Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/323830343a316466383a3a2f33322d313238203d3e20323634343034.roa
File:                     323830343a316466383a3a2f33322d313238203d3e20323634343034.roa (raw, json)
Hash identifier:          fK07n9yr6CIGuW8Uw22uuIZ12qn7+Wcy5OfpxUaHh3E=
Subject key identifier:   61:FC:97:05:AE:7B:9C:0D:08:C5:86:FF:41:EB:B1:2E:F9:16:BC:CD
Certificate issuer:       /CN=D094BD14767790CF0B4A79F0DA251694C06C2C7E
Certificate serial:       10C02D7CD56DDEE7EBDC2A4165634B9AB4ADFE68
Authority key identifier: D0:94:BD:14:76:77:90:CF:0B:4A:79:F0:DA:25:16:94:C0:6C:2C:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/323830343a316466383a3a2f33322d313238203d3e20323634343034.roa
Signing time:             Thu 04 Apr 2024 10:20:38 +0000
ROA not before:           Thu 04 Apr 2024 10:15:38 +0000
ROA not after:            Thu 03 Apr 2025 10:20:38 +0000
asID:                     264404
IP address blocks:        2804:1df8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c0:2d:7c:d5:6d:de:e7:eb:dc:2a:41:65:63:4b:9a:b4:ad:fe:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D094BD14767790CF0B4A79F0DA251694C06C2C7E
        Validity
            Not Before: Apr  4 10:15:38 2024 GMT
            Not After : Apr  3 10:20:38 2025 GMT
        Subject: CN=61FC9705AE7B9C0D08C586FF41EBB12EF916BCCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:18:40:43:12:1b:01:14:87:1b:9f:36:1e:42:
                    95:0f:01:60:a0:e3:d1:e7:f5:a4:53:63:cf:cc:d6:
                    50:6d:3e:17:97:5a:8d:27:df:86:49:e0:90:df:52:
                    d5:81:b7:dd:5b:30:6c:e4:26:1a:73:48:ee:82:25:
                    01:35:7c:79:4d:88:e4:fa:98:84:c8:9d:7f:cb:2b:
                    4e:b4:aa:8d:9d:26:ea:62:7c:fa:97:36:92:a3:ae:
                    55:06:8a:24:de:7b:f9:cd:92:24:75:13:f2:09:2b:
                    6d:56:c5:45:a8:a6:9e:94:a1:90:09:e9:fd:dc:84:
                    dc:d9:dc:16:e9:d5:cd:d2:8b:c0:57:e7:4f:37:60:
                    01:4f:9b:14:a8:17:ba:0a:6f:b5:95:3c:fd:67:c5:
                    25:e8:64:b9:fb:92:c6:8c:49:2f:c4:c7:78:e6:8a:
                    78:76:3f:ed:fa:5e:6a:9c:74:b9:0e:86:8c:7b:77:
                    12:4c:fb:a0:4f:e6:b8:f6:e1:88:3c:1e:e9:5c:30:
                    43:16:52:39:75:f3:71:9e:17:e8:6b:28:3c:ec:59:
                    b8:27:dc:bc:a6:ca:e8:38:64:dd:6a:dd:3c:ec:23:
                    e1:d6:18:1f:6b:b3:a1:be:16:ae:41:d8:59:0a:48:
                    78:7c:75:2b:18:05:b7:f8:fa:04:c9:29:8b:2d:c2:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FC:97:05:AE:7B:9C:0D:08:C5:86:FF:41:EB:B1:2E:F9:16:BC:CD
            X509v3 Authority Key Identifier:
                keyid:D0:94:BD:14:76:77:90:CF:0B:4A:79:F0:DA:25:16:94:C0:6C:2C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/323830343a316466383a3a2f33322d313238203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1df8::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:52:1a:10:97:19:af:a9:b3:a2:21:72:f4:be:ce:13:58:22:
         5e:3e:62:0a:2b:d2:9e:8d:f2:c8:e4:3e:91:57:6a:51:5c:11:
         b8:ba:1d:c2:d4:ee:e1:02:0d:98:de:fd:bf:29:98:75:86:ea:
         bf:7e:a0:86:79:7a:f6:54:86:3e:90:1e:b0:7f:aa:77:4d:dc:
         b0:28:5c:b2:2a:e4:89:8b:55:7c:00:01:a6:99:09:74:f9:a8:
         10:1c:8b:f7:be:f7:d9:60:2a:4b:12:48:f9:d9:95:a0:61:1d:
         b7:d2:09:ce:4c:b3:b3:75:ab:d0:04:52:99:93:9c:11:df:47:
         93:c0:3b:16:04:96:18:dd:ea:ba:3d:5f:a0:b4:e3:b0:bf:3a:
         c1:62:ef:47:a0:a2:7c:4f:15:ba:7f:cc:4b:86:35:d3:39:03:
         59:61:f3:0f:ca:52:79:b4:da:03:8e:cf:a9:13:18:f7:b9:5a:
         ca:61:6f:a6:10:33:1c:7d:e0:48:91:98:14:8f:fc:44:8c:f3:
         41:65:74:b9:0e:15:07:e4:fa:43:b1:87:57:ed:9d:cf:e1:87:
         e9:70:e2:89:38:b0:78:89:d4:f6:a1:8f:7d:72:53:69:10:67:
         98:31:bc:84:49:f2:3b:ce:56:71:e9:b8:81:39:fd:53:39:7b:
         a8:bc:5a:41
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUEMAtfNVt3ufr3CpBZWNLmrSt/mgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA5NEJEMTQ3Njc3OTBDRjBCNEE3OUYwREEyNTE2OTRD
MDZDMkM3RTAeFw0yNDA0MDQxMDE1MzhaFw0yNTA0MDMxMDIwMzhaMDMxMTAvBgNV
BAMTKDYxRkM5NzA1QUU3QjlDMEQwOEM1ODZGRjQxRUJCMTJFRjkxNkJDQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaGEBDEhsBFIcbnzYeQpUPAWCg
49Hn9aRTY8/M1lBtPheXWo0n34ZJ4JDfUtWBt91bMGzkJhpzSO6CJQE1fHlNiOT6
mITInX/LK060qo2dJupifPqXNpKjrlUGiiTee/nNkiR1E/IJK21WxUWopp6UoZAJ
6f3chNzZ3Bbp1c3Si8BX5083YAFPmxSoF7oKb7WVPP1nxSXoZLn7ksaMSS/Ex3jm
inh2P+36XmqcdLkOhox7dxJM+6BP5rj24Yg8HulcMEMWUjl183GeF+hrKDzsWbgn
3Lymyug4ZN1q3TzsI+HWGB9rs6G+Fq5B2FkKSHh8dSsYBbf4+gTJKYstwhAnAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUYfyXBa57nA0IxYb/QeuxLvkWvM0wHwYDVR0j
BBgwFoAU0JS9FHZ3kM8LSnnw2iUWlMBsLH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWE3aHNraTFmU3drVnBnRGNqeVpCUHNBNU5ZZ1lHTG44Vzlza3lDNXc1
aUIvMS9EMDk0QkQxNDc2Nzc5MENGMEI0QTc5RjBEQTI1MTY5NEMwNkMyQzdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwOTRCRDE0NzY3NzkwQ0Yw
QjRBNzlGMERBMjUxNjk0QzA2QzJDN0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FhN2hza2kxZlN3a1ZwZ0RjanlaQlBzQTVOWWdZR0xuOFc5c2t5QzV3NWlCLzEv
MzIzODMwMzQzYTMxNjQ2NjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzNDMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBB34MA0GCSqGSIb3DQEBCwUAA4IBAQBRUhoQ
lxmvqbOiIXL0vs4TWCJePmIKK9KejfLI5D6RV2pRXBG4uh3C1O7hAg2Y3v2/KZh1
huq/fqCGeXr2VIY+kB6wf6p3TdywKFyyKuSJi1V8AAGmmQl0+agQHIv3vvfZYCpL
Ekj52ZWgYR230gnOTLOzdavQBFKZk5wR30eTwDsWBJYY3eq6PV+gtOOwvzrBYu9H
oKJ8TxW6f8xLhjXTOQNZYfMPylJ5tNoDjs+pExj3uVrKYW+mEDMcfeBIkZgUj/xE
jPNBZXS5DhUH5PpDsYdX7Z3P4YfpcOKJOLB4idT2oY99clNpEGeYMbyESfI7zlZx
6biBOf1TOXuovFpB
-----END CERTIFICATE-----
Generated at Wed Jun 19 18:14:31 2024 by rpki-client on console-fra.rpki-client.org