Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/323830343a366137383a3a2f33332d3333203d3e20323730333338.roa
File:                     323830343a366137383a3a2f33332d3333203d3e20323730333338.roa (raw, json)
Hash identifier:          Uzki+ybeimEB6jTUk5rNQ0llJAldmDLK4JhO+RlWBRE=
Subject key identifier:   06:FB:4B:5C:31:21:CB:EC:50:BB:DD:86:3E:E6:16:3C:C7:99:F1:79
Certificate issuer:       /CN=198A6D21600CF2DD4E43C384F7379E891DD16986
Certificate serial:       68A95FCDD8D3112EEE15BF7D3212E09B72EF5FAA
Authority key identifier: 19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/323830343a366137383a3a2f33332d3333203d3e20323730333338.roa
Signing time:             Thu 04 Apr 2024 04:18:02 +0000
ROA not before:           Thu 04 Apr 2024 04:13:02 +0000
ROA not after:            Thu 03 Apr 2025 04:18:02 +0000
asID:                     270338
IP address blocks:        2804:6a78::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a9:5f:cd:d8:d3:11:2e:ee:15:bf:7d:32:12:e0:9b:72:ef:5f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=198A6D21600CF2DD4E43C384F7379E891DD16986
        Validity
            Not Before: Apr  4 04:13:02 2024 GMT
            Not After : Apr  3 04:18:02 2025 GMT
        Subject: CN=06FB4B5C3121CBEC50BBDD863EE6163CC799F179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ea:19:ba:13:fe:0b:51:6a:dc:0d:21:a0:34:
                    66:8c:46:8b:ee:90:57:ea:df:95:cf:67:2e:2e:5d:
                    4b:cc:27:8e:b6:1e:31:a2:7a:39:04:5d:46:98:19:
                    9d:bc:d1:9e:e1:ba:d2:50:09:a4:af:b5:9b:47:9e:
                    3a:ca:cb:f4:52:45:48:05:cd:9d:79:be:86:34:50:
                    0f:7a:7d:9f:b0:6c:01:32:73:91:81:45:43:84:fe:
                    1a:d3:e1:7b:70:4a:30:91:29:99:a4:19:bc:14:78:
                    33:2b:5d:50:a7:40:38:ed:0b:9c:29:6e:d0:c2:42:
                    68:08:18:03:84:0d:6f:7d:e0:51:a2:eb:b5:53:79:
                    84:1c:c1:25:4f:f7:a0:ec:29:b8:6a:03:53:84:b6:
                    82:ec:43:5e:4e:aa:e2:32:34:10:8b:ac:b5:78:e3:
                    f7:69:95:8a:76:4b:0c:95:06:b9:98:16:7e:13:a1:
                    0e:3b:a8:af:48:68:3a:e0:04:b8:80:45:0e:53:91:
                    3c:e3:39:22:86:05:28:e1:ed:f3:5c:7c:7b:38:c9:
                    9f:71:42:52:34:ec:0c:dd:50:fd:40:9c:aa:21:03:
                    69:e1:ce:e5:7d:22:be:f8:15:2f:26:b0:24:f7:73:
                    cf:3a:99:26:ae:c0:ee:ce:fc:93:01:db:6f:61:68:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FB:4B:5C:31:21:CB:EC:50:BB:DD:86:3E:E6:16:3C:C7:99:F1:79
            X509v3 Authority Key Identifier:
                keyid:19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/198A6D21600CF2DD4E43C384F7379E891DD16986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/323830343a366137383a3a2f33332d3333203d3e20323730333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a78::/33

    Signature Algorithm: sha256WithRSAEncryption
         64:95:7d:d2:8f:5c:54:9d:6d:d8:f0:70:b8:a5:ed:fa:a4:ae:
         78:c5:1b:22:ce:d6:85:71:fc:73:f1:41:8d:62:ef:ee:a9:b9:
         6c:49:df:72:3b:e1:ad:0a:ea:e8:06:9d:5e:74:c4:46:a1:13:
         66:0c:32:6b:bb:fb:13:53:ef:8b:6c:9d:57:dc:a8:71:49:57:
         73:c2:ac:73:55:b9:c3:f4:f1:fb:b1:6a:ad:56:d4:39:8b:35:
         93:63:9d:e7:fd:d3:c1:45:52:3f:46:c7:1d:98:51:0a:83:2a:
         cb:ea:fe:02:07:8e:2f:3f:04:4d:33:f1:37:5d:3c:4a:74:5b:
         d1:73:28:a2:34:2e:49:d3:95:83:78:01:e4:2c:80:2b:a5:01:
         64:81:3b:d5:18:22:2e:2c:4c:fc:4b:6b:f1:ef:8e:21:0a:e0:
         e0:4d:91:1a:7a:56:21:d7:4e:55:f5:48:ad:63:7e:6a:b3:df:
         42:35:42:d0:e9:95:a3:98:d5:3c:ba:68:31:11:f2:17:e7:e3:
         41:e5:c1:73:1e:b8:04:0c:76:4a:b7:67:28:eb:7e:82:b9:94:
         69:d7:48:2b:0f:46:c1:3d:b4:a6:45:37:db:82:c5:45:e9:8b:
         2c:1f:94:50:e0:ee:01:cd:08:56:e2:5b:27:40:2a:d0:84:de:
         fd:84:9e:cf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaKlfzdjTES7uFb99MhLgm3LvX6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk4QTZEMjE2MDBDRjJERDRFNDNDMzg0RjczNzlFODkx
REQxNjk4NjAeFw0yNDA0MDQwNDEzMDJaFw0yNTA0MDMwNDE4MDJaMDMxMTAvBgNV
BAMTKDA2RkI0QjVDMzEyMUNCRUM1MEJCREQ4NjNFRTYxNjNDQzc5OUYxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp6hm6E/4LUWrcDSGgNGaMRovu
kFfq35XPZy4uXUvMJ462HjGiejkEXUaYGZ280Z7hutJQCaSvtZtHnjrKy/RSRUgF
zZ15voY0UA96fZ+wbAEyc5GBRUOE/hrT4XtwSjCRKZmkGbwUeDMrXVCnQDjtC5wp
btDCQmgIGAOEDW994FGi67VTeYQcwSVP96DsKbhqA1OEtoLsQ15OquIyNBCLrLV4
4/dplYp2SwyVBrmYFn4ToQ47qK9IaDrgBLiARQ5TkTzjOSKGBSjh7fNcfHs4yZ9x
QlI07AzdUP1AnKohA2nhzuV9Ir74FS8msCT3c886mSauwO7O/JMB229haCqnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBvtLXDEhy+xQu92GPuYWPMeZ8XkwHwYDVR0j
BBgwFoAUGYptIWAM8t1OQ8OE9zeeiR3RaYYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHoxUDdMV3JiSExadVBUWkJCRkFyZTdNMko2Q1hSemhGaTgxRTN5ZlpB
NngvMS8xOThBNkQyMTYwMENGMkRENEU0M0MzODRGNzM3OUU4OTFERDE2OTg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5OEE2RDIxNjAwQ0YyREQ0
RTQzQzM4NEY3Mzc5RTg5MUREMTY5ODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh6MVA3TFdyYkhMWnVQVFpCQkZBcmU3TTJKNkNYUnpoRmk4MUUzeWZaQTZ4LzEv
MzIzODMwMzQzYTM2NjEzNzM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMw
MzMzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARqeAAwDQYJKoZIhvcNAQELBQADggEBAGSVfdKP
XFSdbdjwcLil7fqkrnjFGyLO1oVx/HPxQY1i7+6puWxJ33I74a0K6ugGnV50xEah
E2YMMmu7+xNT74tsnVfcqHFJV3PCrHNVucP08fuxaq1W1DmLNZNjnef908FFUj9G
xx2YUQqDKsvq/gIHji8/BE0z8TddPEp0W9FzKKI0LknTlYN4AeQsgCulAWSBO9UY
Ii4sTPxLa/HvjiEK4OBNkRp6ViHXTlX1SK1jfmqz30I1QtDplaOY1Ty6aDER8hfn
40HlwXMeuAQMdkq3ZyjrfoK5lGnXSCsPRsE9tKZFN9uCxUXpiywflFDg7gHNCFbi
WydAKtCE3v2Ens8=
-----END CERTIFICATE-----
Generated at Sun Aug 11 09:41:00 2024 by rpki-client on console-fra.rpki-client.org