Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvfUxQY7XfuS1mLzftWW19ug5g1JweTCFMRh9CLQMPvR/0/323830343a323639383a3a2f33322d313238203d3e20323633383431.roa
File:                     323830343a323639383a3a2f33322d313238203d3e20323633383431.roa (raw, json)
Hash identifier:          WbSIxeI7OKZ4M5xk3IH9IeiXaQRBOdj5YokM5RwXg3o=
Subject key identifier:   7D:71:0C:C8:06:FE:62:FD:E5:AE:56:29:C2:08:00:12:C7:F8:98:4A
Certificate issuer:       /CN=DAF1A7EA4B52F9002A0F4ABBBFF679FA8C859622
Certificate serial:       53DEB8779537CD7DB449DE74396F97DFC73CFBFD
Authority key identifier: DA:F1:A7:EA:4B:52:F9:00:2A:0F:4A:BB:BF:F6:79:FA:8C:85:96:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF1A7EA4B52F9002A0F4ABBBFF679FA8C859622.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvfUxQY7XfuS1mLzftWW19ug5g1JweTCFMRh9CLQMPvR/0/323830343a323639383a3a2f33322d313238203d3e20323633383431.roa
Signing time:             Mon 01 Jul 2024 13:41:41 +0000
ROA not before:           Mon 01 Jul 2024 13:36:41 +0000
ROA not after:            Mon 30 Jun 2025 13:41:41 +0000
asID:                     263841
IP address blocks:        2804:2698::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:de:b8:77:95:37:cd:7d:b4:49:de:74:39:6f:97:df:c7:3c:fb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAF1A7EA4B52F9002A0F4ABBBFF679FA8C859622
        Validity
            Not Before: Jul  1 13:36:41 2024 GMT
            Not After : Jun 30 13:41:41 2025 GMT
        Subject: CN=7D710CC806FE62FDE5AE5629C2080012C7F8984A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:12:20:86:7e:e6:c2:03:69:c8:af:f2:53:
                    b7:50:33:7f:c5:3b:79:3a:10:b5:37:99:a2:18:fb:
                    17:c8:55:35:62:fb:23:ca:00:79:c9:6c:87:fd:ca:
                    8c:b8:ec:98:4c:d7:62:7d:e0:76:f6:37:32:2f:c6:
                    25:f0:6d:a4:ba:9a:8f:9e:42:8b:8c:38:d3:7a:ef:
                    d5:4e:18:1e:dc:1b:fb:69:cd:9a:36:da:ce:2e:5f:
                    a9:5c:96:44:c2:c4:8c:7c:58:db:50:d7:3e:8b:da:
                    c2:63:ec:df:76:a1:ff:83:19:35:ba:c1:3d:d3:01:
                    b4:a9:d9:c7:34:fc:f4:cc:56:66:1d:b7:bc:86:f1:
                    ba:7a:5b:ee:95:44:30:2a:60:af:03:50:f9:52:00:
                    ca:af:e8:87:2b:00:e7:26:03:50:dc:28:8d:3e:9f:
                    76:07:5c:c8:80:27:b7:49:7e:ce:a1:a5:4d:a0:ca:
                    c2:7c:48:3f:37:52:8c:09:9d:eb:83:91:ba:bc:4c:
                    18:82:a4:49:fc:05:c3:15:56:ef:b8:ed:25:a9:cb:
                    87:5e:0b:c4:f0:3d:b5:e4:09:40:9f:ce:0e:0e:d2:
                    39:ec:ae:88:f2:e1:10:16:ec:6f:a3:31:30:18:04:
                    17:31:68:15:46:b1:44:65:a5:b7:c3:3c:02:69:1b:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:71:0C:C8:06:FE:62:FD:E5:AE:56:29:C2:08:00:12:C7:F8:98:4A
            X509v3 Authority Key Identifier:
                keyid:DA:F1:A7:EA:4B:52:F9:00:2A:0F:4A:BB:BF:F6:79:FA:8C:85:96:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvfUxQY7XfuS1mLzftWW19ug5g1JweTCFMRh9CLQMPvR/0/DAF1A7EA4B52F9002A0F4ABBBFF679FA8C859622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF1A7EA4B52F9002A0F4ABBBFF679FA8C859622.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvfUxQY7XfuS1mLzftWW19ug5g1JweTCFMRh9CLQMPvR/0/323830343a323639383a3a2f33322d313238203d3e20323633383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2698::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:77:6d:4a:c8:2f:72:61:8b:a7:b1:18:af:db:3a:74:15:f9:
         3f:00:f5:10:ca:7c:f4:5a:01:f4:e3:86:41:2f:7b:72:70:e3:
         5c:f7:7a:57:af:ec:95:91:6b:cc:5d:c1:46:f7:a3:c5:9c:f3:
         0f:39:cb:3f:59:f7:05:31:c3:0d:33:8b:44:bd:21:a2:4a:9e:
         04:f3:e9:4c:5a:37:ea:e8:22:bb:36:13:07:c9:48:d0:8e:11:
         e9:56:2d:b2:95:84:20:39:d7:72:ed:3c:ab:0f:b1:2c:4f:3a:
         c5:08:49:2d:6f:f4:31:eb:c6:5f:25:0f:f8:e2:af:1d:65:a9:
         af:f3:0e:18:67:29:a3:47:5f:f0:4c:e4:7c:60:e2:f7:e8:0f:
         6e:67:ff:fa:be:32:4b:8c:2d:2d:96:d0:af:74:27:40:db:27:
         c2:7b:cb:79:0a:c3:dd:8e:ed:b1:ae:4f:ac:83:a3:47:b1:f4:
         0f:24:5a:a8:49:f0:d6:4b:c4:c7:ee:7b:ae:12:2b:eb:77:0e:
         4d:83:46:d1:6b:f6:f8:e5:8b:1a:c6:fb:4a:3d:ec:5d:e8:fb:
         d0:84:7c:5d:37:4a:71:8d:e7:14:f6:cc:75:a2:39:ef:57:e0:
         7d:01:ef:e0:03:85:3d:08:4f:3d:51:d8:2e:ae:62:49:76:ad:
         5e:e3:8e:77
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUU964d5U3zX20Sd50OW+X38c8+/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFGMUE3RUE0QjUyRjkwMDJBMEY0QUJCQkZGNjc5RkE4
Qzg1OTYyMjAeFw0yNDA3MDExMzM2NDFaFw0yNTA2MzAxMzQxNDFaMDMxMTAvBgNV
BAMTKDdENzEwQ0M4MDZGRTYyRkRFNUFFNTYyOUMyMDgwMDEyQzdGODk4NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhBIghn7mwgNpyK/yU7dQM3/F
O3k6ELU3maIY+xfIVTVi+yPKAHnJbIf9yoy47JhM12J94Hb2NzIvxiXwbaS6mo+e
QouMONN679VOGB7cG/tpzZo22s4uX6lclkTCxIx8WNtQ1z6L2sJj7N92of+DGTW6
wT3TAbSp2cc0/PTMVmYdt7yG8bp6W+6VRDAqYK8DUPlSAMqv6IcrAOcmA1DcKI0+
n3YHXMiAJ7dJfs6hpU2gysJ8SD83UowJneuDkbq8TBiCpEn8BcMVVu+47SWpy4de
C8TwPbXkCUCfzg4O0jnsrojy4RAW7G+jMTAYBBcxaBVGsURlpbfDPAJpGy8XAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUfXEMyAb+Yv3lrlYpwggAEsf4mEowHwYDVR0j
BBgwFoAU2vGn6ktS+QAqD0q7v/Z5+oyFliIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZmVXhRWTdYZnVTMW1MemZ0V1cxOXVnNWcxSndlVENGTVJoOUNMUU1Q
dlIvMC9EQUYxQTdFQTRCNTJGOTAwMkEwRjRBQkJCRkY2NzlGQThDODU5NjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBRjFBN0VBNEI1MkY5MDAy
QTBGNEFCQkJGRjY3OUZBOEM4NTk2MjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2ZlV4UVk3WGZ1UzFtTHpmdFdXMTl1ZzVnMUp3ZVRDRk1SaDlDTFFNUHZSLzAv
MzIzODMwMzQzYTMyMzYzOTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzODM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCaYMA0GCSqGSIb3DQEBCwUAA4IBAQAPd21K
yC9yYYunsRiv2zp0Ffk/APUQynz0WgH044ZBL3tycONc93pXr+yVkWvMXcFG96PF
nPMPOcs/WfcFMcMNM4tEvSGiSp4E8+lMWjfq6CK7NhMHyUjQjhHpVi2ylYQgOddy
7TyrD7EsTzrFCEktb/Qx68ZfJQ/44q8dZamv8w4YZymjR1/wTOR8YOL36A9uZ//6
vjJLjC0tltCvdCdA2yfCe8t5CsPdju2xrk+sg6NHsfQPJFqoSfDWS8TH7nuuEivr
dw5Ng0bRa/b45YsaxvtKPexd6PvQhHxdN0pxjecU9sx1ojnvV+B9Ae/gA4U9CE89
UdgurmJJdq1e4453
-----END CERTIFICATE-----
Generated at Sun Sep 22 19:35:18 2024 by rpki-client on console-fra.rpki-client.org