Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33332d3333203d3e20323730393239.roa
File:                     323830343a373361383a3a2f33332d3333203d3e20323730393239.roa (raw, json)
Hash identifier:          WtERik1Mj2wd20do6F0b9Lqy7T+nE/NLViDod4RT6tQ=
Subject key identifier:   E1:64:1D:25:BD:EA:6C:BB:85:18:4F:BB:46:A6:C1:EE:2F:C2:28:CA
Certificate issuer:       /CN=96606AE9F5551FA02FD562A96A86DAC89ED5931B
Certificate serial:       2230FA21A96F333E0036D8BAF87A1BEB797409A9
Authority key identifier: 96:60:6A:E9:F5:55:1F:A0:2F:D5:62:A9:6A:86:DA:C8:9E:D5:93:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96606AE9F5551FA02FD562A96A86DAC89ED5931B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33332d3333203d3e20323730393239.roa
Signing time:             Tue 28 May 2024 19:42:07 +0000
ROA not before:           Tue 28 May 2024 19:37:07 +0000
ROA not after:            Tue 27 May 2025 19:42:07 +0000
asID:                     270929
IP address blocks:        2804:73a8::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:30:fa:21:a9:6f:33:3e:00:36:d8:ba:f8:7a:1b:eb:79:74:09:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96606AE9F5551FA02FD562A96A86DAC89ED5931B
        Validity
            Not Before: May 28 19:37:07 2024 GMT
            Not After : May 27 19:42:07 2025 GMT
        Subject: CN=E1641D25BDEA6CBB85184FBB46A6C1EE2FC228CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4d:c7:51:dd:e6:d3:a1:92:84:ea:a9:9c:9f:
                    81:9e:2f:b4:a1:7d:2a:a4:38:15:a5:ff:4f:47:86:
                    97:1a:7f:e0:42:16:c7:3e:2e:2c:df:60:74:ef:fd:
                    2a:e9:19:e7:fd:d1:e6:5c:a2:9d:72:e4:58:d7:74:
                    93:3d:d3:35:c4:42:8d:88:d4:d1:e3:ef:7d:ae:6e:
                    00:9b:28:f2:b8:d4:c8:65:8e:b9:5e:cc:12:98:8b:
                    2e:70:22:c5:ec:ee:c1:1d:2a:55:e4:ba:cf:80:64:
                    93:e8:df:7a:72:cd:5f:f7:15:96:b1:ef:fd:6d:40:
                    76:c5:dc:61:d0:4f:12:59:37:60:a6:02:a4:66:0b:
                    b9:06:1d:fc:a6:50:96:1d:93:39:2a:92:60:78:17:
                    c9:29:69:7a:6d:a6:31:b3:93:f1:65:07:9b:53:c6:
                    5c:64:f7:80:2e:e5:d6:30:ac:c0:5a:83:ca:b9:51:
                    bb:65:da:8d:a8:c0:c2:a4:bc:2b:74:b0:0a:69:5d:
                    77:9f:87:73:8f:cf:15:a4:42:82:e6:ab:68:13:c3:
                    db:3c:e8:51:ec:c5:b2:a2:ed:d5:7a:67:9d:ca:fc:
                    00:85:6a:ae:56:44:66:87:17:d0:ae:08:8c:b6:eb:
                    16:0d:ae:a3:c8:0c:fa:14:57:a8:18:c2:da:1c:a9:
                    20:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:64:1D:25:BD:EA:6C:BB:85:18:4F:BB:46:A6:C1:EE:2F:C2:28:CA
            X509v3 Authority Key Identifier:
                keyid:96:60:6A:E9:F5:55:1F:A0:2F:D5:62:A9:6A:86:DA:C8:9E:D5:93:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/96606AE9F5551FA02FD562A96A86DAC89ED5931B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96606AE9F5551FA02FD562A96A86DAC89ED5931B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33332d3333203d3e20323730393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73a8::/33

    Signature Algorithm: sha256WithRSAEncryption
         77:e2:7c:40:75:c5:0c:19:fd:95:e5:54:2f:96:e2:6d:a9:3f:
         54:b7:c2:c6:77:a5:6f:a7:54:f8:0b:29:ee:3c:13:e0:35:3b:
         de:3a:4d:fb:ea:a7:e2:00:c5:85:07:60:48:0e:94:10:fe:9f:
         09:9d:bf:8f:61:57:10:12:e2:c1:6d:70:6e:fe:43:da:3b:be:
         6d:32:9a:e3:07:20:1a:c1:89:05:1e:0a:6d:9a:42:1d:06:65:
         bd:55:09:04:91:2d:7c:0e:f0:ed:b4:63:92:2e:b3:d0:63:11:
         d5:df:9e:42:4d:a4:4a:c1:2c:2c:bf:05:4f:d6:b2:14:ef:72:
         5a:48:9c:39:be:1a:48:0c:07:3f:a4:b5:72:59:37:38:94:e9:
         49:a9:4a:ee:62:ab:bf:d3:1c:c1:a6:d4:0f:5f:c3:e5:ca:e0:
         31:63:4b:8f:4b:db:b3:d2:d1:bc:13:01:e7:ba:cc:e0:c5:da:
         16:27:3f:34:01:69:51:32:fd:37:98:84:af:08:6d:1c:a5:d1:
         e6:90:ed:24:56:09:b6:7c:ce:c6:6e:fd:8d:22:cd:81:15:26:
         47:a7:0e:21:0c:02:ef:fb:e9:72:1f:ff:ce:0d:d9:79:22:23:
         26:fc:4a:94:6c:d9:35:00:58:20:90:4e:f8:4f:78:f3:08:1e:
         8e:ee:e0:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIjD6IalvMz4ANti6+Hob63l0CakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY2MDZBRTlGNTU1MUZBMDJGRDU2MkE5NkE4NkRBQzg5
RUQ1OTMxQjAeFw0yNDA1MjgxOTM3MDdaFw0yNTA1MjcxOTQyMDdaMDMxMTAvBgNV
BAMTKEUxNjQxRDI1QkRFQTZDQkI4NTE4NEZCQjQ2QTZDMUVFMkZDMjI4Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmTcdR3ebToZKE6qmcn4GeL7Sh
fSqkOBWl/09Hhpcaf+BCFsc+LizfYHTv/SrpGef90eZcop1y5FjXdJM90zXEQo2I
1NHj732ubgCbKPK41MhljrlezBKYiy5wIsXs7sEdKlXkus+AZJPo33pyzV/3FZax
7/1tQHbF3GHQTxJZN2CmAqRmC7kGHfymUJYdkzkqkmB4F8kpaXptpjGzk/FlB5tT
xlxk94Au5dYwrMBag8q5Ubtl2o2owMKkvCt0sAppXXefh3OPzxWkQoLmq2gTw9s8
6FHsxbKi7dV6Z53K/ACFaq5WRGaHF9CuCIy26xYNrqPIDPoUV6gYwtocqSBPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4WQdJb3qbLuFGE+7RqbB7i/CKMowHwYDVR0j
BBgwFoAUlmBq6fVVH6Av1WKpaobayJ7VkxswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2lKM3gxcTd3SjEyYVg1eTNCWFd3a2R2Z2doZlFKTnljMnZ4dVlWalFY
OUovMC85NjYwNkFFOUY1NTUxRkEwMkZENTYyQTk2QTg2REFDODlFRDU5MzFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2NjA2QUU5RjU1NTFGQTAy
RkQ1NjJBOTZBODZEQUM4OUVENTkzMUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdpSjN4MXE3d0oxMmFYNXkzQlhXd2tkdmdnaGZRSk55YzJ2eHVZVmpRWDlKLzAv
MzIzODMwMzQzYTM3MzM2MTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMw
MzkzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARzqAAwDQYJKoZIhvcNAQELBQADggEBAHfifEB1
xQwZ/ZXlVC+W4m2pP1S3wsZ3pW+nVPgLKe48E+A1O946Tfvqp+IAxYUHYEgOlBD+
nwmdv49hVxAS4sFtcG7+Q9o7vm0ymuMHIBrBiQUeCm2aQh0GZb1VCQSRLXwO8O20
Y5Ius9BjEdXfnkJNpErBLCy/BU/WshTvclpInDm+GkgMBz+ktXJZNziU6UmpSu5i
q7/THMGm1A9fw+XK4DFjS49L27PS0bwTAee6zODF2hYnPzQBaVEy/TeYhK8IbRyl
0eaQ7SRWCbZ8zsZu/Y0izYEVJkenDiEMAu/76XIf/84N2XkiIyb8SpRs2TUAWCCQ
TvhPePMIHo7u4FM=
-----END CERTIFICATE-----
Generated at Sat Aug 17 07:46:30 2024 by rpki-client on console-fra.rpki-client.org