Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/323830343a363665633a3a2f33322d3332203d3e20323639353931.roa
File:                     323830343a363665633a3a2f33322d3332203d3e20323639353931.roa (raw, json)
Hash identifier:          dU0rXJ3R3dHQsJbqYZ3v9fKm0+wvxOtA4Yetl4MnkRo=
Subject key identifier:   AA:E4:D2:34:7A:4B:8A:66:B8:4C:DA:33:B9:AA:8B:9C:78:5B:60:A6
Certificate issuer:       /CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
Certificate serial:       5B00F73AC9DFD4C8F049FF658E88B29283289682
Authority key identifier: EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/323830343a363665633a3a2f33322d3332203d3e20323639353931.roa
Signing time:             Thu 09 May 2024 13:33:26 +0000
ROA not before:           Thu 09 May 2024 13:28:26 +0000
ROA not after:            Thu 08 May 2025 13:33:26 +0000
asID:                     269591
IP address blocks:        2804:66ec::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:00:f7:3a:c9:df:d4:c8:f0:49:ff:65:8e:88:b2:92:83:28:96:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
        Validity
            Not Before: May  9 13:28:26 2024 GMT
            Not After : May  8 13:33:26 2025 GMT
        Subject: CN=AAE4D2347A4B8A66B84CDA33B9AA8B9C785B60A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:dc:0c:a5:1b:16:30:e6:02:68:19:74:ea:
                    6b:13:e5:94:0c:a4:07:a8:50:51:3a:35:97:b7:9c:
                    b7:95:97:8e:4a:70:b3:94:bf:aa:1b:64:71:80:aa:
                    d8:7b:f3:41:32:f6:63:da:dd:ad:c9:a3:af:ce:c0:
                    61:f8:bd:0c:30:0a:1c:ab:18:68:f3:8e:f7:3f:d4:
                    9c:7f:46:bb:57:da:ad:b1:57:76:77:f0:4a:2e:ce:
                    8b:52:96:22:53:24:f4:45:6a:86:82:c5:61:90:37:
                    67:cf:f9:6f:07:1b:73:b7:7a:e1:58:46:75:e6:66:
                    da:8a:15:ab:0b:a1:60:ac:58:34:20:13:41:95:94:
                    7d:49:d0:f7:2b:a6:24:e8:2b:ae:bd:20:a1:37:5e:
                    d3:ca:ff:64:b2:47:f1:cc:c4:4b:00:77:b2:4e:3d:
                    d6:d9:72:61:48:29:95:69:53:da:1f:75:d4:cc:c9:
                    57:b8:c1:fe:7b:55:33:f8:c6:f8:fe:64:bd:36:8a:
                    9f:dd:40:77:5a:c8:c6:13:5f:56:95:d7:b8:71:68:
                    bc:26:64:49:23:3d:05:75:f1:54:a0:b1:82:33:e3:
                    90:89:39:70:da:e4:a6:33:a8:88:c3:48:03:08:50:
                    de:6b:15:e7:3a:c4:89:6f:49:25:42:ac:74:a8:60:
                    05:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E4:D2:34:7A:4B:8A:66:B8:4C:DA:33:B9:AA:8B:9C:78:5B:60:A6
            X509v3 Authority Key Identifier:
                keyid:EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/323830343a363665633a3a2f33322d3332203d3e20323639353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:93:ab:ea:ea:a9:b4:60:a9:d8:21:2d:4f:cb:35:b7:55:8f:
         5f:2d:6d:e3:0d:9b:ab:26:cd:3e:3f:bb:e8:ca:44:de:55:5c:
         a7:fc:c2:0d:f6:c8:be:cb:f1:4c:9c:d0:7d:38:0d:f8:62:b6:
         87:c1:16:b9:ba:0f:48:5b:dc:e1:1c:81:26:83:98:6a:70:b6:
         ea:b2:09:ad:40:6c:f9:dd:4b:42:f4:4b:9d:46:08:ae:a2:32:
         aa:30:b8:8c:8a:0e:fe:fa:48:9d:76:06:51:d2:66:22:a5:79:
         1e:a1:e2:21:48:10:05:c0:28:b8:32:d0:1d:94:03:9b:a8:b6:
         a5:23:59:c9:ee:df:11:49:93:dd:a3:e1:48:e9:f2:9f:59:52:
         eb:b2:fb:56:71:e3:ea:31:fc:d5:9e:a4:6c:1f:30:be:71:f7:
         60:7c:e2:77:81:4d:f1:08:45:c2:00:97:fa:cb:af:86:c8:26:
         3f:ff:58:10:6c:7f:b8:20:91:7b:bc:35:cc:2b:1c:0c:5c:e1:
         ff:74:3a:6a:c0:83:9c:7c:5d:04:c9:f5:a6:9b:4f:e1:60:50:
         65:47:9b:63:29:f8:1e:8d:0c:bc:84:f8:37:b5:2f:7c:a2:ea:
         62:85:d8:da:9b:78:dc:36:59:71:6b:10:dd:63:08:ec:36:5a:
         9c:c8:67:d5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWwD3Osnf1MjwSf9ljoiykoMoloIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJDQUZGQUYyRUQ2MDVBMjMxMjE3MDY3NkE4QTFEQkFG
MDM3REJFNTAeFw0yNDA1MDkxMzI4MjZaFw0yNTA1MDgxMzMzMjZaMDMxMTAvBgNV
BAMTKEFBRTREMjM0N0E0QjhBNjZCODRDREEzM0I5QUE4QjlDNzg1QjYwQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfdwMpRsWMOYCaBl06msT5ZQM
pAeoUFE6NZe3nLeVl45KcLOUv6obZHGAqth780Ey9mPa3a3Jo6/OwGH4vQwwChyr
GGjzjvc/1Jx/RrtX2q2xV3Z38EouzotSliJTJPRFaoaCxWGQN2fP+W8HG3O3euFY
RnXmZtqKFasLoWCsWDQgE0GVlH1J0PcrpiToK669IKE3XtPK/2SyR/HMxEsAd7JO
PdbZcmFIKZVpU9ofddTMyVe4wf57VTP4xvj+ZL02ip/dQHdayMYTX1aV17hxaLwm
ZEkjPQV18VSgsYIz45CJOXDa5KYzqIjDSAMIUN5rFec6xIlvSSVCrHSoYAVXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUquTSNHpLima4TNozuaqLnHhbYKYwHwYDVR0j
BBgwFoAU68r/ry7WBaIxIXBnaooduvA32+UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby85cHZTVkxWZ3hUUWRod0JoOENyV2ZUQ2dCQk5qTHhMa3hHQ3ZVYzh0MzVF
LzAvRUJDQUZGQUYyRUQ2MDVBMjMxMjE3MDY3NkE4QTFEQkFGMDM3REJFNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FQkNBRkZBRjJFRDYwNUEyMzEy
MTcwNjc2QThBMURCQUYwMzdEQkU1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85
cHZTVkxWZ3hUUWRod0JoOENyV2ZUQ2dCQk5qTHhMa3hHQ3ZVYzh0MzVFLzAvMzIz
ODMwMzQzYTM2MzY2NTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5MzUz
OTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARm7DANBgkqhkiG9w0BAQsFAAOCAQEAI5Or6uqptGCp
2CEtT8s1t1WPXy1t4w2bqybNPj+76MpE3lVcp/zCDfbIvsvxTJzQfTgN+GK2h8EW
uboPSFvc4RyBJoOYanC26rIJrUBs+d1LQvRLnUYIrqIyqjC4jIoO/vpInXYGUdJm
IqV5HqHiIUgQBcAouDLQHZQDm6i2pSNZye7fEUmT3aPhSOnyn1lS67L7VnHj6jH8
1Z6kbB8wvnH3YHzid4FN8QhFwgCX+suvhsgmP/9YEGx/uCCRe7w1zCscDFzh/3Q6
asCDnHxdBMn1pptP4WBQZUebYyn4Ho0MvIT4N7UvfKLqYoXY2pt43DZZcWsQ3WMI
7DZanMhn1Q==
-----END CERTIFICATE-----
Generated at Tue Aug 20 23:49:46 2024 by rpki-client on console-fra.rpki-client.org