Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/323830343a346165343a3a2f33322d313238203d3e20323637323730.roa
File:                     323830343a346165343a3a2f33322d313238203d3e20323637323730.roa (raw, json)
Hash identifier:          c+Kt/XeBhnNB/3KIHqf868eg3d/9CkVfuGV59uq+fOs=
Subject key identifier:   C0:6E:68:65:43:0E:A7:C9:03:94:74:75:56:E3:FD:5B:66:F4:D9:E6
Certificate issuer:       /CN=CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0
Certificate serial:       36231AE7F44543F8989E32A4448EBA83B6B799FA
Authority key identifier: CF:77:95:52:DE:5E:A3:7B:1A:37:7A:CC:79:C7:AF:3B:D8:07:BB:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/323830343a346165343a3a2f33322d313238203d3e20323637323730.roa
Signing time:             Thu 04 Apr 2024 22:37:39 +0000
ROA not before:           Thu 04 Apr 2024 22:32:39 +0000
ROA not after:            Thu 03 Apr 2025 22:37:39 +0000
asID:                     267270
IP address blocks:        2804:4ae4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:23:1a:e7:f4:45:43:f8:98:9e:32:a4:44:8e:ba:83:b6:b7:99:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0
        Validity
            Not Before: Apr  4 22:32:39 2024 GMT
            Not After : Apr  3 22:37:39 2025 GMT
        Subject: CN=C06E6865430EA7C90394747556E3FD5B66F4D9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:04:7e:10:8c:72:2b:15:43:1e:19:9a:76:
                    21:cf:b0:50:76:2f:82:95:92:9a:6e:7b:64:81:f8:
                    1e:67:fa:14:80:48:ce:f5:c1:e0:39:41:9e:6c:5d:
                    95:0b:4a:8f:05:16:6e:1f:4e:6e:5e:a0:29:a7:30:
                    4a:95:1e:92:a0:ec:e8:b6:c4:3a:72:a5:a2:a4:65:
                    19:dc:32:f1:94:81:d4:e1:07:a4:fd:46:af:35:43:
                    6e:dd:6d:8c:7c:41:83:6b:19:10:c4:91:27:41:78:
                    a1:11:30:0b:6f:9d:ab:c7:bd:fe:0d:69:d0:1b:c1:
                    e2:26:17:50:df:9d:c9:38:a8:12:b7:3d:7c:aa:6c:
                    33:64:54:06:61:a3:5f:9a:81:8b:66:93:bd:11:c0:
                    14:cd:d2:7f:9f:aa:13:22:db:65:4a:ec:df:f5:b7:
                    a8:99:35:55:87:7b:00:e9:e7:0d:a0:c2:5b:5d:a5:
                    33:c5:9a:1f:85:d0:53:51:9e:8e:27:61:ac:f0:b0:
                    9c:a6:1c:29:55:98:44:3d:6c:06:65:63:45:6f:a7:
                    d5:22:a0:79:4c:cc:ab:fa:c9:4d:55:a1:94:c8:36:
                    73:7d:cf:4a:95:c9:20:b8:39:18:0c:16:7d:64:c8:
                    ce:ba:35:9b:e5:82:3c:31:7d:af:98:f6:20:db:75:
                    4e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6E:68:65:43:0E:A7:C9:03:94:74:75:56:E3:FD:5B:66:F4:D9:E6
            X509v3 Authority Key Identifier:
                keyid:CF:77:95:52:DE:5E:A3:7B:1A:37:7A:CC:79:C7:AF:3B:D8:07:BB:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/323830343a346165343a3a2f33322d313238203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ae4::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:41:08:76:01:d4:bb:26:3e:9a:db:b3:e1:0b:19:f2:25:6c:
         0a:7f:ee:34:3c:5f:84:1a:32:c9:86:ff:f2:48:53:29:a2:27:
         9f:80:09:37:19:0d:ac:4d:ca:a3:9a:f7:7d:11:46:ea:98:6d:
         9c:fc:f9:de:41:91:05:ad:17:06:c6:a7:76:3e:d9:ed:3e:39:
         86:2c:fc:d0:34:f5:e3:e8:d3:3a:b4:b0:c0:8f:e1:f5:1c:35:
         3a:9d:ae:6b:e2:31:6f:de:bf:39:84:23:eb:c7:e7:20:63:18:
         3b:3b:37:18:69:9a:4f:5b:6e:70:3b:f5:97:91:cd:7c:f4:82:
         01:db:cb:6a:62:06:71:54:b3:df:23:e2:ea:97:31:2a:ee:6b:
         db:65:8a:c6:b6:78:50:78:97:05:d3:31:a4:36:a0:6c:f4:a3:
         f0:87:43:e4:30:a6:8f:98:ac:9e:ee:c3:d8:73:5c:0d:f2:52:
         a5:37:02:9d:f6:6b:bc:22:29:fc:25:af:93:f9:30:12:b6:f1:
         25:4c:bb:b7:9e:39:fd:b5:c4:3a:c7:8a:b9:e9:98:d1:f2:32:
         fa:6e:9a:9f:6e:30:2d:b9:3e:41:af:d0:aa:9e:6e:8e:35:fc:
         84:25:8a:2e:ae:95:42:44:59:6a:cb:9e:df:e0:1d:fb:c0:b4:
         c7:7f:02:03
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUNiMa5/RFQ/iYnjKkRI66g7a3mfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y3Nzk1NTJERTVFQTM3QjFBMzc3QUNDNzlDN0FGM0JE
ODA3QkJBMDAeFw0yNDA0MDQyMjMyMzlaFw0yNTA0MDMyMjM3MzlaMDMxMTAvBgNV
BAMTKEMwNkU2ODY1NDMwRUE3QzkwMzk0NzQ3NTU2RTNGRDVCNjZGNEQ5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3QR+EIxyKxVDHhmadiHPsFB2
L4KVkppue2SB+B5n+hSASM71weA5QZ5sXZULSo8FFm4fTm5eoCmnMEqVHpKg7Oi2
xDpypaKkZRncMvGUgdThB6T9Rq81Q27dbYx8QYNrGRDEkSdBeKERMAtvnavHvf4N
adAbweImF1Dfnck4qBK3PXyqbDNkVAZho1+agYtmk70RwBTN0n+fqhMi22VK7N/1
t6iZNVWHewDp5w2gwltdpTPFmh+F0FNRno4nYazwsJymHClVmEQ9bAZlY0Vvp9Ui
oHlMzKv6yU1VoZTINnN9z0qVySC4ORgMFn1kyM66NZvlgjwxfa+Y9iDbdU4XAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUwG5oZUMOp8kDlHR1VuP9W2b02eYwHwYDVR0j
BBgwFoAUz3eVUt5eo3saN3rMecevO9gHu6AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWp2VWhhc3haWkxCeW5Qb0EydGVhTnVqVmI4bXZxbmdxd1ozWTJwS2ll
Rk4vMS9DRjc3OTU1MkRFNUVBMzdCMUEzNzdBQ0M3OUM3QUYzQkQ4MDdCQkEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGNzc5NTUyREU1RUEzN0Ix
QTM3N0FDQzc5QzdBRjNCRDgwN0JCQTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlqdlVoYXN4WlpMQnluUG9BMnRlYU51alZiOG12cW5ncXdaM1kycEtpZUZOLzEv
MzIzODMwMzQzYTM0NjE2NTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBErkMA0GCSqGSIb3DQEBCwUAA4IBAQAVQQh2
AdS7Jj6a27PhCxnyJWwKf+40PF+EGjLJhv/ySFMpoiefgAk3GQ2sTcqjmvd9EUbq
mG2c/PneQZEFrRcGxqd2PtntPjmGLPzQNPXj6NM6tLDAj+H1HDU6na5r4jFv3r85
hCPrx+cgYxg7OzcYaZpPW25wO/WXkc189IIB28tqYgZxVLPfI+LqlzEq7mvbZYrG
tnhQeJcF0zGkNqBs9KPwh0PkMKaPmKye7sPYc1wN8lKlNwKd9mu8Iin8Ja+T+TAS
tvElTLu3njn9tcQ6x4q56ZjR8jL6bpqfbjAtuT5Br9Cqnm6ONfyEJYourpVCRFlq
y57f4B37wLTHfwID
-----END CERTIFICATE-----
Generated at Fri Sep 27 23:37:21 2024 by rpki-client on console-fra.rpki-client.org