Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/1/323830343a353466303a3a2f33322d3332203d3e20323638363739.roa
File:                     323830343a353466303a3a2f33322d3332203d3e20323638363739.roa (raw, json)
Hash identifier:          yXFKsfCdz5ORyWkj/P+v20B4ni2XSIp220zgcVvW5pc=
Subject key identifier:   DD:5D:86:9A:3D:82:46:38:FC:E4:6E:F2:85:45:62:BC:FC:F5:57:7B
Certificate issuer:       /CN=D17A39CEAB2C6C76438EFCB39808BBC31EEF4750
Certificate serial:       3CC7A1D3BB3CF284051D248E33C955CDCCF60EC0
Authority key identifier: D1:7A:39:CE:AB:2C:6C:76:43:8E:FC:B3:98:08:BB:C3:1E:EF:47:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17A39CEAB2C6C76438EFCB39808BBC31EEF4750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/1/323830343a353466303a3a2f33322d3332203d3e20323638363739.roa
Signing time:             Tue 16 Apr 2024 19:59:47 +0000
ROA not before:           Tue 16 Apr 2024 19:54:47 +0000
ROA not after:            Tue 15 Apr 2025 19:59:47 +0000
asID:                     268679
IP address blocks:        2804:54f0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c7:a1:d3:bb:3c:f2:84:05:1d:24:8e:33:c9:55:cd:cc:f6:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D17A39CEAB2C6C76438EFCB39808BBC31EEF4750
        Validity
            Not Before: Apr 16 19:54:47 2024 GMT
            Not After : Apr 15 19:59:47 2025 GMT
        Subject: CN=DD5D869A3D824638FCE46EF2854562BCFCF5577B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:e3:27:52:0f:7e:46:d6:ab:fa:c7:a3:b8:
                    7c:31:03:c9:52:c7:59:20:67:0e:4b:b2:8a:7b:16:
                    d8:a9:17:4c:e0:58:f9:87:7e:5d:dd:61:36:3f:12:
                    bf:be:28:0b:59:e9:40:05:4f:db:08:83:12:ef:b2:
                    0e:36:ff:70:e7:fb:25:b9:0d:19:8f:bd:e8:85:0e:
                    1b:6a:a6:45:22:9b:57:42:a9:c8:42:af:58:97:7a:
                    6c:e2:4e:de:47:ef:d7:d2:8e:a5:0a:a9:d3:69:4b:
                    48:cf:c7:bb:fa:a2:c9:b2:e6:f5:74:2a:90:31:6c:
                    3c:e9:9e:9e:cf:f3:e4:db:bd:c7:66:b6:d4:3b:7e:
                    36:de:5d:9a:00:86:e2:65:49:14:cf:15:ba:66:4b:
                    0f:49:f2:ef:ce:2b:96:81:c4:2d:40:f4:7d:23:60:
                    23:f5:e8:e3:be:1d:e3:a7:67:fd:ba:15:01:94:9b:
                    b8:bd:7b:d7:cd:7c:d2:ef:ea:89:af:6c:04:3f:e5:
                    94:e2:4b:5f:da:c3:23:93:d6:a8:b9:53:1f:d5:e8:
                    7d:9a:1d:7c:85:cf:57:bb:24:4e:b0:55:01:78:8f:
                    e7:8d:2a:2f:bd:63:3f:be:ec:4c:e9:91:de:7c:c1:
                    d4:6c:86:54:fa:2e:e2:a7:b0:18:9a:39:85:93:79:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5D:86:9A:3D:82:46:38:FC:E4:6E:F2:85:45:62:BC:FC:F5:57:7B
            X509v3 Authority Key Identifier:
                keyid:D1:7A:39:CE:AB:2C:6C:76:43:8E:FC:B3:98:08:BB:C3:1E:EF:47:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/1/D17A39CEAB2C6C76438EFCB39808BBC31EEF4750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17A39CEAB2C6C76438EFCB39808BBC31EEF4750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/1/323830343a353466303a3a2f33322d3332203d3e20323638363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:d6:cf:ee:d6:9d:11:0e:cb:c7:e1:c7:7e:ac:7b:ef:42:8f:
         47:97:94:5a:6b:13:8e:4c:6e:6a:c2:40:64:9d:1e:5c:8b:b4:
         a4:bc:86:49:48:75:b3:a6:b9:b3:03:79:52:1a:d7:2a:24:fc:
         14:46:27:39:40:6a:d6:34:42:72:06:a4:e3:12:bb:29:26:33:
         27:56:dc:40:be:be:13:96:e8:d7:97:86:98:26:c3:a7:97:8a:
         39:4a:3c:01:32:31:21:33:28:41:fc:46:d7:33:5e:3d:bd:89:
         9d:47:61:56:95:48:45:fa:d0:1b:a2:48:9b:45:7d:39:ee:c0:
         e3:f0:4c:da:08:5a:79:16:4b:dd:f5:d0:3b:0e:a3:d2:ea:12:
         fd:11:b8:61:62:c6:e0:59:85:8a:24:79:17:c0:05:36:52:44:
         d7:1f:10:26:67:90:aa:95:e0:1d:e5:27:bb:08:9c:c1:3b:8b:
         68:19:36:50:23:5a:e0:8e:7a:1c:77:b1:ca:c7:52:47:c9:ab:
         45:92:ce:9e:77:9c:53:dd:59:3e:9f:f0:fe:d9:62:6c:d9:5e:
         6f:da:55:4b:b6:87:c1:0f:0a:30:3b:bd:ad:c5:73:14:e4:7c:
         e7:6e:60:bb:53:fd:47:63:80:56:1f:28:52:03:39:b9:2d:29:
         93:95:a8:d6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPMeh07s88oQFHSSOM8lVzcz2DsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE3QTM5Q0VBQjJDNkM3NjQzOEVGQ0IzOTgwOEJCQzMx
RUVGNDc1MDAeFw0yNDA0MTYxOTU0NDdaFw0yNTA0MTUxOTU5NDdaMDMxMTAvBgNV
BAMTKERENUQ4NjlBM0Q4MjQ2MzhGQ0U0NkVGMjg1NDU2MkJDRkNGNTU3N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWx+MnUg9+Rtar+sejuHwxA8lS
x1kgZw5Lsop7FtipF0zgWPmHfl3dYTY/Er++KAtZ6UAFT9sIgxLvsg42/3Dn+yW5
DRmPveiFDhtqpkUim1dCqchCr1iXemziTt5H79fSjqUKqdNpS0jPx7v6osmy5vV0
KpAxbDzpnp7P8+TbvcdmttQ7fjbeXZoAhuJlSRTPFbpmSw9J8u/OK5aBxC1A9H0j
YCP16OO+HeOnZ/26FQGUm7i9e9fNfNLv6omvbAQ/5ZTiS1/awyOT1qi5Ux/V6H2a
HXyFz1e7JE6wVQF4j+eNKi+9Yz++7Ezpkd58wdRshlT6LuKnsBiaOYWTeR07AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3V2Gmj2CRjj85G7yhUVivPz1V3swHwYDVR0j
BBgwFoAU0Xo5zqssbHZDjvyzmAi7wx7vR1AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnlWNGlKS0R6TlR2a3dUTW05Q0thWTY0NndMTjJOYnRHdDdib1VVeHZW
NjIvMS9EMTdBMzlDRUFCMkM2Qzc2NDM4RUZDQjM5ODA4QkJDMzFFRUY0NzUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxN0EzOUNFQUIyQzZDNzY0
MzhFRkNCMzk4MDhCQkMzMUVFRjQ3NTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5VjRpSktEek5Udmt3VE1tOUNLYVk2NDZ3TE4yTmJ0R3Q3Ym9VVXh2VjYyLzEv
MzIzODMwMzQzYTM1MzQ2NjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARU8DANBgkqhkiG9w0BAQsFAAOCAQEAONbP7tad
EQ7Lx+HHfqx770KPR5eUWmsTjkxuasJAZJ0eXIu0pLyGSUh1s6a5swN5UhrXKiT8
FEYnOUBq1jRCcgak4xK7KSYzJ1bcQL6+E5bo15eGmCbDp5eKOUo8ATIxITMoQfxG
1zNePb2JnUdhVpVIRfrQG6JIm0V9Oe7A4/BM2ghaeRZL3fXQOw6j0uoS/RG4YWLG
4FmFiiR5F8AFNlJE1x8QJmeQqpXgHeUnuwicwTuLaBk2UCNa4I56HHexysdSR8mr
RZLOnnecU91ZPp/w/tlibNleb9pVS7aHwQ8KMDu9rcVzFOR8525gu1P9R2OAVh8o
UgM5uS0pk5Wo1g==
-----END CERTIFICATE-----
Generated at Sun Aug 11 12:33:45 2024 by rpki-client on console-ams.rpki-client.org