Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6231633a3a2f33322d3438203d3e203533303038.roa
File:                     323830343a6231633a3a2f33322d3438203d3e203533303038.roa (raw, json)
Hash identifier:          WYarkxA1zyxlk4zeBaoV23BHjs/5hLidMSVsY6vVZOY=
Subject key identifier:   6F:1D:34:12:27:0D:9F:70:78:39:60:9C:3A:B9:28:BE:56:6E:C8:83
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       5AC01D29FDDF3DDFBEB70A598FEC3B8D2F80ABD6
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6231633a3a2f33322d3438203d3e203533303038.roa
Signing time:             Thu 04 Apr 2024 19:59:33 +0000
ROA not before:           Thu 04 Apr 2024 19:54:33 +0000
ROA not after:            Thu 03 Apr 2025 19:59:33 +0000
asID:                     53008
IP address blocks:        2804:b1c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c0:1d:29:fd:df:3d:df:be:b7:0a:59:8f:ec:3b:8d:2f:80:ab:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:33 2024 GMT
            Not After : Apr  3 19:59:33 2025 GMT
        Subject: CN=6F1D3412270D9F707839609C3AB928BE566EC883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:e8:20:d6:9e:9f:4b:af:e6:d6:2c:f4:6f:
                    38:8c:db:97:11:fe:66:07:86:e5:4d:7e:1f:d6:bb:
                    48:e9:d3:31:45:e7:4e:2e:9f:b5:a7:f5:75:7e:ad:
                    1c:d0:5a:34:2f:57:f0:64:c5:59:30:c0:87:77:a0:
                    d1:0d:d9:63:36:45:b2:19:fb:b3:03:13:cd:57:ac:
                    e7:91:7a:4b:49:c0:64:00:d7:f2:66:55:46:f9:9e:
                    fa:a0:5a:e6:d9:65:4c:08:cd:10:2a:54:aa:10:65:
                    3f:fe:c5:db:d4:c8:42:e4:c7:d0:1c:0d:f1:db:c1:
                    dc:f0:6f:38:9b:10:9d:46:74:5d:e7:18:76:cb:0d:
                    c9:94:8d:fd:d0:6a:a1:0b:4b:31:34:87:68:87:a8:
                    8e:b0:b7:7d:80:12:6d:0a:70:c9:c0:46:1d:c5:58:
                    13:c5:ec:9a:37:d3:fe:8a:f3:8e:9b:70:77:61:cf:
                    73:4e:22:88:bc:52:20:6e:6b:f8:e1:c3:03:6a:5f:
                    93:e6:25:0f:10:47:60:be:75:d9:fa:95:a5:57:fd:
                    8b:a0:5c:bb:fb:d2:a0:42:d8:53:69:f5:fc:19:81:
                    26:fd:b7:d8:cd:0c:2e:22:b0:f1:1e:b9:f6:42:77:
                    07:92:8e:bb:e6:79:53:5a:fd:7a:df:35:c6:ce:cc:
                    4e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1D:34:12:27:0D:9F:70:78:39:60:9C:3A:B9:28:BE:56:6E:C8:83
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6231633a3a2f33322d3438203d3e203533303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:cf:ab:3b:ac:b8:da:69:0f:59:d5:dd:45:a0:27:29:80:f4:
         07:33:24:3b:86:3b:ca:e6:90:65:54:2c:3d:ce:3d:c8:9e:94:
         eb:e1:e1:95:96:f0:59:b3:e7:dd:9f:16:12:de:ae:34:c4:b2:
         37:8b:8d:84:ab:89:da:46:b5:c7:c5:b0:18:5e:dd:e2:72:2b:
         38:0a:31:9c:36:c4:90:fc:47:05:e7:8d:f2:be:0e:45:63:7a:
         32:82:1d:19:ac:90:54:32:c3:ff:e5:23:89:a7:cb:1b:29:b6:
         0f:46:35:41:85:25:bf:3d:ee:2d:01:6e:68:dd:ca:90:d8:e6:
         87:17:cd:4d:bb:e3:bd:74:90:a8:d6:f1:fb:c7:10:47:a0:59:
         32:95:6e:b3:9f:ca:a3:1d:10:a6:d0:28:9d:99:a4:2f:d9:8f:
         49:49:9e:34:5e:64:93:4a:2f:e8:52:bd:fd:00:88:4a:12:9d:
         85:a0:fd:13:d4:77:99:b0:60:b3:e0:bb:7b:65:7a:d8:c9:cc:
         fe:95:b7:a8:aa:c3:7c:05:e9:c5:d4:2c:39:57:ae:98:e2:57:
         bf:94:cb:9c:a4:eb:44:c3:83:c8:98:11:06:8b:00:6d:9a:b3:
         94:54:db:54:51:78:7c:77:9c:df:18:b0:9b:19:46:09:3c:33:
         68:6c:2b:71
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUWsAdKf3fPd++twpZj+w7jS+Aq9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzODYyRDE3MUM4NzVDM0YxODQ0MzJEREFEQ0M4MjE5
RjUxQ0FERjAeFw0yNDA0MDQxOTU0MzNaFw0yNTA0MDMxOTU5MzNaMDMxMTAvBgNV
BAMTKDZGMUQzNDEyMjcwRDlGNzA3ODM5NjA5QzNBQjkyOEJFNTY2RUM4ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXugg1p6fS6/m1iz0bziM25cR
/mYHhuVNfh/Wu0jp0zFF504un7Wn9XV+rRzQWjQvV/BkxVkwwId3oNEN2WM2RbIZ
+7MDE81XrOeRektJwGQA1/JmVUb5nvqgWubZZUwIzRAqVKoQZT/+xdvUyELkx9Ac
DfHbwdzwbzibEJ1GdF3nGHbLDcmUjf3QaqELSzE0h2iHqI6wt32AEm0KcMnARh3F
WBPF7Jo30/6K846bcHdhz3NOIoi8UiBua/jhwwNqX5PmJQ8QR2C+ddn6laVX/Yug
XLv70qBC2FNp9fwZgSb9t9jNDC4isPEeufZCdweSjrvmeVNa/XrfNcbOzE5hAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUbx00EicNn3B4OWCcOrkovlZuyIMwHwYDVR0j
BBgwFoAUeThi0XHIdcPxhEMt2tzIIZ9Ryt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMS83OTM4NjJEMTcxQzg3NUMzRjE4NDQzMkREQURDQzgyMTlGNTFDQURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5Mzg2MkQxNzFDODc1QzNG
MTg0NDMyRERBRENDODIxOUY1MUNBREYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzEv
MzIzODMwMzQzYTYyMzE2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMDMw
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAscMA0GCSqGSIb3DQEBCwUAA4IBAQB/z6s7rLjaaQ9Z
1d1FoCcpgPQHMyQ7hjvK5pBlVCw9zj3InpTr4eGVlvBZs+fdnxYS3q40xLI3i42E
q4naRrXHxbAYXt3icis4CjGcNsSQ/EcF543yvg5FY3oygh0ZrJBUMsP/5SOJp8sb
KbYPRjVBhSW/Pe4tAW5o3cqQ2OaHF81Nu+O9dJCo1vH7xxBHoFkylW6zn8qjHRCm
0CidmaQv2Y9JSZ40XmSTSi/oUr39AIhKEp2FoP0T1HeZsGCz4Lt7ZXrYycz+lbeo
qsN8BenF1Cw5V66Y4le/lMucpOtEw4PImBEGiwBtmrOUVNtUUXh8d5zfGLCbGUYJ
PDNobCtx
-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org