Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          4ZR0sgYnFS9z7tRiS5F9PoYwpF6Bwr0vm8wdZqRdWjE=
Subject key identifier:   00:18:1D:39:03:40:EC:8D:74:6E:78:B8:C1:E0:DC:B1:9B:F5:08:AB
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       776FAE509974118F3BD4721243F76CC40428F469
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Thu 04 Apr 2024 02:39:48 +0000
ROA not before:           Thu 04 Apr 2024 02:34:48 +0000
ROA not after:            Thu 03 Apr 2025 02:39:48 +0000
asID:                     265393
IP address blocks:        2804:3364:8000::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6f:ae:50:99:74:11:8f:3b:d4:72:12:43:f7:6c:c4:04:28:f4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: Apr  4 02:34:48 2024 GMT
            Not After : Apr  3 02:39:48 2025 GMT
        Subject: CN=00181D390340EC8D746E78B8C1E0DCB19BF508AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:f9:5e:e6:33:5a:69:81:61:c5:9b:33:78:
                    0e:2f:a8:11:be:69:e5:9b:d3:72:34:2f:de:34:bf:
                    3c:69:c9:41:78:c7:36:43:27:86:2f:65:6e:cf:17:
                    88:5f:99:2d:ce:53:20:ae:07:2d:59:3c:f7:42:20:
                    2c:d6:71:3a:52:5e:cb:57:2d:80:c3:09:f5:b7:05:
                    74:76:44:47:87:4e:0c:de:f4:f6:80:51:5d:6e:b7:
                    84:2c:db:83:d8:07:65:f7:70:56:42:6b:6c:b5:6a:
                    0d:7a:8b:cb:62:ad:21:ef:03:e3:25:92:40:e3:ea:
                    02:4c:d2:6b:22:dd:68:41:41:94:6d:4b:76:45:5a:
                    0d:55:ef:97:8d:7f:64:cd:e3:71:35:16:c1:24:8b:
                    07:07:11:2d:7c:5d:be:b3:35:33:0c:21:db:c0:ff:
                    12:5b:c7:6a:d8:94:2a:27:d9:14:4e:fc:3b:26:9c:
                    79:72:d0:74:cf:d8:d4:f7:5b:be:10:ab:ed:4e:53:
                    8d:08:d6:b3:b5:a5:6e:ea:14:54:37:82:35:8b:bf:
                    0e:9f:79:ca:05:44:b8:54:83:0b:6b:9a:02:68:b4:
                    28:ef:e4:ef:96:21:f7:2c:5d:c2:44:c5:50:37:26:
                    d1:ac:70:0f:2d:b9:c9:d3:3e:d9:16:bf:b6:6f:41:
                    28:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:18:1D:39:03:40:EC:8D:74:6E:78:B8:C1:E0:DC:B1:9B:F5:08:AB
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:6a:13:e5:4f:5f:66:fa:e4:2d:5b:09:50:eb:62:ad:43:7b:
         a6:98:0c:0d:13:e4:a8:56:92:fd:30:80:59:dd:80:36:07:e8:
         b5:9d:8d:70:2b:ee:8d:e1:56:8f:31:d4:de:90:98:35:53:b9:
         e3:7c:f5:80:3a:32:9a:39:d9:9b:24:33:96:d7:a7:07:f9:5d:
         31:64:08:6b:d6:03:6f:b4:93:12:87:06:57:16:ed:16:df:ba:
         6e:90:34:58:2c:d4:78:7d:91:3b:bd:db:46:cc:74:c6:cb:a0:
         e5:3c:68:48:31:30:9d:32:bc:df:2a:0d:52:83:db:db:c0:9f:
         90:d9:d3:73:7f:87:50:d7:9d:6f:5e:98:9c:8f:40:32:ba:64:
         8d:af:16:fd:41:95:fe:36:bf:ea:7b:1e:bd:c8:5c:2d:c9:bd:
         74:70:77:73:78:96:bc:e7:52:43:f9:ee:7b:1f:a7:90:d5:1d:
         b5:05:8d:33:1b:dd:23:57:ea:e1:a1:2f:c5:7d:a0:34:fe:ff:
         a1:81:24:24:27:f6:84:72:db:80:97:1a:3c:9a:51:73:80:20:
         ed:ef:9b:c6:8a:39:8a:9d:e8:3e:40:0c:e7:1f:47:cc:30:f3:
         00:4b:d3:ec:5b:13:4d:99:40:f3:3c:58:cf:27:d8:7f:cb:15:
         06:07:6c:f4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUd2+uUJl0EY871HISQ/dsxAQo9GkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ3REMzMDQ2RjkzRDdGMzZBN0YyNUU1Mzc5RjlBNUU4
RTU0MkRBRTAeFw0yNDA0MDQwMjM0NDhaFw0yNTA0MDMwMjM5NDhaMDMxMTAvBgNV
BAMTKDAwMTgxRDM5MDM0MEVDOEQ3NDZFNzhCOEMxRTBEQ0IxOUJGNTA4QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ufle5jNaaYFhxZszeA4vqBG+
aeWb03I0L940vzxpyUF4xzZDJ4YvZW7PF4hfmS3OUyCuBy1ZPPdCICzWcTpSXstX
LYDDCfW3BXR2REeHTgze9PaAUV1ut4Qs24PYB2X3cFZCa2y1ag16i8tirSHvA+Ml
kkDj6gJM0msi3WhBQZRtS3ZFWg1V75eNf2TN43E1FsEkiwcHES18Xb6zNTMMIdvA
/xJbx2rYlCon2RRO/DsmnHly0HTP2NT3W74Qq+1OU40I1rO1pW7qFFQ3gjWLvw6f
ecoFRLhUgwtrmgJotCjv5O+WIfcsXcJExVA3JtGscA8tucnTPtkWv7ZvQSjPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUABgdOQNA7I10bni4weDcsZv1CKswHwYDVR0j
BBgwFoAUZH3DBG+T1/NqfyXlN5+aXo5ULa4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMS82NDdEQzMwNDZGOTNEN0YzNkE3RjI1RTUzNzlGOUE1RThFNTQyREFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0N0RDMzA0NkY5M0Q3RjM2
QTdGMjVFNTM3OUY5QTVFOEU1NDJEQUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzEv
MzIzODMwMzQzYTMzMzMzNjM0M2EzODMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNTMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEM2SAMA0GCSqGSIb3DQEBCwUA
A4IBAQCfahPlT19m+uQtWwlQ62KtQ3ummAwNE+SoVpL9MIBZ3YA2B+i1nY1wK+6N
4VaPMdTekJg1U7njfPWAOjKaOdmbJDOW16cH+V0xZAhr1gNvtJMShwZXFu0W37pu
kDRYLNR4fZE7vdtGzHTGy6DlPGhIMTCdMrzfKg1Sg9vbwJ+Q2dNzf4dQ151vXpic
j0AyumSNrxb9QZX+Nr/qex69yFwtyb10cHdzeJa851JD+e57H6eQ1R21BY0zG90j
V+rhoS/FfaA0/v+hgSQkJ/aEctuAlxo8mlFzgCDt75vGijmKneg+QAznH0fMMPMA
S9PsWxNNmUDzPFjPJ9h/yxUGB2z0
-----END CERTIFICATE-----
Generated at Fri Oct 25 22:39:17 2024 by rpki-client on console-ams.rpki-client.org