Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a383030303a3a2f33332d3333203d3e203532353537.roa
File:                     323830343a6364303a383030303a3a2f33332d3333203d3e203532353537.roa (raw, json)
Hash identifier:          kNzVIPLCO8ChSl6kawnMZ1wxCDPpa+f9KnivbJyxwok=
Subject key identifier:   E1:12:94:50:8F:65:B9:7A:EB:2D:F4:61:BF:C1:76:91:E9:C8:A8:23
Certificate issuer:       /CN=31A34383E0EDF59913E3F81F7606FE38AE7264F0
Certificate serial:       77EA2B29A726A61CAF3358FF34CFCEFA624334E8
Authority key identifier: 31:A3:43:83:E0:ED:F5:99:13:E3:F8:1F:76:06:FE:38:AE:72:64:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A34383E0EDF59913E3F81F7606FE38AE7264F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a383030303a3a2f33332d3333203d3e203532353537.roa
Signing time:             Mon 17 Jun 2024 14:59:16 +0000
ROA not before:           Mon 17 Jun 2024 14:54:16 +0000
ROA not after:            Mon 16 Jun 2025 14:59:16 +0000
asID:                     52557
IP address blocks:        2804:cd0:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ea:2b:29:a7:26:a6:1c:af:33:58:ff:34:cf:ce:fa:62:43:34:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A34383E0EDF59913E3F81F7606FE38AE7264F0
        Validity
            Not Before: Jun 17 14:54:16 2024 GMT
            Not After : Jun 16 14:59:16 2025 GMT
        Subject: CN=E11294508F65B97AEB2DF461BFC17691E9C8A823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:01:bb:fc:9d:2b:89:d9:11:9d:89:3b:f9:cb:
                    2f:36:eb:35:c1:a9:f4:8e:e7:28:8d:e1:e1:b9:b4:
                    a3:f6:84:e9:66:23:95:c0:fc:a0:67:5d:f9:08:32:
                    a0:ec:bb:db:00:6c:62:a9:6a:de:04:47:c9:39:fd:
                    a1:9c:84:60:c8:3c:4f:eb:43:0e:3f:7c:c9:23:2d:
                    f2:34:12:55:3d:2b:29:28:69:d4:a3:5b:ca:ae:15:
                    5a:16:7b:e4:28:8f:7a:2a:fb:9c:69:3a:9e:d8:a7:
                    5f:10:0d:24:23:54:67:34:5b:b4:9c:4d:fa:56:d0:
                    86:e2:8c:bd:78:d3:86:4c:a1:e1:ac:8f:5f:2b:fd:
                    c0:0c:d5:33:bd:f6:e4:b7:f9:43:15:d4:8e:f0:ef:
                    c7:e5:bf:58:78:7d:89:17:31:06:16:58:13:ec:f2:
                    b1:63:7c:c8:37:d9:ba:2b:90:ec:f6:db:e6:06:72:
                    81:86:3e:df:b1:e9:c6:f3:1c:74:d4:03:db:71:2d:
                    7a:3a:ea:45:e5:2a:d7:a1:27:5f:4d:2e:2a:75:57:
                    44:40:af:db:a3:d8:d6:a8:55:ca:ef:65:cc:23:41:
                    87:2e:58:12:5a:7d:58:c6:13:aa:ef:31:91:45:ba:
                    94:0f:b1:48:9a:72:4c:8c:2a:c3:83:70:80:92:9b:
                    1e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:12:94:50:8F:65:B9:7A:EB:2D:F4:61:BF:C1:76:91:E9:C8:A8:23
            X509v3 Authority Key Identifier:
                keyid:31:A3:43:83:E0:ED:F5:99:13:E3:F8:1F:76:06:FE:38:AE:72:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/31A34383E0EDF59913E3F81F7606FE38AE7264F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A34383E0EDF59913E3F81F7606FE38AE7264F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a383030303a3a2f33332d3333203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cd0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         75:75:51:47:3c:6d:3a:52:17:a8:49:73:4d:79:48:dd:74:1c:
         03:82:78:2f:46:9f:78:05:20:bf:3b:85:01:48:71:eb:ab:35:
         3d:76:7f:68:83:6a:42:18:08:ea:48:85:d7:6d:a9:08:87:d9:
         e5:90:21:41:d0:9b:b9:74:d3:80:b9:10:ed:aa:da:9d:ac:17:
         1c:c7:95:04:c8:2c:aa:0e:1f:ef:15:10:90:8f:2f:9e:f4:3e:
         fe:c9:34:40:d0:54:32:26:4d:61:a2:b4:37:d5:74:de:88:66:
         72:f7:83:b3:5e:ae:6e:fa:a3:4e:62:fa:2e:10:9c:db:e7:cb:
         73:f6:39:61:3e:df:64:5c:36:6b:17:a0:f1:59:73:d9:4e:ab:
         d6:2b:7a:c1:b6:69:14:93:a6:1a:9c:d7:d1:25:20:cc:cc:4d:
         e3:95:15:28:5c:54:cd:f4:98:1f:d1:e0:93:67:bf:e9:93:ba:
         ac:78:e2:b3:1b:8d:91:ef:8b:19:31:a2:a4:55:4a:8f:53:9a:
         e0:54:2d:11:a4:14:22:dd:4e:82:a4:96:21:e6:3b:48:09:04:
         f5:6d:16:ab:3a:f2:64:cb:02:46:c8:0a:a5:d1:b4:c2:a1:24:
         e1:f1:3a:2b:e4:58:9f:4b:aa:0b:58:3e:e1:01:2f:ec:b8:22:
         21:ed:08:03
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUd+orKacmphyvM1j/NM/O+mJDNOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFBMzQzODNFMEVERjU5OTEzRTNGODFGNzYwNkZFMzhB
RTcyNjRGMDAeFw0yNDA2MTcxNDU0MTZaFw0yNTA2MTYxNDU5MTZaMDMxMTAvBgNV
BAMTKEUxMTI5NDUwOEY2NUI5N0FFQjJERjQ2MUJGQzE3NjkxRTlDOEE4MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpAbv8nSuJ2RGdiTv5yy826zXB
qfSO5yiN4eG5tKP2hOlmI5XA/KBnXfkIMqDsu9sAbGKpat4ER8k5/aGchGDIPE/r
Qw4/fMkjLfI0ElU9KykoadSjW8quFVoWe+Qoj3oq+5xpOp7Yp18QDSQjVGc0W7Sc
TfpW0IbijL1404ZMoeGsj18r/cAM1TO99uS3+UMV1I7w78flv1h4fYkXMQYWWBPs
8rFjfMg32borkOz22+YGcoGGPt+x6cbzHHTUA9txLXo66kXlKtehJ19NLip1V0RA
r9uj2NaoVcrvZcwjQYcuWBJafVjGE6rvMZFFupQPsUiackyMKsODcICSmx6RAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQU4RKUUI9luXrrLfRhv8F2kenIqCMwHwYDVR0j
BBgwFoAUMaNDg+Dt9ZkT4/gfdgb+OK5yZPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTlLNjFzazVTNUE1MUVGZWt6M2JIY05oOWZVZG1EZnhBODlramt6UERX
THEvMC8zMUEzNDM4M0UwRURGNTk5MTNFM0Y4MUY3NjA2RkUzOEFFNzI2NEYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQTM0MzgzRTBFREY1OTkx
M0UzRjgxRjc2MDZGRTM4QUU3MjY0RjAuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk5SzYxc2s1UzVBNTFFRmVrejNiSGNOaDlmVWRtRGZ4QTg5a2prelBEV0xxLzAv
MzIzODMwMzQzYTYzNjQzMDNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNl
MjAzNTMyMzUzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKAQM0IAwDQYJKoZIhvcNAQELBQADggEB
AHV1UUc8bTpSF6hJc015SN10HAOCeC9Gn3gFIL87hQFIceurNT12f2iDakIYCOpI
hddtqQiH2eWQIUHQm7l004C5EO2q2p2sFxzHlQTILKoOH+8VEJCPL570Pv7JNEDQ
VDImTWGitDfVdN6IZnL3g7Nerm76o05i+i4QnNvny3P2OWE+32RcNmsXoPFZc9lO
q9YresG2aRSTphqc19ElIMzMTeOVFShcVM30mB/R4JNnv+mTuqx44rMbjZHvixkx
oqRVSo9TmuBULRGkFCLdToKkliHmO0gJBPVtFqs68mTLAkbICqXRtMKhJOHxOivk
WJ9LqgtYPuEBL+y4IiHtCAM=
-----END CERTIFICATE-----
Generated at Sun Aug 25 13:04:10 2024 by rpki-client on console-ams.rpki-client.org