91:67
            X509v3 Authority Key Identifier:
                keyid:E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:4d:29:2f:16:0c:79:d7:8e:20:0c:ac:c7:18:44:3c:89:a9:
         52:f5:49:6a:05:fb:02:4f:81:39:a8:f2:56:3c:a1:78:55:ab:
         b3:2b:aa:e8:53:06:f8:65:b1:31:24:91:47:7e:aa:5f:86:30:
         05:f5:40:6a:05:7f:7e:74:c4:14:07:6b:4a:21:77:e4:3b:8c:
         5b:ab:0c:3e:25:5d:c9:ff:0a:8e:bf:c3:4a:82:2c:aa:c1:ac:
         62:ae:6d:d7:00:dd:f0:ba:92:11:ec:21:fd:fc:2b:77:ee:e0:
         21:fe:66:b0:d8:56:cc:66:f1:11:9c:44:bd:37:26:1b:75:ad:
         59:e0:2d:7a:b3:81:0c:e5:e9:d8:b3:e8:12:d7:1a:fc:e5:20:
         ec:d5:b6:67:0f:f1:d0:9c:50:fe:90:5c:14:2b:65:00:bc:b9:
         96:3d:2f:55:9d:00:30:31:5e:13:30:28:56:8e:9f:ab:66:90:
         78:f2:92:8d:42:9e:b8:e3:9c:a8:0e:b3:9a:0b:72:56:b5:59:
         ef:09:b6:d1:13:d0:1e:97:9c:32:f4:03:a1:a2:73:97:dc:99:
         13:0b:0c:83:b0:1a:4d:74:5c:1c:d9:42:f9:9c:21:c2:6d:69:
         df:e2:b9:f9:77:ff:d6:44:77:90:6e:3e:90:a2:ea:ee:e3:7d:
         f0:5d:37:72
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUaKL4WaeeiOZGoL1dVL+csaO/hxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE2RDc0MDQxOTY1QzM3MjlENTU1MkJFRkIwMEU3NjdC
QjA5MUY0RTAeFw0yNDA0MDQwNzE1NDVaFw0yNTA0MDMwNzIwNDVaMDMxMTAvBgNV
BAMTKDQ2RTE2RjFDNjk1RkNEQkI1RDFFOUVEM0YxNENBMjFGMDBGOTkxNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyPSp+eYeWjtL8YYdmFmscc7P
zuk+q2Bkbdn95d1oHqEjQ3qoAgF8WERZSNmERhzfABK1Ov8WxcDps1JTA6QDYC2H
3u4bb+8qqxWvWt7ShrAXc+GEkF8MHwoadvwWDaScRW2V7xtWB4TRiLL2MsyInXaP
N7QrPj18Imf0zp4lbIbEa0ETB+efwDyyWdsc1IvvVqNPSLaR3QOvKstIu0PHdOL/
gRHlJRjhNh5BvBE5oNUqmIPgJ8Fa/3L4Vf1PGrGtbw8ghfCy8GE8P+HTbRX5s8vR
Hn59R/LuJpF64uQF5VzFvJoOxhRngE8kad1kCIT++/8aSvzvYIe47ijtszZ5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQURuFvHGlfzbtdHp7T8UyiHwD5kWcwHwYDVR0j
BBgwFoAU4W10BBllw3KdVVK++wDnZ7sJH04wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy
VHovMS9FMTZENzQwNDE5NjVDMzcyOUQ1NTUyQkVGQjAwRTc2N0JCMDkxRjRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxNkQ3NDA0MTk2NUMzNzI5
RDU1NTJCRUZCMDBFNzY3QkIwOTFGNEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzEv
MzIzODMwMzQzYTM1MzQ2NTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVOxAMA0GCSqGSIb3DQEBCwUA
A4IBAQAmTSkvFgx5144gDKzHGEQ8ialS9UlqBfsCT4E5qPJWPKF4VauzK6roUwb4
ZbExJJFHfqpfhjAF9UBqBX9+dMQUB2tKIXfkO4xbqww+JV3J/wqOv8NKgiyqwaxi
rm3XAN3wupIR7CH9/Ct37uAh/maw2FbMZvERnES9NyYbda1Z4C16s4EM5enYs+gS
1xr85SDs1bZnD/HQnFD+kFwUK2UAvLmWPS9VnQAwMV4TMChWjp+rZpB48pKNQp64
45yoDrOaC3JWtVnvCbbRE9Ael5wy9AOhonOX3JkTCwyDsBpNdFwc2UL5nCHCbWnf
4rn5d//WRHeQbj6Qouru433wXTdy
-----END CERTIFICATE-----
Generated at Fri Jul 26 10:21:37 2024 by rpki-client on console-fra.rpki-client.org