Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a343030303a3a2f33342d3334203d3e20323633363532.roa
File:                     323830343a313064633a343030303a3a2f33342d3334203d3e20323633363532.roa (raw, json)
Hash identifier:          cDci0Xd5QQ7eDmsLomGfsVPcBpGWtAqIpvwDP6743yM=
Subject key identifier:   84:84:78:16:2E:F0:01:6E:C0:23:C8:A0:EB:A1:97:18:97:05:B5:51
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       0621ABDD0A767DD57EA982DDCC84DCD0D5D3B597
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a343030303a3a2f33342d3334203d3e20323633363532.roa
Signing time:             Mon 29 Jul 2024 15:58:47 +0000
ROA not before:           Mon 29 Jul 2024 15:53:47 +0000
ROA not after:            Mon 28 Jul 2025 15:58:47 +0000
asID:                     263652
IP address blocks:        2804:10dc:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:21:ab:dd:0a:76:7d:d5:7e:a9:82:dd:cc:84:dc:d0:d5:d3:b5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:47 2024 GMT
            Not After : Jul 28 15:58:47 2025 GMT
        Subject: CN=848478162EF0016EC023C8A0EBA197189705B551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:78:e2:58:ac:56:92:d5:2f:08:0b:34:43:df:
                    44:36:73:14:29:f0:09:e5:65:07:6a:93:2f:7e:88:
                    e8:71:ad:c2:10:64:e3:30:42:57:ad:a8:ea:de:c5:
                    a0:a5:1f:3a:52:1c:23:9b:0d:f0:b7:3d:07:6f:eb:
                    f0:15:3a:1d:a2:b3:a0:19:cd:aa:27:4f:ab:d3:d2:
                    c2:a1:a4:7c:1a:7c:e0:e6:a9:59:8e:b6:0d:9f:54:
                    41:c1:ad:8b:95:72:4c:4f:95:bd:5b:e7:c9:87:97:
                    db:25:73:4f:c5:b7:78:0e:98:47:34:0b:b4:ee:06:
                    a6:69:d3:ac:78:94:69:f9:ef:39:c3:0f:b4:f1:7d:
                    7e:d1:9d:08:91:c9:6b:b4:af:f9:f1:8e:4c:8d:f7:
                    5a:14:c4:3e:55:ce:06:f9:0a:73:df:9c:3e:bf:74:
                    7b:a6:6e:ab:cd:1f:e9:4c:94:be:35:75:36:3e:4f:
                    38:22:1f:d2:07:4e:02:46:64:ef:76:28:dc:8a:2c:
                    79:a4:54:5b:4c:f1:09:ec:fb:c5:96:bb:fd:ab:07:
                    bf:fe:b4:3b:16:e2:b7:68:b4:a5:3d:50:ed:5e:72:
                    f3:a0:39:f4:2c:50:5d:88:6a:ba:16:87:f4:b0:0b:
                    95:ca:69:f7:c0:1c:47:e9:2b:fc:7f:c3:40:c5:2e:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:84:78:16:2E:F0:01:6E:C0:23:C8:A0:EB:A1:97:18:97:05:B5:51
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a343030303a3a2f33342d3334203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10dc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:b7:5e:1f:5e:81:b0:f4:ba:2e:31:e3:f0:fa:12:d4:d0:b5:
         e5:12:83:6a:e6:e3:15:d7:b4:26:a0:ab:5c:7f:2e:61:99:10:
         11:9f:8b:e7:30:a4:52:6c:df:d4:ee:90:ce:c2:d2:99:d9:f3:
         1b:f0:ff:8c:c5:b3:c7:27:7c:30:fb:bf:69:74:e5:f1:57:6e:
         46:04:1e:68:b4:48:09:e1:02:f1:ac:2b:a3:9a:67:1e:e5:dc:
         16:93:71:6b:8b:e4:dd:78:a2:8b:3a:9f:88:ee:72:60:89:2d:
         eb:c0:bb:de:12:67:4d:80:ed:b9:97:36:1c:11:83:80:29:3b:
         80:79:a8:82:9b:62:3d:90:00:ea:c9:a5:b2:2d:a2:ae:4d:bb:
         f3:59:d2:80:da:ea:a2:2c:c9:59:7a:bd:2e:2d:aa:1b:3c:a8:
         9d:c4:96:2b:0e:d1:e6:cd:98:5e:90:77:36:5b:7f:86:42:00:
         8b:7a:b4:92:44:bf:4c:22:73:25:91:fa:70:c2:49:ac:db:d4:
         e4:cc:18:a1:7b:57:cd:a9:90:f7:73:39:ca:4e:9b:ac:26:c7:
         fc:f2:1d:44:7c:5a:3b:42:12:19:9b:5a:01:5d:47:82:0b:11:
         e5:2a:d6:42:e1:72:7a:33:35:9f:bd:38:d9:d5:2c:59:bc:5b:
         f3:64:7f:73
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBiGr3Qp2fdV+qYLdzITc0NXTtZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGNUI4MzFFQjc3Q0Y5NkJDMUNFOTM3NTVGMUE0M0ZC
NjhBNDdGNzAeFw0yNDA3MjkxNTUzNDdaFw0yNTA3MjgxNTU4NDdaMDMxMTAvBgNV
BAMTKDg0ODQ3ODE2MkVGMDAxNkVDMDIzQzhBMEVCQTE5NzE4OTcwNUI1NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3eOJYrFaS1S8ICzRD30Q2cxQp
8AnlZQdqky9+iOhxrcIQZOMwQletqOrexaClHzpSHCObDfC3PQdv6/AVOh2is6AZ
zaonT6vT0sKhpHwafODmqVmOtg2fVEHBrYuVckxPlb1b58mHl9slc0/Ft3gOmEc0
C7TuBqZp06x4lGn57znDD7TxfX7RnQiRyWu0r/nxjkyN91oUxD5Vzgb5CnPfnD6/
dHumbqvNH+lMlL41dTY+TzgiH9IHTgJGZO92KNyKLHmkVFtM8Qns+8WWu/2rB7/+
tDsW4rdotKU9UO1ecvOgOfQsUF2IaroWh/SwC5XKaffAHEfpK/x/w0DFLs4RAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUhIR4Fi7wAW7AI8ig66GXGJcFtVEwHwYDVR0j
BBgwFoAUS/W4Met3z5a8HOk3VfGkP7aKR/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVyZkg5b1FMUXp6c1pRUDJRcmE1TnhKTmhrTnljZkMxTlFnclpNU1hC
VmgvMC80QkY1QjgzMUVCNzdDRjk2QkMxQ0U5Mzc1NUYxQTQzRkI2OEE0N0Y3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRjVCODMxRUI3N0NGOTZC
QzFDRTkzNzU1RjFBNDNGQjY4QTQ3RjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1cmZIOW9RTFF6enNaUVAyUXJhNU54Sk5oa055Y2ZDMU5RZ3JaTVNYQlZoLzAv
MzIzODMwMzQzYTMxMzA2NDYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM2MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEENxAMA0GCSqGSIb3DQEBCwUA
A4IBAQBEt14fXoGw9LouMePw+hLU0LXlEoNq5uMV17QmoKtcfy5hmRARn4vnMKRS
bN/U7pDOwtKZ2fMb8P+MxbPHJ3ww+79pdOXxV25GBB5otEgJ4QLxrCujmmce5dwW
k3Fri+TdeKKLOp+I7nJgiS3rwLveEmdNgO25lzYcEYOAKTuAeaiCm2I9kADqyaWy
LaKuTbvzWdKA2uqiLMlZer0uLaobPKidxJYrDtHmzZhekHc2W3+GQgCLerSSRL9M
InMlkfpwwkms29TkzBihe1fNqZD3cznKTpusJsf88h1EfFo7QhIZm1oBXUeCCxHl
KtZC4XJ6MzWfvTjZ1SxZvFvzZH9z
-----END CERTIFICATE-----
Generated at Sat Aug 17 21:29:17 2024 by rpki-client on console-fra.rpki-client.org