Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a383030303a3a2f33332d3333203d3e20323634333434.roa
File:                     323830343a323637343a383030303a3a2f33332d3333203d3e20323634333434.roa (raw, json)
Hash identifier:          sB7CRrD9yFfWL2+bdEmoTmYO+V/B5acgTYcCH0ZKW08=
Subject key identifier:   58:1D:66:DD:AE:87:14:67:D2:48:35:20:89:E5:ED:9A:9B:FE:0F:4C
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       2EBBA502B10F8097B0CA2E44C0137A5681F62C4F
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a383030303a3a2f33332d3333203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:36 +0000
ROA not before:           Wed 03 Apr 2024 21:19:36 +0000
ROA not after:            Wed 02 Apr 2025 21:24:36 +0000
asID:                     264344
IP address blocks:        2804:2674:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bb:a5:02:b1:0f:80:97:b0:ca:2e:44:c0:13:7a:56:81:f6:2c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:36 2024 GMT
            Not After : Apr  2 21:24:36 2025 GMT
        Subject: CN=581D66DDAE871467D248352089E5ED9A9BFE0F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:1a:91:21:63:27:d3:f1:0e:78:9f:2e:b7:
                    82:b6:3f:a5:13:c2:4f:a3:bc:af:73:44:a5:db:1f:
                    51:d0:f2:e7:07:82:6c:e8:d9:3c:04:a6:93:03:d0:
                    8a:74:7d:96:38:2b:52:54:e3:2e:fb:56:b3:a5:b3:
                    02:3c:97:2a:e0:e7:fe:7d:91:9a:6a:3d:a1:0e:9d:
                    4d:5b:7b:81:be:b2:94:d2:38:49:e2:f2:e7:da:07:
                    48:41:4e:2b:24:da:4c:05:68:b2:b2:e8:dd:6d:9f:
                    7b:d9:95:31:fc:d0:a4:87:c0:c8:f3:cf:ad:e9:5b:
                    54:e0:7d:c6:8a:27:18:b2:24:35:55:c5:85:1e:8c:
                    6d:be:1c:35:7e:d2:ff:58:86:cc:3b:85:78:d3:27:
                    5d:ea:ad:c6:7b:1d:f9:b6:dd:ee:64:34:a6:aa:9c:
                    e0:ad:9f:23:b2:5f:67:79:37:78:64:28:13:70:d7:
                    45:c9:42:12:54:e4:7a:08:93:08:7d:49:85:a5:12:
                    09:3a:7b:25:80:7e:f1:9e:25:fb:12:63:9d:c9:2c:
                    49:e4:6d:ae:fd:60:fd:27:26:45:2d:14:0b:3f:a7:
                    b4:82:c7:9a:c8:ef:69:25:67:93:99:1b:31:23:d4:
                    29:e2:39:73:ac:8d:5c:1a:be:87:3a:dd:cf:32:aa:
                    24:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1D:66:DD:AE:87:14:67:D2:48:35:20:89:E5:ED:9A:9B:FE:0F:4C
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a383030303a3a2f33332d3333203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         44:7b:b5:ab:ea:47:35:8d:24:6a:9f:9d:46:fe:3b:69:78:40:
         9c:60:b4:3a:63:45:c9:aa:36:85:cb:3f:bd:84:3f:92:ce:6e:
         78:05:86:06:ab:22:ec:27:fb:8b:5a:c7:b5:ce:30:d5:85:99:
         7f:17:fb:cf:71:7a:28:a4:25:50:35:c9:6e:1c:13:c4:c7:4b:
         c6:07:c2:94:75:20:ee:73:02:49:45:1f:90:bf:8e:0b:14:11:
         fe:37:66:b8:0d:82:1f:ad:d3:ba:2c:d1:e4:6f:38:5e:e3:12:
         7b:66:6c:dc:8c:a6:79:a2:ab:27:3f:19:c7:68:2b:43:a4:a0:
         49:33:26:20:81:f8:03:76:63:44:15:42:9b:cc:50:9a:83:e0:
         31:46:bd:68:b7:0b:c9:79:14:86:23:cc:07:77:c2:55:0c:0d:
         b6:f9:ce:79:64:bd:b2:b8:79:09:2f:04:a3:95:0f:63:4f:0b:
         03:0c:3f:f2:63:14:0a:d3:88:f7:cf:54:ad:ca:5c:6a:ed:be:
         a7:08:bc:0e:d1:fd:fc:b1:c4:44:3a:1f:40:93:ce:dc:c1:10:
         8f:e0:dc:4a:99:ec:fc:09:87:8e:52:25:6d:f2:50:be:8e:fa:
         50:27:c3:c6:f3:c6:e9:1a:62:59:ac:67:6c:bb:21:1b:a0:e0:
         0a:46:f1:0f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULrulArEPgJewyi5EwBN6VoH2LE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUwNjc3MDY3OEUwOTlCREM5MjU1NzkxMEM5NDE4ODdG
QTg1NzFCMjAeFw0yNDA0MDMyMTE5MzZaFw0yNTA0MDIyMTI0MzZaMDMxMTAvBgNV
BAMTKDU4MUQ2NkREQUU4NzE0NjdEMjQ4MzUyMDg5RTVFRDlBOUJGRTBGNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDHBqRIWMn0/EOeJ8ut4K2P6UT
wk+jvK9zRKXbH1HQ8ucHgmzo2TwEppMD0Ip0fZY4K1JU4y77VrOlswI8lyrg5/59
kZpqPaEOnU1be4G+spTSOEni8ufaB0hBTisk2kwFaLKy6N1tn3vZlTH80KSHwMjz
z63pW1TgfcaKJxiyJDVVxYUejG2+HDV+0v9Yhsw7hXjTJ13qrcZ7Hfm23e5kNKaq
nOCtnyOyX2d5N3hkKBNw10XJQhJU5HoIkwh9SYWlEgk6eyWAfvGeJfsSY53JLEnk
ba79YP0nJkUtFAs/p7SCx5rI72klZ5OZGzEj1CniOXOsjVwavoc63c8yqiTzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUWB1m3a6HFGfSSDUgieXtmpv+D0wwHwYDVR0j
BBgwFoAU3gZ3Bnjgmb3JJVeRDJQYh/qFcbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMS9ERTA2NzcwNjc4RTA5OUJEQzkyNTU3OTEwQzk0MTg4N0ZBODU3MUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMDY3NzA2NzhFMDk5QkRD
OTI1NTc5MTBDOTQxODg3RkE4NTcxQjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzEv
MzIzODMwMzQzYTMyMzYzNzM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEJnSAMA0GCSqGSIb3DQEBCwUA
A4IBAQBEe7Wr6kc1jSRqn51G/jtpeECcYLQ6Y0XJqjaFyz+9hD+Szm54BYYGqyLs
J/uLWse1zjDVhZl/F/vPcXoopCVQNcluHBPEx0vGB8KUdSDucwJJRR+Qv44LFBH+
N2a4DYIfrdO6LNHkbzhe4xJ7ZmzcjKZ5oqsnPxnHaCtDpKBJMyYggfgDdmNEFUKb
zFCag+AxRr1otwvJeRSGI8wHd8JVDA22+c55ZL2yuHkJLwSjlQ9jTwsDDD/yYxQK
04j3z1Stylxq7b6nCLwO0f38scREOh9Ak87cwRCP4NxKmez8CYeOUiVt8lC+jvpQ
J8PG88bpGmJZrGdsuyEboOAKRvEP
-----END CERTIFICATE-----
Generated at Sat Sep 7 13:33:45 2024 by rpki-client on console-ams.rpki-client.org