Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/323830343a353063303a3a2f33322d3332203d3e20323638343038.roa
File:                     323830343a353063303a3a2f33322d3332203d3e20323638343038.roa (raw, json)
Hash identifier:          3isOT5/KbRfsla4YcvPa9hHWS52m6ZIhgUQvRt+Z8PY=
Subject key identifier:   0C:A3:31:4E:8D:FC:8F:51:67:C1:8A:8B:D1:D3:43:00:8D:BF:DB:5D
Certificate issuer:       /CN=35032C100F6D77D0004BCA943283FCAEF246335A
Certificate serial:       23A05D0A138019A7881FF1E203D976AB667B7419
Authority key identifier: 35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/323830343a353063303a3a2f33322d3332203d3e20323638343038.roa
Signing time:             Thu 04 Apr 2024 22:42:16 +0000
ROA not before:           Thu 04 Apr 2024 22:37:16 +0000
ROA not after:            Thu 03 Apr 2025 22:42:16 +0000
asID:                     268408
IP address blocks:        2804:50c0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a0:5d:0a:13:80:19:a7:88:1f:f1:e2:03:d9:76:ab:66:7b:74:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35032C100F6D77D0004BCA943283FCAEF246335A
        Validity
            Not Before: Apr  4 22:37:16 2024 GMT
            Not After : Apr  3 22:42:16 2025 GMT
        Subject: CN=0CA3314E8DFC8F5167C18A8BD1D343008DBFDB5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9a:7a:48:89:cb:e0:75:43:49:c0:7d:93:8a:
                    43:14:d5:7a:4a:7c:3f:b4:b6:9d:bb:2e:0c:65:e3:
                    f6:89:c4:b8:9e:9f:11:6b:4c:9e:30:23:25:2b:19:
                    ac:5a:71:27:3d:e5:ea:84:cd:73:80:74:80:ff:4b:
                    86:fc:62:c0:f6:5a:1b:b4:b4:3b:72:d1:b1:25:8c:
                    23:36:5f:20:25:9f:d6:a7:13:23:39:47:14:b8:a1:
                    8d:26:fd:aa:e9:ec:0d:9e:1c:49:f7:6f:35:2f:ff:
                    7e:05:06:f6:c6:5f:66:29:48:ec:43:97:92:2f:6b:
                    fe:27:d8:b5:b4:d3:58:86:11:e0:38:7b:f8:ab:8a:
                    de:47:32:07:2d:4a:dc:88:0b:b3:b0:21:08:d1:3b:
                    b2:b4:77:f3:aa:be:02:a2:5a:ae:f6:c5:fe:24:1c:
                    99:e7:0c:70:ef:88:76:a0:7a:10:15:c5:89:16:b7:
                    51:61:c4:ff:97:11:ae:9d:7f:c7:e1:ec:89:e0:ef:
                    ee:c9:17:03:bb:b4:fc:a2:d9:a7:2a:76:bb:f3:ec:
                    33:c3:9b:56:a5:2f:22:e5:7a:00:e9:ad:33:b8:2d:
                    48:46:c5:8f:21:f3:d7:82:06:ee:ab:8f:79:9d:a1:
                    bc:0e:e9:f3:85:fd:10:c4:7c:c9:11:e1:db:e6:39:
                    66:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A3:31:4E:8D:FC:8F:51:67:C1:8A:8B:D1:D3:43:00:8D:BF:DB:5D
            X509v3 Authority Key Identifier:
                keyid:35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/35032C100F6D77D0004BCA943283FCAEF246335A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/323830343a353063303a3a2f33322d3332203d3e20323638343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:d8:e5:43:64:e5:73:66:7e:77:76:b8:8d:78:5d:84:4a:c1:
         21:33:83:59:02:2f:c2:0f:1e:59:36:25:29:5c:c6:6c:fd:7f:
         5d:cb:9b:8d:16:42:9c:95:f6:cd:fb:33:48:d2:93:12:39:4c:
         b6:fe:6f:d1:64:60:aa:15:36:b5:02:71:2f:13:2d:05:9c:42:
         ff:2d:49:3e:7f:d8:c5:3a:23:c7:8b:8e:27:45:6b:01:8e:d3:
         7b:9b:d0:65:88:2d:7d:cc:af:1e:3f:75:8f:b3:46:d4:b0:50:
         be:02:90:78:fb:7d:8c:5c:0d:0d:08:35:55:4b:9a:40:eb:05:
         40:c4:6c:5b:cf:85:98:12:2b:5c:66:46:fe:fc:7b:c5:de:22:
         72:2c:5b:e8:ea:9d:24:4a:a9:53:26:e2:bb:01:c9:3e:be:17:
         9b:65:81:83:69:72:d4:41:53:ea:f8:d2:c5:e3:d3:91:b8:c7:
         cf:1b:88:c4:06:76:63:b4:4e:54:1f:5b:47:8e:36:dc:d3:e5:
         21:d8:e2:a2:99:8c:1d:de:7a:5d:80:80:ea:42:79:1f:5c:e5:
         04:ff:22:bc:0e:53:2d:7d:1b:79:d0:5c:76:a4:f6:d7:01:13:
         6f:91:51:09:c7:1d:c9:ad:b0:fe:ca:45:7e:1f:55:a2:3b:8d:
         8d:c7:0c:7f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUI6BdChOAGaeIH/HiA9l2q2Z7dBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwMzJDMTAwRjZENzdEMDAwNEJDQTk0MzI4M0ZDQUVG
MjQ2MzM1QTAeFw0yNDA0MDQyMjM3MTZaFw0yNTA0MDMyMjQyMTZaMDMxMTAvBgNV
BAMTKDBDQTMzMTRFOERGQzhGNTE2N0MxOEE4QkQxRDM0MzAwOERCRkRCNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpmnpIicvgdUNJwH2TikMU1XpK
fD+0tp27Lgxl4/aJxLienxFrTJ4wIyUrGaxacSc95eqEzXOAdID/S4b8YsD2Whu0
tDty0bEljCM2XyAln9anEyM5RxS4oY0m/arp7A2eHEn3bzUv/34FBvbGX2YpSOxD
l5Iva/4n2LW001iGEeA4e/irit5HMgctStyIC7OwIQjRO7K0d/OqvgKiWq72xf4k
HJnnDHDviHagehAVxYkWt1FhxP+XEa6df8fh7Ing7+7JFwO7tPyi2acqdrvz7DPD
m1alLyLlegDprTO4LUhGxY8h89eCBu6rj3mdobwO6fOF/RDEfMkR4dvmOWa5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUDKMxTo38j1FnwYqL0dNDAI2/210wHwYDVR0j
BBgwFoAUNQMsEA9td9AAS8qUMoP8rvJGM1owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVNld2t2NkJWSlVGelhIOWsyNVg1alczaWFYRHRaQVF4Z1V0dUd5RGlQ
UWsvMS8zNTAzMkMxMDBGNkQ3N0QwMDA0QkNBOTQzMjgzRkNBRUYyNDYzMzVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MDMyQzEwMEY2RDc3RDAw
MDRCQ0E5NDMyODNGQ0FFRjI0NjMzNUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVTZXdrdjZCVkpVRnpYSDlrMjVYNWpXM2lhWER0WkFReGdVdHVHeURpUFFrLzEv
MzIzODMwMzQzYTM1MzA2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzQzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARQwDANBgkqhkiG9w0BAQsFAAOCAQEASNjlQ2Tl
c2Z+d3a4jXhdhErBITODWQIvwg8eWTYlKVzGbP1/XcubjRZCnJX2zfszSNKTEjlM
tv5v0WRgqhU2tQJxLxMtBZxC/y1JPn/YxTojx4uOJ0VrAY7Te5vQZYgtfcyvHj91
j7NG1LBQvgKQePt9jFwNDQg1VUuaQOsFQMRsW8+FmBIrXGZG/vx7xd4icixb6Oqd
JEqpUybiuwHJPr4Xm2WBg2ly1EFT6vjSxePTkbjHzxuIxAZ2Y7ROVB9bR4423NPl
IdjiopmMHd56XYCA6kJ5H1zlBP8ivA5TLX0bedBcdqT21wETb5FRCccdya2w/spF
fh9VojuNjccMfw==
-----END CERTIFICATE-----
Generated at Thu Sep 19 09:37:20 2024 by rpki-client on console-ams.rpki-client.org