Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/323830343a373030633a3a2f33322d313238203d3e20323730373033.roa
File:                     323830343a373030633a3a2f33322d313238203d3e20323730373033.roa (raw, json)
Hash identifier:          5evJNvQyfhXLJQ7yEsHxc1Bo7R6m0o3VvhTuEcXOvDI=
Subject key identifier:   72:A1:85:54:9A:3E:36:B9:46:CD:65:49:A2:26:1A:04:08:16:E3:8D
Certificate issuer:       /CN=7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C
Certificate serial:       02BB669769C77A741C64BDF756A553CC6E92E807
Authority key identifier: 7F:3F:61:BF:6C:2E:81:A3:DC:FB:31:6F:AA:5B:38:13:7C:AE:CA:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/323830343a373030633a3a2f33322d313238203d3e20323730373033.roa
Signing time:             Tue 06 Aug 2024 17:32:59 +0000
ROA not before:           Tue 06 Aug 2024 17:27:59 +0000
ROA not after:            Tue 05 Aug 2025 17:32:59 +0000
asID:                     270703
IP address blocks:        2804:700c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bb:66:97:69:c7:7a:74:1c:64:bd:f7:56:a5:53:cc:6e:92:e8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C
        Validity
            Not Before: Aug  6 17:27:59 2024 GMT
            Not After : Aug  5 17:32:59 2025 GMT
        Subject: CN=72A185549A3E36B946CD6549A2261A040816E38D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:80:86:2f:eb:48:1e:c8:e0:c7:65:b6:31:bd:
                    99:ff:b1:85:dd:48:03:29:f3:bb:a5:46:47:83:11:
                    ef:bb:68:1c:a8:02:4f:ce:3d:28:fb:9d:5d:65:5f:
                    98:8c:ff:dc:c3:b6:3a:e6:7f:62:e4:1a:65:af:1e:
                    ee:ef:8f:61:ea:9d:f8:c2:ee:46:60:87:8a:85:e8:
                    b9:c5:91:9c:ce:5a:77:c4:56:eb:1c:98:fb:ec:c2:
                    c6:c9:35:89:d5:c6:be:a6:42:0d:d8:3d:19:60:40:
                    ee:bd:0e:ae:b8:b4:47:b7:42:9b:16:c4:b9:fc:b9:
                    ed:6b:13:f1:a7:b4:09:e9:59:90:ec:d0:d5:1c:c1:
                    d0:28:71:95:a7:e3:17:44:ac:a9:21:16:10:11:94:
                    10:36:97:5b:3f:7a:7a:18:10:f2:6b:4c:22:2b:45:
                    0b:09:99:68:bb:a4:7c:3f:e0:b0:b4:82:86:6f:cf:
                    e7:47:16:40:e8:75:c9:af:4f:32:d6:a1:96:00:fc:
                    a7:45:0b:7e:da:e4:9b:6b:aa:a6:0b:72:46:d7:72:
                    ed:e2:6e:de:6e:0a:42:99:bc:f9:cb:07:5c:2f:0f:
                    10:b6:cb:7d:a1:a4:93:75:d6:62:4c:15:e7:73:83:
                    90:c5:ba:fb:b1:6c:2c:cd:6c:5c:99:30:fd:41:82:
                    05:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A1:85:54:9A:3E:36:B9:46:CD:65:49:A2:26:1A:04:08:16:E3:8D
            X509v3 Authority Key Identifier:
                keyid:7F:3F:61:BF:6C:2E:81:A3:DC:FB:31:6F:AA:5B:38:13:7C:AE:CA:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/323830343a373030633a3a2f33322d313238203d3e20323730373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:700c::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:00:53:49:38:8b:32:93:2c:81:e5:da:38:f9:82:cc:65:d7:
         71:af:ae:6f:1e:29:ff:b3:fc:90:64:d2:8d:49:7b:0e:a9:d3:
         e6:4b:a7:f5:c7:38:99:e9:1c:d7:10:29:15:3e:d8:a4:44:da:
         f8:0b:c7:d6:b8:98:51:23:fe:f6:09:7f:81:a6:6f:fe:43:22:
         77:66:be:76:98:71:d8:94:77:48:3b:02:da:f9:5b:e8:f5:8c:
         5c:6d:40:a8:90:a2:de:a5:13:5b:e5:64:44:97:ee:a3:07:a0:
         8d:ee:75:97:be:e8:68:25:5a:26:ce:b1:d5:54:2f:93:1b:7b:
         72:f6:cd:cf:7d:ac:39:05:7f:7e:e9:c7:68:7f:c1:56:4a:dc:
         b8:d5:1f:a7:e5:56:51:f1:3e:9a:08:21:1d:a6:c8:f9:f1:fa:
         ff:7c:93:cb:0f:2e:46:07:23:b3:5f:cb:6f:15:fa:8f:bf:18:
         c1:d3:95:9e:84:0c:92:75:f2:23:95:d6:7a:a1:6d:b7:d3:53:
         03:6e:30:64:3d:c2:87:c0:d6:7e:9c:c2:b0:4a:38:07:88:4b:
         85:56:3b:aa:b3:b4:0b:ed:d0:1a:51:5b:e0:5c:94:6c:c1:d8:
         9b:7c:8e:94:cf:10:e9:3e:7c:27:1d:ac:f9:82:19:9f:d2:a1:
         6b:e3:02:c6
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUArtml2nHenQcZL33VqVTzG6S6AcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzRjYxQkY2QzJFODFBM0RDRkIzMTZGQUE1QjM4MTM3
Q0FFQ0ExQzAeFw0yNDA4MDYxNzI3NTlaFw0yNTA4MDUxNzMyNTlaMDMxMTAvBgNV
BAMTKDcyQTE4NTU0OUEzRTM2Qjk0NkNENjU0OUEyMjYxQTA0MDgxNkUzOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxgIYv60geyODHZbYxvZn/sYXd
SAMp87ulRkeDEe+7aByoAk/OPSj7nV1lX5iM/9zDtjrmf2LkGmWvHu7vj2HqnfjC
7kZgh4qF6LnFkZzOWnfEVuscmPvswsbJNYnVxr6mQg3YPRlgQO69Dq64tEe3QpsW
xLn8ue1rE/GntAnpWZDs0NUcwdAocZWn4xdErKkhFhARlBA2l1s/enoYEPJrTCIr
RQsJmWi7pHw/4LC0goZvz+dHFkDodcmvTzLWoZYA/KdFC37a5JtrqqYLckbXcu3i
bt5uCkKZvPnLB1wvDxC2y32hpJN11mJMFedzg5DFuvuxbCzNbFyZMP1BggXDAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUcqGFVJo+NrlGzWVJoiYaBAgW440wHwYDVR0j
BBgwFoAUfz9hv2wugaPc+zFvqls4E3yuyhwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVaaTlSV3M3aDFVQ0xQV0h0b2ZNUmR2WVJIWEZ5OHdBZ0RlV0FtcmI0
SFYvMC83RjNGNjFCRjZDMkU4MUEzRENGQjMxNkZBQTVCMzgxMzdDQUVDQTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGM0Y2MUJGNkMyRTgxQTNE
Q0ZCMzE2RkFBNUIzODEzN0NBRUNBMUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1Wmk5UldzN2gxVUNMUFdIdG9mTVJkdllSSFhGeTh3QWdEZVdBbXJiNEhWLzAv
MzIzODMwMzQzYTM3MzAzMDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHAMMA0GCSqGSIb3DQEBCwUAA4IBAQCEAFNJ
OIsykyyB5do4+YLMZddxr65vHin/s/yQZNKNSXsOqdPmS6f1xziZ6RzXECkVPtik
RNr4C8fWuJhRI/72CX+Bpm/+QyJ3Zr52mHHYlHdIOwLa+Vvo9YxcbUCokKLepRNb
5WREl+6jB6CN7nWXvuhoJVomzrHVVC+TG3ty9s3Pfaw5BX9+6cdof8FWSty41R+n
5VZR8T6aCCEdpsj58fr/fJPLDy5GByOzX8tvFfqPvxjB05WehAySdfIjldZ6oW23
01MDbjBkPcKHwNZ+nMKwSjgHiEuFVjuqs7QL7dAaUVvgXJRswdibfI6UzxDpPnwn
Haz5ghmf0qFr4wLG
-----END CERTIFICATE-----
Generated at Thu Nov 14 12:27:54 2024 by rpki-client on console-fra.rpki-client.org