Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa
File:                     323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa (raw, json)
Hash identifier:          3aVd7FWSz+ktA/lGXX42NBvtH4eDcHLl/sfrutGLjLI=
Subject key identifier:   6B:FD:09:13:7A:AB:80:B0:4D:42:49:4B:3F:30:ED:C8:61:BD:F8:04
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       11B37BFAA8B38092273EF76A1A9B93DC910EFA44
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:45 +0000
ROA not before:           Sat 13 Apr 2024 13:32:45 +0000
ROA not after:            Sat 12 Apr 2025 13:37:45 +0000
asID:                     267027
IP address blocks:        2804:4708:c000::/35 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b3:7b:fa:a8:b3:80:92:27:3e:f7:6a:1a:9b:93:dc:91:0e:fa:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:45 2024 GMT
            Not After : Apr 12 13:37:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:b7:a8:8a:80:1a:9d:e9:85:05:18:45:75:
                    42:62:1a:11:7e:dc:3e:2e:b7:e0:82:31:9d:0b:03:
                    34:02:66:9b:09:74:d4:ed:7f:20:90:62:f4:43:90:
                    30:e4:c6:53:3b:92:21:2e:37:60:fd:b6:1b:03:87:
                    9b:90:c3:46:bc:13:2e:ed:31:26:72:03:e9:5a:5c:
                    45:22:c9:a4:8f:55:c3:cc:0f:cd:12:34:91:87:ea:
                    86:87:6a:ee:be:05:18:19:44:d6:3a:27:52:b1:bc:
                    c3:1f:8c:53:f1:22:44:11:54:02:9b:7a:c5:1b:6d:
                    b6:1a:7f:07:3e:14:54:30:f7:85:b4:d7:e1:22:61:
                    b1:af:59:1d:e7:65:3f:8c:d3:f7:9f:d1:ca:14:c4:
                    4f:63:cc:12:f4:73:6f:b1:2d:06:d0:40:0c:c8:55:
                    5e:0c:77:21:08:ff:a4:fa:a3:98:c5:61:38:60:f7:
                    33:d2:78:6b:e4:81:7b:1f:57:2f:0b:bd:f1:92:4c:
                    b1:62:0f:5c:06:78:db:28:fe:dc:f3:0a:f9:26:03:
                    76:fe:a3:b0:83:96:b9:a9:64:f5:2f:2e:0f:e2:4c:
                    1e:02:f9:48:a7:12:3a:54:06:c9:d8:40:06:b1:5a:
                    46:6b:95:f3:cd:9f:08:fb:66:d6:73:98:54:c3:19:
                    94:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FD:09:13:7A:AB:80:B0:4D:42:49:4B:3F:30:ED:C8:61:BD:F8:04
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         de:aa:57:05:b4:a6:69:ab:39:98:6f:ec:1a:57:cd:9a:a4:fa:
         e5:a9:34:6d:9c:f0:8c:bd:2d:3a:b8:3e:9e:29:a9:07:81:f9:
         67:70:3f:1d:c9:41:0d:42:14:e2:b1:e3:ce:c9:cc:80:ce:7e:
         fd:35:81:b5:61:e6:1e:43:5d:21:a9:94:39:36:2a:f3:9e:9b:
         23:5b:3f:0c:55:8b:3d:6c:5c:0d:7d:a0:d4:97:a5:17:4c:70:
         04:a1:02:b8:97:23:42:f8:86:d6:0f:9b:89:c6:74:58:e1:35:
         54:d1:e9:96:6e:21:e1:0f:be:9b:0b:72:44:c6:c5:d8:20:bb:
         ca:8c:c5:a1:4a:5f:a1:de:ec:da:05:23:dd:56:28:c9:45:37:
         90:b7:2c:62:ce:6c:65:85:75:0c:08:cd:29:e5:e8:81:2e:d6:
         06:2b:36:71:0f:05:c6:e2:b7:a5:4b:61:8c:f6:41:be:06:23:
         82:23:84:4d:d2:20:85:36:b5:db:49:fd:ec:66:c0:00:b5:23:
         e5:e7:b6:dc:93:e5:92:49:24:1c:43:7f:1f:43:b9:bf:20:02:
         36:1e:8e:58:cb:0c:b4:7f:a9:fb:e8:7d:a5:ca:51:7f:de:ee:
         eb:74:50:90:eb:12:e0:17:8c:8a:36:57:33:86:a9:ff:eb:03:
         e2:a9:98:71
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUEbN7+qizgJInPvdqGpuT3JEO+kQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM3MzU5NjZEMUQ4NzVFRkVEQjgwQjU5NjFFNDUyNDlF
RjFGMEVFODAeFw0yNDA0MTMxMzMyNDVaFw0yNTA0MTIxMzM3NDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzA3OUI3QTg4QTgwMUE5REU5
ODUwNTE4NDU3NTQyNjIxQTExN0VEQzNFMkVCN0UwODIzMTlEMEIwMzM0MDI2NjlC
MDk3NEQ0RUQ3RjIwOTA2MkY0NDM5MDMwRTRDNjUzM0I5MjIxMkUzNzYwRkRCNjFC
MDM4NzlCOTBDMzQ2QkMxMzJFRUQzMTI2NzIwM0U5NUE1QzQ1MjJDOUE0OEY1NUMz
Q0MwRkNEMTIzNDkxODdFQTg2ODc2QUVFQkUwNTE4MTk0NEQ2M0EyNzUyQjFCQ0Mz
MUY4QzUzRjEyMjQ0MTE1NDAyOUI3QUM1MUI2REI2MUE3RjA3M0UxNDU0MzBGNzg1
QjREN0UxMjI2MUIxQUY1OTFERTc2NTNGOENEM0Y3OUZEMUNBMTRDNDRGNjNDQzEy
RjQ3MzZGQjEyRDA2RDA0MDBDQzg1NTVFMEM3NzIxMDhGRkE0RkFBMzk4QzU2MTM4
NjBGNzMzRDI3ODZCRTQ4MTdCMUY1NzJGMEJCREYxOTI0Q0IxNjIwRjVDMDY3OERC
MjhGRURDRjMwQUY5MjYwMzc2RkVBM0IwODM5NkI5QTk2NEY1MkYyRTBGRTI0QzFF
MDJGOTQ4QTcxMjNBNTQwNkM5RDg0MDA2QjE1QTQ2NkI5NUYzQ0Q5RjA4RkI2NkQ2
NzM5ODU0QzMxOTk0RkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwHm3qIqAGp3phQUYRXVCYhoRftw+LrfggjGdCwM0AmabCXTU7X8g
kGL0Q5Aw5MZTO5IhLjdg/bYbA4ebkMNGvBMu7TEmcgPpWlxFIsmkj1XDzA/NEjSR
h+qGh2ruvgUYGUTWOidSsbzDH4xT8SJEEVQCm3rFG222Gn8HPhRUMPeFtNfhImGx
r1kd52U/jNP3n9HKFMRPY8wS9HNvsS0G0EAMyFVeDHchCP+k+qOYxWE4YPcz0nhr
5IF7H1cvC73xkkyxYg9cBnjbKP7c8wr5JgN2/qOwg5a5qWT1Ly4P4kweAvlIpxI6
VAbJ2EAGsVpGa5XzzZ8I+2bWc5hUwxmU/QIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FGv9CRN6q4CwTUJJSz8w7chhvfgEMB8GA1UdIwQYMBaAFJxzWWbR2HXv7bgLWWHk
UknvHw7oMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV1dURacWdMcVlQb3RF
Y2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzEvOUM3MzU5NjZEMUQ4NzVF
RkVEQjgwQjU5NjFFNDUyNDlFRjFGMEVFOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS85QzczNTk2NkQxRDg3NUVGRURCODBCNTk2MUU0NTI0OUVGMUYw
RUU4LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81dXVEWnFnTHFZUG90RWNlQnNt
Y1M2U2VNZHdweXFYVnVhaGh2cmFXdEpZei8xLzMyMzgzMDM0M2EzNDM3MzAzODNh
NjMzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMjM2MzczMDMyMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgUoBEcIwDANBgkqhkiG9w0BAQsFAAOCAQEA3qpXBbSmaas5mG/sGlfN
mqT65ak0bZzwjL0tOrg+nimpB4H5Z3A/HclBDUIU4rHjzsnMgM5+/TWBtWHmHkNd
IamUOTYq856bI1s/DFWLPWxcDX2g1JelF0xwBKECuJcjQviG1g+bicZ0WOE1VNHp
lm4h4Q++mwtyRMbF2CC7yozFoUpfod7s2gUj3VYoyUU3kLcsYs5sZYV1DAjNKeXo
gS7WBis2cQ8FxuK3pUthjPZBvgYjgiOETdIghTa120n97GbAALUj5ee23JPlkkkk
HEN/H0O5vyACNh6OWMsMtH+p++h9pcpRf97u63RQkOsS4BeMijZXM4ap/+sD4qmY
cQ==
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org