Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a383030303a3a2f33342d3334203d3e20323730363638.roa
File:                     323830343a366638633a383030303a3a2f33342d3334203d3e20323730363638.roa (raw, json)
Hash identifier:          ZqoQEqlOLsPvmjyV4mdnn0Muw4RmRnMNr0Or69JG6Pw=
Subject key identifier:   F4:34:77:9F:9C:B6:75:D4:87:58:74:4B:C2:4B:56:FD:AB:4B:38:E1
Certificate issuer:       /CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
Certificate serial:       34C7B7A91CCC47194BB0F5470AC921146001936D
Authority key identifier: FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a383030303a3a2f33342d3334203d3e20323730363638.roa
Signing time:             Thu 04 Apr 2024 12:53:21 +0000
ROA not before:           Thu 04 Apr 2024 12:48:21 +0000
ROA not after:            Thu 03 Apr 2025 12:53:21 +0000
asID:                     270668
IP address blocks:        2804:6f8c:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c7:b7:a9:1c:cc:47:19:4b:b0:f5:47:0a:c9:21:14:60:01:93:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
        Validity
            Not Before: Apr  4 12:48:21 2024 GMT
            Not After : Apr  3 12:53:21 2025 GMT
        Subject: CN=F434779F9CB675D48758744BC24B56FDAB4B38E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:65:8e:d7:2c:80:25:5c:67:2a:d5:ce:32:
                    cb:0c:73:e6:b2:30:8d:73:9f:4a:31:f0:5f:00:e4:
                    ec:aa:d7:0f:31:8e:b6:2f:39:d2:b2:8c:23:84:63:
                    8a:80:57:88:1c:2e:ea:e4:91:76:06:e6:84:38:3c:
                    c5:ac:9b:c0:d1:4c:dc:38:fe:35:97:f6:32:c0:e8:
                    d5:60:2f:a2:66:66:4b:14:f9:11:b3:ef:02:1f:08:
                    5a:42:a1:e3:5e:73:0c:40:e9:1d:65:d0:8b:1b:be:
                    d6:3c:bb:9a:de:d1:01:bf:34:0b:1c:6a:5a:59:52:
                    18:d1:07:90:4a:f7:ff:de:53:c8:ff:c5:b7:a2:aa:
                    25:9e:3a:ff:ca:ae:a4:ed:88:11:34:e6:f8:5f:3a:
                    e8:78:2b:47:b6:d6:04:f7:61:32:c4:42:3c:32:72:
                    5f:d8:f7:fc:d1:e4:43:f3:a0:30:11:14:44:e4:f7:
                    37:71:16:97:0b:af:e1:31:ee:c6:3d:5b:b6:1d:e7:
                    ae:f1:b6:41:58:c9:5e:45:ff:81:3d:2b:08:ce:be:
                    eb:08:cf:e3:c1:d4:b6:2c:e1:3e:d3:46:57:8a:9a:
                    e3:8c:e4:ef:af:d5:a3:f8:38:be:2b:85:93:41:1e:
                    76:25:32:93:0f:81:4c:64:e5:bf:18:60:15:77:44:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:34:77:9F:9C:B6:75:D4:87:58:74:4B:C2:4B:56:FD:AB:4B:38:E1
            X509v3 Authority Key Identifier:
                keyid:FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a383030303a3a2f33342d3334203d3e20323730363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:8b:ad:73:ba:42:c6:94:8f:fe:de:f6:72:50:bc:d3:50:13:
         a6:4b:c1:5a:b3:d1:2c:8b:56:cd:fc:d8:9c:e7:e8:92:16:cc:
         65:cc:92:17:52:35:a1:1a:28:19:1b:ad:57:2e:0b:f7:df:fd:
         e9:7f:34:32:bc:cf:1c:21:f4:e4:86:e3:cf:cc:4f:e0:a6:3f:
         ed:e0:86:a8:38:f4:96:66:49:7d:54:73:16:3f:40:fa:f7:72:
         e7:b9:6f:c0:3c:d6:91:46:80:16:cd:7a:d4:65:9d:c6:c8:f0:
         16:ff:23:4f:28:25:1d:8d:9b:76:2a:27:a7:49:c0:9a:de:15:
         d8:77:24:fb:bd:ca:6b:49:cd:55:a9:c1:8c:48:63:52:a5:05:
         09:48:b4:95:61:09:f9:bd:68:81:b7:1d:4b:c6:f1:13:80:7a:
         2c:a9:9f:a5:4f:03:76:ac:a3:43:82:cb:ae:52:d4:e9:97:ea:
         bf:91:f6:54:ea:d0:09:f0:89:ee:24:70:04:27:71:49:82:0c:
         e8:73:a6:84:c4:c6:91:58:c3:ad:af:7b:d2:5b:49:e0:23:06:
         45:26:38:55:c2:5b:49:11:56:93:ae:44:45:bb:01:24:20:c8:
         3e:14:c6:72:57:9c:22:b0:a5:de:4c:e0:42:8f:58:9d:b6:9a:
         cc:2f:27:f4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNMe3qRzMRxlLsPVHCskhFGABk20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1QjM0MjQxRkE4QjcwRUFBNUYxNjU0NUEwQTg5QjY3
NTkyNkI1OTAeFw0yNDA0MDQxMjQ4MjFaFw0yNTA0MDMxMjUzMjFaMDMxMTAvBgNV
BAMTKEY0MzQ3NzlGOUNCNjc1RDQ4NzU4NzQ0QkMyNEI1NkZEQUI0QjM4RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NmWO1yyAJVxnKtXOMssMc+ay
MI1zn0ox8F8A5Oyq1w8xjrYvOdKyjCOEY4qAV4gcLurkkXYG5oQ4PMWsm8DRTNw4
/jWX9jLA6NVgL6JmZksU+RGz7wIfCFpCoeNecwxA6R1l0IsbvtY8u5re0QG/NAsc
alpZUhjRB5BK9//eU8j/xbeiqiWeOv/KrqTtiBE05vhfOuh4K0e21gT3YTLEQjwy
cl/Y9/zR5EPzoDARFETk9zdxFpcLr+Ex7sY9W7Yd567xtkFYyV5F/4E9KwjOvusI
z+PB1LYs4T7TRleKmuOM5O+v1aP4OL4rhZNBHnYlMpMPgUxk5b8YYBV3RA4NAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU9DR3n5y2ddSHWHRLwktW/atLOOEwHwYDVR0j
BBgwFoAU/1s0JB+otw6qXxZUWgqJtnWSa1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3pXV2hwazlrcEh6NndXbWhGbkE4Tmk0OExZSjJCRXJRbm5aNGlCcGpq
bmcvMS9GRjVCMzQyNDFGQThCNzBFQUE1RjE2NTQ1QTBBODlCNjc1OTI2QjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUIzNDI0MUZBOEI3MEVB
QTVGMTY1NDVBMEE4OUI2NzU5MjZCNTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd6V1docGs5a3BIejZ3V21oRm5BOE5pNDhMWUoyQkVyUW5uWjRpQnBqam5nLzEv
MzIzODMwMzQzYTM2NjYzODYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM2MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEb4yAMA0GCSqGSIb3DQEBCwUA
A4IBAQB8i61zukLGlI/+3vZyULzTUBOmS8Fas9Esi1bN/Nic5+iSFsxlzJIXUjWh
GigZG61XLgv33/3pfzQyvM8cIfTkhuPPzE/gpj/t4IaoOPSWZkl9VHMWP0D693Ln
uW/APNaRRoAWzXrUZZ3GyPAW/yNPKCUdjZt2KienScCa3hXYdyT7vcprSc1VqcGM
SGNSpQUJSLSVYQn5vWiBtx1LxvETgHosqZ+lTwN2rKNDgsuuUtTpl+q/kfZU6tAJ
8InuJHAEJ3FJggzoc6aExMaRWMOtr3vSW0ngIwZFJjhVwltJEVaTrkRFuwEkIMg+
FMZyV5wisKXeTOBCj1idtprMLyf0
-----END CERTIFICATE-----
Generated at Wed Jul 3 11:06:33 2024 by rpki-client on console-fra.rpki-client.org