Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33342d3334203d3e20323731343239.roa
File:                     323830343a376236343a3a2f33342d3334203d3e20323731343239.roa (raw, json)
Hash identifier:          j70puqiaF68J0mMTfPuSvbTC7ixdhXBYr3vM66JLTgU=
Subject key identifier:   FD:DA:EE:4D:29:3D:E6:DF:BC:D7:46:4A:20:DF:61:93:4F:5D:F3:BA
Certificate issuer:       /CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
Certificate serial:       1B70E2233FCA1E44589C7BFBDF8A68C79F7D7D0E
Authority key identifier: FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33342d3334203d3e20323731343239.roa
Signing time:             Fri 28 Jun 2024 01:26:59 +0000
ROA not before:           Fri 28 Jun 2024 01:21:59 +0000
ROA not after:            Fri 27 Jun 2025 01:26:59 +0000
asID:                     271429
IP address blocks:        2804:7b64::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:70:e2:23:3f:ca:1e:44:58:9c:7b:fb:df:8a:68:c7:9f:7d:7d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
        Validity
            Not Before: Jun 28 01:21:59 2024 GMT
            Not After : Jun 27 01:26:59 2025 GMT
        Subject: CN=FDDAEE4D293DE6DFBCD7464A20DF61934F5DF3BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:68:25:a6:6c:e9:e1:69:26:c7:9a:40:ca:
                    5e:54:ee:33:11:9b:17:25:ce:c3:f6:34:1f:56:29:
                    38:69:25:03:63:49:08:a9:40:6b:af:14:17:34:b0:
                    b3:53:48:01:8c:a4:aa:1b:3d:c2:c3:dc:99:f3:5c:
                    fd:c3:3e:b2:28:4d:40:0d:0c:9b:7d:aa:40:32:d2:
                    c7:b0:f7:ef:bc:f9:49:06:f9:59:36:b3:17:24:10:
                    26:63:29:ec:77:14:3c:83:53:15:8f:e6:1b:54:be:
                    b1:82:b3:28:99:73:3b:4a:b5:ab:6f:bf:e2:d3:b6:
                    8a:9a:99:a0:e4:4a:b8:b2:e3:e6:50:48:fe:6b:6f:
                    7b:73:a1:e0:43:d9:89:7e:c3:1a:c5:5c:78:a9:93:
                    3c:27:4e:49:21:09:96:7e:26:bb:59:58:9f:58:08:
                    33:26:9a:91:35:ca:b7:7b:96:e4:84:cb:cc:6d:c3:
                    39:4a:ed:6d:20:07:be:16:d9:84:b1:b7:7b:dd:92:
                    4f:1d:02:eb:d6:ac:60:66:3a:99:2b:da:50:01:28:
                    db:07:83:e0:3c:56:ea:62:e8:31:c3:9f:df:f8:a4:
                    01:9c:a3:68:23:db:4b:bb:d0:e7:c3:76:fa:01:a2:
                    4e:58:02:34:cf:4a:f2:e3:0a:14:6a:2c:4f:ab:54:
                    81:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DA:EE:4D:29:3D:E6:DF:BC:D7:46:4A:20:DF:61:93:4F:5D:F3:BA
            X509v3 Authority Key Identifier:
                keyid:FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33342d3334203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b64::/34

    Signature Algorithm: sha256WithRSAEncryption
         20:ae:02:0f:32:22:e4:ec:c6:d1:a5:33:de:48:9b:e3:52:d8:
         ff:02:3e:ba:64:00:96:65:0b:04:76:36:35:af:5a:42:28:5b:
         f2:28:73:61:80:0b:8d:fb:31:22:7a:a6:08:2d:54:91:b5:2d:
         30:aa:ed:a4:6d:29:a1:a5:24:b4:6d:f6:e0:1c:5b:b1:80:f5:
         38:a9:78:28:aa:40:81:1d:11:3a:c7:fd:48:f6:31:78:9e:f5:
         2b:ac:6b:55:06:08:1a:6e:de:4a:af:e4:c8:d2:91:48:0b:7e:
         99:3b:44:e9:0c:6a:b0:5f:76:89:c8:1a:90:2b:a7:3e:05:aa:
         f6:35:20:52:9d:4a:f2:41:90:b5:5b:6b:96:37:4e:9d:09:0c:
         62:fb:6e:5b:2e:99:b6:9f:39:c0:f5:b0:94:5c:1f:9b:c3:dc:
         4a:f5:25:3f:b9:6f:bc:5f:1f:94:fc:e5:ab:93:d9:a7:6b:90:
         fc:c0:a1:e9:ab:0d:dc:5c:52:bf:0d:dc:e3:b3:f1:b9:6c:b7:
         d9:d6:0d:05:32:5f:a8:88:1a:af:27:d2:ff:fd:73:92:9c:2a:
         7f:7e:fd:42:20:0e:ce:c3:69:c9:1f:74:ea:ad:1c:ea:2d:bf:
         04:fe:dd:30:f2:12:99:09:53:93:fe:3e:4a:9d:08:7a:5a:48:
         83:53:b0:79
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG3DiIz/KHkRYnHv734pox599fQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYwOEZGQjZEMEZFMzlENDYwOThGMjlFMjU2MTUwMEU4
ODI3QzNCMzAeFw0yNDA2MjgwMTIxNTlaFw0yNTA2MjcwMTI2NTlaMDMxMTAvBgNV
BAMTKEZEREFFRTREMjkzREU2REZCQ0Q3NDY0QTIwREY2MTkzNEY1REYzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3lWglpmzp4Wkmx5pAyl5U7jMR
mxclzsP2NB9WKThpJQNjSQipQGuvFBc0sLNTSAGMpKobPcLD3JnzXP3DPrIoTUAN
DJt9qkAy0sew9++8+UkG+Vk2sxckECZjKex3FDyDUxWP5htUvrGCsyiZcztKtatv
v+LTtoqamaDkSriy4+ZQSP5rb3tzoeBD2Yl+wxrFXHipkzwnTkkhCZZ+JrtZWJ9Y
CDMmmpE1yrd7luSEy8xtwzlK7W0gB74W2YSxt3vdkk8dAuvWrGBmOpkr2lABKNsH
g+A8Vupi6DHDn9/4pAGco2gj20u70OfDdvoBok5YAjTPSvLjChRqLE+rVIG5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/druTSk95t+810ZKIN9hk09d87owHwYDVR0j
BBgwFoAU/wj/ttD+OdRgmPKeJWFQDognw7MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2FoS2tnNjRIcGgzNFNWZXBGbzZkVUxaVk1HYUNMQ3FEUDRKSlBpU0x4
eDkvMC9GRjA4RkZCNkQwRkUzOUQ0NjA5OEYyOUUyNTYxNTAwRTg4MjdDM0IzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMDhGRkI2RDBGRTM5RDQ2
MDk4RjI5RTI1NjE1MDBFODgyN0MzQjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdhaEtrZzY0SHBoMzRTVmVwRm82ZFVMWlZNR2FDTENxRFA0SkpQaVNMeHg5LzAv
MzIzODMwMzQzYTM3NjIzNjM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMx
MzQzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAR7ZAAwDQYJKoZIhvcNAQELBQADggEBACCuAg8y
IuTsxtGlM95Im+NS2P8CPrpkAJZlCwR2NjWvWkIoW/Ioc2GAC437MSJ6pggtVJG1
LTCq7aRtKaGlJLRt9uAcW7GA9TipeCiqQIEdETrH/Uj2MXie9Susa1UGCBpu3kqv
5MjSkUgLfpk7ROkMarBfdonIGpArpz4FqvY1IFKdSvJBkLVba5Y3Tp0JDGL7blsu
mbafOcD1sJRcH5vD3Er1JT+5b7xfH5T85auT2adrkPzAoemrDdxcUr8N3OOz8bls
t9nWDQUyX6iIGq8n0v/9c5KcKn9+/UIgDs7DackfdOqtHOotvwT+3TDyEpkJU5P+
PkqdCHpaSINTsHk=
-----END CERTIFICATE-----
Generated at Sun Sep 29 02:11:37 2024 by rpki-client on console-ams.rpki-client.org