Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a633030303a3a2f33362d3336203d3e20323637303739.roa
File:                     323830343a343764343a633030303a3a2f33362d3336203d3e20323637303739.roa (raw, json)
Hash identifier:          jtsjWnb5yE83AtE+9xdq2USveFKfM5OS5H+3ATF2rwc=
Subject key identifier:   46:52:C1:87:42:6D:EE:36:92:18:64:D8:4F:27:22:72:B7:16:EA:A3
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       0B01F4417CEE0CAC09B38E0AF472DEF98C46BF94
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a633030303a3a2f33362d3336203d3e20323637303739.roa
Signing time:             Mon 15 Apr 2024 18:26:38 +0000
ROA not before:           Mon 15 Apr 2024 18:21:38 +0000
ROA not after:            Mon 14 Apr 2025 18:26:38 +0000
asID:                     267079
IP address blocks:        2804:47d4:c000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:01:f4:41:7c:ee:0c:ac:09:b3:8e:0a:f4:72:de:f9:8c:46:bf:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr 15 18:21:38 2024 GMT
            Not After : Apr 14 18:26:38 2025 GMT
        Subject: CN=4652C187426DEE36921864D84F272272B716EAA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:f8:57:f3:82:54:ed:b5:6e:7b:60:a6:bf:
                    6f:e0:f5:5d:c4:60:f0:bc:6b:f2:7a:bc:2f:94:c7:
                    cc:0b:30:fc:33:c8:32:14:d7:41:30:8d:43:ee:7c:
                    e1:88:77:04:5d:a7:6c:da:08:60:5e:27:94:aa:ec:
                    11:78:70:b8:09:b0:82:85:95:05:8d:3c:a8:f1:5c:
                    b0:e1:7f:48:2d:3f:df:6b:24:d4:11:27:9d:aa:dd:
                    08:c0:a9:b9:9a:07:ff:11:37:37:ae:3a:12:4b:88:
                    b6:6f:4c:59:a1:25:49:42:e0:eb:70:20:ef:35:e4:
                    53:b4:64:88:b0:27:4c:da:5a:2c:c7:97:8f:35:3c:
                    72:20:22:7f:39:07:f5:8c:ee:5b:9d:59:4f:fb:8d:
                    d4:a7:10:a3:37:f9:39:8e:26:e5:74:ea:5b:65:48:
                    d3:8e:0d:7b:90:b6:8b:c7:fb:4e:e3:d0:39:19:9a:
                    c4:be:00:a6:ca:6d:2c:d3:c0:21:a4:66:c3:03:f0:
                    bd:c8:6b:4e:a3:7c:5b:d5:88:78:74:8e:a1:f4:7c:
                    5b:45:7b:57:5d:6b:16:ae:67:c9:17:b6:ea:62:eb:
                    d6:6c:f1:c3:b8:c3:bb:62:a7:2f:80:24:be:de:4c:
                    e1:3a:92:bd:d6:cb:e1:0d:18:8d:e6:53:f5:ed:0d:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:52:C1:87:42:6D:EE:36:92:18:64:D8:4F:27:22:72:B7:16:EA:A3
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a633030303a3a2f33362d3336203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         63:2d:76:3a:14:09:42:78:6a:ee:5b:9e:1f:f7:b2:fe:8f:89:
         c7:e1:ab:47:4d:8d:08:16:c5:c9:d0:1b:37:50:3a:71:de:2c:
         9c:f7:3c:00:1d:73:b2:6f:c6:d3:2f:4e:e1:a9:d7:16:b8:56:
         ea:de:3e:2c:38:f0:e8:ee:b0:de:46:38:44:17:09:b2:11:8d:
         78:c3:db:ce:d0:53:86:66:a3:12:f0:38:a7:a0:94:93:9b:0a:
         62:53:af:22:31:5e:18:48:25:bd:74:14:a7:bf:2a:cb:58:f0:
         24:ec:ed:56:78:db:a5:ba:7b:9c:42:66:5c:9b:ae:da:4e:73:
         c7:52:7e:d1:5b:6d:af:84:39:da:06:e0:2f:5e:d5:97:bd:48:
         55:e1:89:11:fb:c1:3a:af:0f:1e:c8:ea:68:2c:a1:9a:c3:75:
         51:03:6a:a1:18:1c:41:c7:d2:95:f8:61:76:f5:d9:28:86:59:
         da:01:70:81:f6:9d:94:91:45:fc:ea:b2:6f:c6:f5:01:fd:ff:
         33:cc:e2:84:b9:60:4b:0c:4f:b7:d4:dc:3c:40:f9:7d:28:3b:
         39:a0:c6:4b:bf:c3:36:f9:55:2b:08:00:91:4b:ac:f7:59:df:
         65:d9:c4:ad:95:3f:8d:de:d9:42:58:00:ba:66:1f:77:26:76:
         ce:eb:c6:ab
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCwH0QXzuDKwJs44K9HLe+YxGv5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE2MUM0OTExQzFBMzRFODRFNjRCM0U5QkYyODYyNTgz
ODE5RjVCRjAeFw0yNDA0MTUxODIxMzhaFw0yNTA0MTQxODI2MzhaMDMxMTAvBgNV
BAMTKDQ2NTJDMTg3NDI2REVFMzY5MjE4NjREODRGMjcyMjcyQjcxNkVBQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXPhX84JU7bVue2Cmv2/g9V3E
YPC8a/J6vC+Ux8wLMPwzyDIU10EwjUPufOGIdwRdp2zaCGBeJ5Sq7BF4cLgJsIKF
lQWNPKjxXLDhf0gtP99rJNQRJ52q3QjAqbmaB/8RNzeuOhJLiLZvTFmhJUlC4Otw
IO815FO0ZIiwJ0zaWizHl481PHIgIn85B/WM7ludWU/7jdSnEKM3+TmOJuV06ltl
SNOODXuQtovH+07j0DkZmsS+AKbKbSzTwCGkZsMD8L3Ia06jfFvViHh0jqH0fFtF
e1ddaxauZ8kXtupi69Zs8cO4w7tipy+AJL7eTOE6kr3Wy+ENGI3mU/XtDddrAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQURlLBh0Jt7jaSGGTYTycicrcW6qMwHwYDVR0j
BBgwFoAUumHEkRwaNOhOZLPpvyhiWDgZ9b8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNndjVVo2eWNHTVo0WENvOWYzUXlkdEppVUdGanBzcm94Y2l1ZldaZmRy
QXUvMS9CQTYxQzQ5MTFDMUEzNEU4NEU2NEIzRTlCRjI4NjI1ODM4MTlGNUJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNjFDNDkxMUMxQTM0RTg0
RTY0QjNFOUJGMjg2MjU4MzgxOUY1QkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ3Y1VaNnljR01aNFhDbzlmM1F5ZHRKaVVHRmpwc3JveGNpdWZXWmZkckF1LzEv
MzIzODMwMzQzYTM0Mzc2NDM0M2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzMwMzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgER9TAMA0GCSqGSIb3DQEBCwUA
A4IBAQBjLXY6FAlCeGruW54f97L+j4nH4atHTY0IFsXJ0Bs3UDpx3iyc9zwAHXOy
b8bTL07hqdcWuFbq3j4sOPDo7rDeRjhEFwmyEY14w9vO0FOGZqMS8DinoJSTmwpi
U68iMV4YSCW9dBSnvyrLWPAk7O1WeNulunucQmZcm67aTnPHUn7RW22vhDnaBuAv
XtWXvUhV4YkR+8E6rw8eyOpoLKGaw3VRA2qhGBxBx9KV+GF29dkohlnaAXCB9p2U
kUX86rJvxvUB/f8zzOKEuWBLDE+31Nw8QPl9KDs5oMZLv8M2+VUrCACRS6z3Wd9l
2cStlT+N3tlCWAC6Zh93JnbO68ar
-----END CERTIFICATE-----
Generated at Sun Aug 4 16:43:14 2024 by rpki-client on console-fra.rpki-client.org