Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/323830343a313164633a3a2f33322d3336203d3e20323633343434.roa
File:                     323830343a313164633a3a2f33322d3336203d3e20323633343434.roa (raw, json)
Hash identifier:          v+uZ0Wktv1zc9T9cDxIiR5C0ILN9IjFP+JWA4aAr3DU=
Subject key identifier:   0F:DE:F5:40:57:23:4B:6F:D9:5F:65:C0:D8:6A:4F:0F:B1:E9:A2:4C
Certificate issuer:       /CN=69064F8F72CDE87A9EED7C07BB0FCBF94418E82B
Certificate serial:       3B6393AAA3E6E8DB7B55985BA8BD08610B1CF750
Authority key identifier: 69:06:4F:8F:72:CD:E8:7A:9E:ED:7C:07:BB:0F:CB:F9:44:18:E8:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/323830343a313164633a3a2f33322d3336203d3e20323633343434.roa
Signing time:             Wed 03 Apr 2024 23:33:39 +0000
ROA not before:           Wed 03 Apr 2024 23:28:39 +0000
ROA not after:            Wed 02 Apr 2025 23:33:39 +0000
asID:                     263444
IP address blocks:        2804:11dc::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:63:93:aa:a3:e6:e8:db:7b:55:98:5b:a8:bd:08:61:0b:1c:f7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69064F8F72CDE87A9EED7C07BB0FCBF94418E82B
        Validity
            Not Before: Apr  3 23:28:39 2024 GMT
            Not After : Apr  2 23:33:39 2025 GMT
        Subject: CN=0FDEF54057234B6FD95F65C0D86A4F0FB1E9A24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:32:8d:43:49:04:55:7c:9b:2c:5e:ff:c6:
                    ee:0c:0f:b9:8d:84:43:88:70:27:3f:e6:3a:bf:73:
                    23:97:1a:54:7f:eb:7f:b8:6d:e3:7a:95:75:4b:fb:
                    08:ed:fe:f7:50:00:0b:b5:6b:89:1e:a6:76:66:c0:
                    cb:09:6f:28:50:f9:78:76:9c:0a:0f:c7:6a:34:0d:
                    c6:a9:1a:c9:45:79:c9:67:d7:87:c0:b3:78:eb:28:
                    71:7e:8a:d3:b2:8a:ec:16:84:69:17:93:81:a5:6f:
                    5f:2e:53:c1:c3:d4:ff:28:6e:e7:e1:79:e6:ca:52:
                    4f:dd:a7:7e:7f:d3:a0:1b:a9:1d:6a:80:9d:7b:16:
                    a0:76:c5:ab:e3:b5:58:f9:1c:09:28:fb:ec:50:5b:
                    8e:ad:5e:d9:e5:e7:90:d0:01:6c:2e:cf:9e:7b:5b:
                    eb:ef:fd:7c:7d:c9:80:9d:fb:2f:0c:f2:91:6f:2c:
                    3e:81:1e:d6:7f:08:b1:9a:b9:9a:db:87:6a:6c:6c:
                    3b:75:bc:e1:63:20:4e:07:cf:da:c1:08:6b:a4:ef:
                    0b:ee:31:3f:25:36:2d:d9:72:d6:88:18:44:a5:53:
                    4b:56:01:00:46:ab:0a:06:24:6b:9d:42:bc:51:80:
                    a5:d9:61:72:0d:e8:bf:9c:99:2d:91:27:be:e5:56:
                    19:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DE:F5:40:57:23:4B:6F:D9:5F:65:C0:D8:6A:4F:0F:B1:E9:A2:4C
            X509v3 Authority Key Identifier:
                keyid:69:06:4F:8F:72:CD:E8:7A:9E:ED:7C:07:BB:0F:CB:F9:44:18:E8:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/323830343a313164633a3a2f33322d3336203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:29:6c:95:2f:83:70:bc:66:e9:bc:a9:da:56:7c:49:4d:d0:
         63:6c:f8:86:93:1d:d3:c7:e8:96:77:53:ed:6b:f8:9d:20:cf:
         1e:c0:9e:5c:f4:7b:61:29:0b:82:fb:4b:6d:ef:8b:5f:58:ca:
         f2:05:64:63:fa:fd:ec:05:e4:63:ed:d7:b5:6f:03:87:b7:d6:
         f0:76:b8:69:71:97:01:58:c7:2f:3d:2f:67:ef:76:e0:5b:d1:
         75:0f:58:5a:a2:70:52:ca:7f:a1:74:49:fa:37:02:fc:06:6f:
         36:db:2e:0e:b3:83:d5:06:0e:b0:c0:ac:9a:07:16:3c:1e:3c:
         67:42:d9:9a:67:f9:52:87:e5:ed:1c:12:1e:62:c3:04:eb:c2:
         69:b9:28:69:89:cf:a7:0f:0d:70:ee:d5:76:ba:12:4e:98:58:
         2c:5c:11:ba:5b:75:62:a9:61:d8:68:2b:dc:70:c9:72:9e:b5:
         eb:41:2a:92:9e:95:ec:9a:11:2f:ac:83:c5:ee:6d:44:72:4c:
         85:93:21:9b:71:ae:68:bb:b1:d3:5f:04:8b:f0:2f:5f:51:03:
         9e:9b:29:3c:c6:33:21:46:ee:44:4b:12:fb:25:87:0e:9e:4d:
         fe:01:c8:01:73:f4:6b:d0:23:98:eb:3b:7e:a8:b1:99:ac:7a:
         59:f6:6d:e4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO2OTqqPm6Nt7VZhbqL0IYQsc91AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkwNjRGOEY3MkNERTg3QTlFRUQ3QzA3QkIwRkNCRjk0
NDE4RTgyQjAeFw0yNDA0MDMyMzI4MzlaFw0yNTA0MDIyMzMzMzlaMDMxMTAvBgNV
BAMTKDBGREVGNTQwNTcyMzRCNkZEOTVGNjVDMEQ4NkE0RjBGQjFFOUEyNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NDKNQ0kEVXybLF7/xu4MD7mN
hEOIcCc/5jq/cyOXGlR/63+4beN6lXVL+wjt/vdQAAu1a4kepnZmwMsJbyhQ+Xh2
nAoPx2o0DcapGslFecln14fAs3jrKHF+itOyiuwWhGkXk4Glb18uU8HD1P8obufh
eebKUk/dp35/06AbqR1qgJ17FqB2xavjtVj5HAko++xQW46tXtnl55DQAWwuz557
W+vv/Xx9yYCd+y8M8pFvLD6BHtZ/CLGauZrbh2psbDt1vOFjIE4Hz9rBCGuk7wvu
MT8lNi3ZctaIGESlU0tWAQBGqwoGJGudQrxRgKXZYXIN6L+cmS2RJ77lVhkTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUD971QFcjS2/ZX2XA2GpPD7HpokwwHwYDVR0j
BBgwFoAUaQZPj3LN6Hqe7XwHuw/L+UQY6CswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO
dUMvMS82OTA2NEY4RjcyQ0RFODdBOUVFRDdDMDdCQjBGQ0JGOTQ0MThFODJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5MDY0RjhGNzJDREU4N0E5
RUVEN0MwN0JCMEZDQkY5NDQxOEU4MkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzEv
MzIzODMwMzQzYTMxMzE2NDYzM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjMz
MzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQR3DANBgkqhkiG9w0BAQsFAAOCAQEAGylslS+D
cLxm6byp2lZ8SU3QY2z4hpMd08folndT7Wv4nSDPHsCeXPR7YSkLgvtLbe+LX1jK
8gVkY/r97AXkY+3XtW8Dh7fW8Ha4aXGXAVjHLz0vZ+924FvRdQ9YWqJwUsp/oXRJ
+jcC/AZvNtsuDrOD1QYOsMCsmgcWPB48Z0LZmmf5Uofl7RwSHmLDBOvCabkoaYnP
pw8NcO7VdroSTphYLFwRult1Yqlh2Ggr3HDJcp6160Eqkp6V7JoRL6yDxe5tRHJM
hZMhm3GuaLux018Ei/AvX1EDnpspPMYzIUbuREsS+yWHDp5N/gHIAXP0a9AjmOs7
fqixmax6WfZt5A==
-----END CERTIFICATE-----
Generated at Mon Jun 10 04:01:39 2024 by rpki-client on console-ams.rpki-client.org