Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3a2f33322d3438203d3e20323732353831.roa
File:                     323830343a383537383a3a2f33322d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          sfwCDsF2BVivS4spYt1GwAWn/HEEKUE5ZJnENNTgY5s=
Subject key identifier:   C5:EF:70:1A:86:B3:8E:3C:1C:2E:30:BF:6B:76:E3:5C:A5:E3:B7:EB
Certificate issuer:       /CN=4CE208B60A335AC817BD8345B866877953FA18BA
Certificate serial:       6AFE784E3C85A539D286B7B78759212DB74097AC
Authority key identifier: 4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3a2f33322d3438203d3e20323732353831.roa
Signing time:             Tue 15 Oct 2024 16:54:28 +0000
ROA not before:           Tue 15 Oct 2024 16:49:28 +0000
ROA not after:            Tue 14 Oct 2025 16:54:28 +0000
asID:                     272581
IP address blocks:        2804:8578::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fe:78:4e:3c:85:a5:39:d2:86:b7:b7:87:59:21:2d:b7:40:97:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE208B60A335AC817BD8345B866877953FA18BA
        Validity
            Not Before: Oct 15 16:49:28 2024 GMT
            Not After : Oct 14 16:54:28 2025 GMT
        Subject: CN=C5EF701A86B38E3C1C2E30BF6B76E35CA5E3B7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:04:bd:04:d6:09:fc:7d:e8:dc:05:ee:aa:
                    2d:2b:20:ca:e2:1c:00:df:81:1f:10:d2:6f:8c:b7:
                    c1:be:ce:44:36:81:bc:c6:95:47:b3:81:9f:16:2e:
                    cf:dd:f9:18:6d:27:35:93:62:78:54:31:4a:99:ff:
                    de:4d:e8:ed:73:3c:0f:7c:ce:cf:8a:da:34:7e:0e:
                    53:75:e6:0e:23:7b:37:50:40:3f:10:c8:e8:61:79:
                    7e:5f:ae:57:ce:43:3d:b5:d9:34:34:92:5d:fe:f9:
                    2a:15:ba:0d:7b:1c:fc:32:de:fd:44:03:06:9d:3b:
                    0b:17:5b:a1:48:46:67:1f:3e:45:5e:bf:1c:0f:fd:
                    ee:6d:08:8e:db:7a:10:27:18:3e:5e:58:88:d1:6d:
                    16:f3:d6:da:62:72:ab:45:cc:d3:46:e9:92:84:fc:
                    8d:1d:f9:92:16:c0:b0:61:c4:df:fd:dc:09:02:a7:
                    22:14:7c:8b:f9:80:71:a6:1b:e1:b6:7a:74:af:72:
                    bc:84:20:1a:b3:ae:c7:9f:4e:c3:10:ec:39:45:ef:
                    ad:1f:44:83:75:82:2a:27:12:e6:a1:b1:b0:2a:79:
                    0e:9e:9b:ec:ea:3a:f8:3e:64:c4:f9:c5:e1:75:89:
                    04:b7:a3:4b:4b:a4:a0:1b:6b:02:b4:dc:98:7c:05:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EF:70:1A:86:B3:8E:3C:1C:2E:30:BF:6B:76:E3:5C:A5:E3:B7:EB
            X509v3 Authority Key Identifier:
                keyid:4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3a2f33322d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:e7:9c:fd:52:99:9d:17:39:4e:e9:20:87:58:ac:37:a4:3d:
         7e:35:38:d9:48:0e:0e:27:21:03:c5:f6:02:2c:1b:f3:c6:ed:
         a1:d4:9d:cb:b0:de:f9:25:ae:c5:d5:6d:c2:b7:72:a8:a0:c1:
         c4:b8:bf:2e:82:86:8f:68:07:04:3f:5d:b0:7a:8f:be:5e:a6:
         9c:4f:d4:78:0e:b3:3b:ef:6f:72:5b:1c:39:c6:23:31:9a:25:
         b4:4d:f3:f9:be:d2:3b:09:08:a4:32:58:74:3b:14:cb:e7:09:
         bc:29:81:1f:9c:8f:58:be:e7:e0:92:b7:b4:2d:25:13:f8:e1:
         3d:48:46:79:23:94:72:2a:dd:8c:35:d0:fd:94:f0:d3:9d:91:
         4c:8e:ea:0b:b5:77:c1:5c:88:28:92:5a:30:03:4b:ce:4e:75:
         48:95:bb:9c:7f:b3:06:6e:af:98:91:69:6e:46:45:b9:d9:4e:
         5b:c0:e6:bb:af:21:a3:99:42:21:64:fd:ba:e0:bb:03:0a:a5:
         7a:e6:95:4c:c8:27:f8:7a:8e:9d:cb:a7:d3:bd:a6:aa:a0:a4:
         fa:d3:26:c9:c9:cb:c8:88:c8:32:f1:40:ab:d9:e2:31:ac:e4:
         c1:11:12:7b:b1:29:ef:4f:34:a5:25:96:35:d2:a1:07:f6:0f:
         57:43:42:43
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUav54TjyFpTnShre3h1khLbdAl6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENFMjA4QjYwQTMzNUFDODE3QkQ4MzQ1Qjg2Njg3Nzk1
M0ZBMThCQTAeFw0yNDEwMTUxNjQ5MjhaFw0yNTEwMTQxNjU0MjhaMDMxMTAvBgNV
BAMTKEM1RUY3MDFBODZCMzhFM0MxQzJFMzBCRjZCNzZFMzVDQTVFM0I3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkgS9BNYJ/H3o3AXuqi0rIMri
HADfgR8Q0m+Mt8G+zkQ2gbzGlUezgZ8WLs/d+RhtJzWTYnhUMUqZ/95N6O1zPA98
zs+K2jR+DlN15g4jezdQQD8QyOhheX5frlfOQz212TQ0kl3++SoVug17HPwy3v1E
AwadOwsXW6FIRmcfPkVevxwP/e5tCI7behAnGD5eWIjRbRbz1tpicqtFzNNG6ZKE
/I0d+ZIWwLBhxN/93AkCpyIUfIv5gHGmG+G2enSvcryEIBqzrsefTsMQ7DlF760f
RIN1gionEuahsbAqeQ6em+zqOvg+ZMT5xeF1iQS3o0tLpKAbawK03Jh8BYOhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxe9wGoazjjwcLjC/a3bjXKXjt+swHwYDVR0j
BBgwFoAUTOIItgozWsgXvYNFuGaHeVP6GLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB
OXovMi80Q0UyMDhCNjBBMzM1QUM4MTdCRDgzNDVCODY2ODc3OTUzRkExOEJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRTIwOEI2MEEzMzVBQzgx
N0JEODM0NUI4NjY4Nzc5NTNGQTE4QkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLY1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzIv
MzIzODMwMzQzYTM4MzUzNzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMy
MzUzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASFeDANBgkqhkiG9w0BAQsFAAOCAQEASOec/VKZ
nRc5Tukgh1isN6Q9fjU42UgODichA8X2Aiwb88btodSdy7De+SWuxdVtwrdyqKDB
xLi/LoKGj2gHBD9dsHqPvl6mnE/UeA6zO+9vclscOcYjMZoltE3z+b7SOwkIpDJY
dDsUy+cJvCmBH5yPWL7n4JK3tC0lE/jhPUhGeSOUcirdjDXQ/ZTw052RTI7qC7V3
wVyIKJJaMANLzk51SJW7nH+zBm6vmJFpbkZFudlOW8Dmu68ho5lCIWT9uuC7Awql
euaVTMgn+HqOncun072mqqCk+tMmycnLyIjIMvFAq9niMazkwRESe7Ep7080pSWW
NdKhB/YPV0NCQw==
-----END CERTIFICATE-----
Generated at Sun Oct 27 08:27:39 2024 by rpki-client on console-fra.rpki-client.org