Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          dgQyjHesh20tuoDLZfDeXvIYDmT493OnY71Nbs+mC10=
Subject key identifier:   7E:ED:3A:25:C4:A3:10:D8:0B:3F:49:59:09:5E:C8:E3:E8:D6:FF:48
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       76A6B7BE505CF4BA5560FDAD1EF4ADA172C242DF
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Thu 04 Apr 2024 02:39:51 +0000
ROA not before:           Thu 04 Apr 2024 02:34:51 +0000
ROA not after:            Thu 03 Apr 2025 02:39:51 +0000
asID:                     265393
IP address blocks:        2804:3364:200::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a6:b7:be:50:5c:f4:ba:55:60:fd:ad:1e:f4:ad:a1:72:c2:42:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: Apr  4 02:34:51 2024 GMT
            Not After : Apr  3 02:39:51 2025 GMT
        Subject: CN=7EED3A25C4A310D80B3F4959095EC8E3E8D6FF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:02:1a:8c:a9:05:95:e5:9a:ab:e9:17:51:
                    8f:65:88:eb:25:74:67:bb:bf:4a:2e:a1:28:1b:de:
                    67:54:ce:84:21:a8:b4:66:36:f2:dc:f8:2b:cd:fe:
                    ac:f5:14:a9:92:32:c4:b1:09:5f:6d:16:f6:4a:42:
                    a6:f9:4a:94:c3:92:fd:16:73:81:1d:a1:44:32:07:
                    57:61:dc:48:e7:ab:aa:7d:f5:d1:a6:c4:63:36:1a:
                    c4:c9:3e:41:a5:09:bd:de:0f:9f:cb:be:83:f7:3e:
                    71:12:e9:9a:6d:a3:20:36:0a:37:a4:37:10:00:7b:
                    8d:09:2f:89:d5:4a:67:a0:90:7e:05:76:38:fe:29:
                    7d:e2:79:cb:72:ba:9f:5d:ef:b0:eb:09:14:2b:f3:
                    d4:1f:c6:b7:3a:6b:18:7a:63:8b:57:36:4a:4c:6a:
                    63:65:fe:f6:a8:5f:4a:99:b9:3f:60:6b:bb:fe:57:
                    27:ff:ad:68:1e:cc:fc:11:f2:4e:8c:db:4e:aa:4d:
                    ca:0d:64:47:c2:31:d4:4d:80:a3:a2:b2:45:78:05:
                    8a:43:45:24:33:1a:40:e7:a5:14:34:8c:01:df:69:
                    2f:cb:06:f3:a8:c2:10:66:71:1a:67:53:da:ab:54:
                    b7:91:83:42:96:97:ce:78:aa:99:f4:8c:3a:60:3b:
                    aa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:ED:3A:25:C4:A3:10:D8:0B:3F:49:59:09:5E:C8:E3:E8:D6:FF:48
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:1b:b2:78:50:eb:e8:44:ee:f8:7d:9d:59:96:48:39:da:4f:
         78:95:ed:b1:db:18:36:5c:a6:ba:25:1d:f0:83:77:3e:c4:d6:
         de:2c:43:96:23:4e:1b:e4:d1:71:54:ea:80:9f:df:51:a6:6d:
         26:6c:e8:de:3d:76:0e:b6:96:15:e4:dc:f8:76:8d:8a:9e:e0:
         c4:ea:47:c3:58:0b:0d:96:62:6d:88:25:41:34:57:62:6c:49:
         93:be:88:5f:03:94:eb:52:2f:51:25:bd:af:4e:cb:d7:e7:62:
         47:78:59:98:48:03:eb:ef:09:d2:3e:f0:38:e7:49:55:4b:85:
         cf:7b:fb:a9:d8:23:d8:94:31:3f:ec:2e:50:59:05:73:a9:39:
         9a:c0:17:43:03:ef:7d:7a:73:94:57:1c:76:c3:f0:0e:db:42:
         aa:89:3b:1e:c5:8c:3a:59:95:33:f0:72:6e:85:15:05:0d:93:
         25:c0:aa:02:79:a7:d8:6b:e5:58:47:c7:7b:ca:f0:55:e6:8d:
         b4:8d:50:04:a8:b7:00:f7:8f:8e:dd:cf:e0:90:06:3e:1f:45:
         c4:55:aa:09:62:dd:f2:d6:be:ab:7f:5e:12:ca:70:16:ea:6c:
         89:20:26:51:29:7e:35:10:77:23:6a:e4:3a:4e:dc:ec:03:97:
         ff:e2:3c:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdqa3vlBc9LpVYP2tHvStoXLCQt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ3REMzMDQ2RjkzRDdGMzZBN0YyNUU1Mzc5RjlBNUU4
RTU0MkRBRTAeFw0yNDA0MDQwMjM0NTFaFw0yNTA0MDMwMjM5NTFaMDMxMTAvBgNV
BAMTKDdFRUQzQTI1QzRBMzEwRDgwQjNGNDk1OTA5NUVDOEUzRThENkZGNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BwIajKkFleWaq+kXUY9liOsl
dGe7v0ouoSgb3mdUzoQhqLRmNvLc+CvN/qz1FKmSMsSxCV9tFvZKQqb5SpTDkv0W
c4EdoUQyB1dh3Ejnq6p99dGmxGM2GsTJPkGlCb3eD5/LvoP3PnES6ZptoyA2Cjek
NxAAe40JL4nVSmegkH4Fdjj+KX3iectyup9d77DrCRQr89Qfxrc6axh6Y4tXNkpM
amNl/vaoX0qZuT9ga7v+Vyf/rWgezPwR8k6M206qTcoNZEfCMdRNgKOiskV4BYpD
RSQzGkDnpRQ0jAHfaS/LBvOowhBmcRpnU9qrVLeRg0KWl854qpn0jDpgO6qhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfu06JcSjENgLP0lZCV7I4+jW/0gwHwYDVR0j
BBgwFoAUZH3DBG+T1/NqfyXlN5+aXo5ULa4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMS82NDdEQzMwNDZGOTNEN0YzNkE3RjI1RTUzNzlGOUE1RThFNTQyREFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0N0RDMzA0NkY5M0Q3RjM2
QTdGMjVFNTM3OUY5QTVFOEU1NDJEQUUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzEv
MzIzODMwMzQzYTMzMzMzNjM0M2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzUzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBDNkAjANBgkqhkiG9w0BAQsFAAOC
AQEAORuyeFDr6ETu+H2dWZZIOdpPeJXtsdsYNlymuiUd8IN3PsTW3ixDliNOG+TR
cVTqgJ/fUaZtJmzo3j12DraWFeTc+HaNip7gxOpHw1gLDZZibYglQTRXYmxJk76I
XwOU61IvUSW9r07L1+diR3hZmEgD6+8J0j7wOOdJVUuFz3v7qdgj2JQxP+wuUFkF
c6k5msAXQwPvfXpzlFccdsPwDttCqok7HsWMOlmVM/ByboUVBQ2TJcCqAnmn2Gvl
WEfHe8rwVeaNtI1QBKi3APePjt3P4JAGPh9FxFWqCWLd8ta+q39eEspwFupsiSAm
USl+NRB3I2rkOk7c7AOX/+I8/w==
-----END CERTIFICATE-----
Generated at Fri Oct 25 22:39:17 2024 by rpki-client on console-ams.rpki-client.org