Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/323830343a366562383a343030303a3a2f33342d3334203d3e20323730363135.roa
File:                     323830343a366562383a343030303a3a2f33342d3334203d3e20323730363135.roa (raw, json)
Hash identifier:          d1nL2DhKH9fbAz6MLiyhLKZmbFVWmZDo5US1hdGlLn0=
Subject key identifier:   F8:08:C1:BC:7B:07:42:96:7E:7E:BA:A7:07:0D:1D:AB:AF:80:B4:CD
Certificate issuer:       /CN=128B17FABA22689FAA4769B68394A401659496A7
Certificate serial:       3ABBA9C08AC680D047A0D82D0EBB9BD54F445A0C
Authority key identifier: 12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/323830343a366562383a343030303a3a2f33342d3334203d3e20323730363135.roa
Signing time:             Thu 04 Apr 2024 16:07:19 +0000
ROA not before:           Thu 04 Apr 2024 16:02:19 +0000
ROA not after:            Thu 03 Apr 2025 16:07:19 +0000
asID:                     270615
IP address blocks:        2804:6eb8:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bb:a9:c0:8a:c6:80:d0:47:a0:d8:2d:0e:bb:9b:d5:4f:44:5a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128B17FABA22689FAA4769B68394A401659496A7
        Validity
            Not Before: Apr  4 16:02:19 2024 GMT
            Not After : Apr  3 16:07:19 2025 GMT
        Subject: CN=F808C1BC7B0742967E7EBAA7070D1DABAF80B4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:75:d8:06:91:46:e1:15:a3:bb:60:5c:ca:
                    81:10:f2:3d:5f:3a:99:3d:75:2f:e9:22:ea:36:21:
                    1e:5c:44:5c:7d:d8:84:b7:07:08:bc:a5:78:ae:f5:
                    5a:98:2a:bd:40:f9:3e:34:a0:59:99:4e:a8:39:bc:
                    eb:3c:07:fb:69:9f:7e:f1:9f:d7:17:26:35:7b:bf:
                    86:87:95:f9:45:8e:9a:90:1a:8d:e1:f8:39:27:f5:
                    f1:27:10:60:e2:60:30:94:99:ec:92:31:b9:6c:59:
                    3e:a9:bd:29:21:c2:2c:bb:47:ba:56:29:15:cc:af:
                    05:d2:f4:4b:d9:cb:8b:f1:6d:48:56:55:78:e7:0f:
                    7a:33:88:47:da:e0:8e:94:c7:fb:16:59:3e:58:8a:
                    6f:f0:27:b4:70:87:0d:cc:e5:f8:da:43:27:7f:1b:
                    3b:6d:78:9e:23:55:2c:bc:b8:a5:55:b1:80:fe:fe:
                    f9:53:81:e1:45:fb:7a:35:d2:8c:0b:b1:58:a8:cf:
                    dd:81:fd:8c:a9:19:54:fb:43:f2:a8:0a:df:86:3b:
                    62:2d:82:13:e7:88:2b:96:b1:68:9e:44:e8:14:e5:
                    2f:24:01:89:00:82:6c:cb:0b:ba:54:0f:de:83:bb:
                    cd:e1:43:09:66:35:44:80:fd:8a:69:31:ed:72:98:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:08:C1:BC:7B:07:42:96:7E:7E:BA:A7:07:0D:1D:AB:AF:80:B4:CD
            X509v3 Authority Key Identifier:
                keyid:12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/128B17FABA22689FAA4769B68394A401659496A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/323830343a366562383a343030303a3a2f33342d3334203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         72:4d:0b:aa:2a:3b:61:88:48:c9:fe:b6:2e:67:1c:f0:e4:9c:
         29:ff:6e:b6:2c:1b:76:7e:b7:07:08:4a:f2:05:aa:b2:3c:a9:
         08:de:cf:a7:32:02:cc:c1:60:b0:32:9c:6c:1d:ab:a2:99:37:
         1a:ef:3c:c2:29:3f:04:3d:41:9a:b1:46:b5:59:e4:00:5b:e4:
         d7:ed:9d:e0:ca:cb:94:69:5c:cb:a1:e7:a6:68:de:d3:64:91:
         6f:40:18:d1:bc:64:63:1e:63:96:90:b3:aa:db:6e:5d:e9:df:
         4c:b2:45:1e:3b:1c:e8:5b:36:4c:74:7d:45:8d:39:2a:f1:d7:
         dd:15:e7:62:00:55:d2:91:84:e1:de:0e:1d:92:57:a3:3c:a0:
         ee:f9:c7:c4:9d:7f:99:46:cb:cb:b7:34:40:d6:f2:2a:64:0c:
         77:31:27:47:e7:0d:94:fe:53:48:74:52:4f:e4:44:b7:49:68:
         1a:a0:af:92:41:cf:95:7b:8f:e4:bb:f8:f1:5c:ac:47:42:b0:
         de:a0:04:a9:94:a4:5a:99:8e:f7:a8:ce:5c:9e:72:c8:20:32:
         25:9a:86:9f:a9:f4:61:97:c1:09:7e:e6:c6:8f:2a:0b:cb:f8:
         e9:a7:fe:06:88:ab:83:1c:70:46:da:d5:bd:31:6c:5b:e5:1c:
         df:54:c3:b4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOrupwIrGgNBHoNgtDrub1U9EWgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4QjE3RkFCQTIyNjg5RkFBNDc2OUI2ODM5NEE0MDE2
NTk0OTZBNzAeFw0yNDA0MDQxNjAyMTlaFw0yNTA0MDMxNjA3MTlaMDMxMTAvBgNV
BAMTKEY4MDhDMUJDN0IwNzQyOTY3RTdFQkFBNzA3MEQxREFCQUY4MEI0Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYXXYBpFG4RWju2BcyoEQ8j1f
Opk9dS/pIuo2IR5cRFx92IS3Bwi8pXiu9VqYKr1A+T40oFmZTqg5vOs8B/tpn37x
n9cXJjV7v4aHlflFjpqQGo3h+Dkn9fEnEGDiYDCUmeySMblsWT6pvSkhwiy7R7pW
KRXMrwXS9EvZy4vxbUhWVXjnD3oziEfa4I6Ux/sWWT5Yim/wJ7Rwhw3M5fjaQyd/
GztteJ4jVSy8uKVVsYD+/vlTgeFF+3o10owLsVioz92B/YypGVT7Q/KoCt+GO2It
ghPniCuWsWieROgU5S8kAYkAgmzLC7pUD96Du83hQwlmNUSA/YppMe1ymEojAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+AjBvHsHQpZ+frqnBw0dq6+AtM0wHwYDVR0j
BBgwFoAUEosX+roiaJ+qR2m2g5SkAWWUlqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmRQMjJ6QTlZMmdqcmg0WGJVVFJFenF1aEREY0dVY05iQnJIQ0M2amNy
cjYvMS8xMjhCMTdGQUJBMjI2ODlGQUE0NzY5QjY4Mzk0QTQwMTY1OTQ5NkE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyOEIxN0ZBQkEyMjY4OUZB
QTQ3NjlCNjgzOTRBNDAxNjU5NDk2QTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZkUDIyekE5WTJnanJoNFhiVVRSRXpxdWhERGNHVWNOYkJySENDNmpjcnI2LzEv
MzIzODMwMzQzYTM2NjU2MjM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM2MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEbrhAMA0GCSqGSIb3DQEBCwUA
A4IBAQByTQuqKjthiEjJ/rYuZxzw5Jwp/262LBt2frcHCEryBaqyPKkI3s+nMgLM
wWCwMpxsHauimTca7zzCKT8EPUGasUa1WeQAW+TX7Z3gysuUaVzLoeemaN7TZJFv
QBjRvGRjHmOWkLOq225d6d9MskUeOxzoWzZMdH1FjTkq8dfdFediAFXSkYTh3g4d
klejPKDu+cfEnX+ZRsvLtzRA1vIqZAx3MSdH5w2U/lNIdFJP5ES3SWgaoK+SQc+V
e4/ku/jxXKxHQrDeoASplKRamY73qM5cnnLIIDIlmoafqfRhl8EJfubGjyoLy/jp
p/4GiKuDHHBG2tW9MWxb5RzfVMO0
-----END CERTIFICATE-----
Generated at Thu Jun 20 19:28:48 2024 by rpki-client on console-fra.rpki-client.org