Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a643030343a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a643030343a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          UkWkwleM3nPfTO6pOx+mGM2HEYdjWBZ2DrtBp2wdgDw=
Subject key identifier:   8B:C5:20:C6:A0:FD:56:9F:31:0F:91:12:BC:C3:76:8F:52:F3:00:40
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       1A1C4AABA85305041F2CF91A554A245DDDF6ACAB
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a643030343a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:36 +0000
ROA not before:           Wed 03 Apr 2024 21:19:36 +0000
ROA not after:            Wed 02 Apr 2025 21:24:36 +0000
asID:                     264344
IP address blocks:        2804:2674:d004::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1c:4a:ab:a8:53:05:04:1f:2c:f9:1a:55:4a:24:5d:dd:f6:ac:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:36 2024 GMT
            Not After : Apr  2 21:24:36 2025 GMT
        Subject: CN=8BC520C6A0FD569F310F9112BCC3768F52F30040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:a7:2c:c9:e0:e3:f3:58:3a:0e:76:81:eb:
                    5b:d7:a9:93:4b:a4:64:be:24:8b:c9:98:44:5b:69:
                    3d:6c:fa:1a:9a:eb:fc:54:d7:db:32:86:6e:86:36:
                    d7:ba:8d:94:40:0c:8e:e2:0e:97:84:30:5d:dd:af:
                    7b:b2:9c:a5:ad:c4:86:09:7d:5b:57:e8:95:ac:4d:
                    a9:2f:4b:8d:e1:42:ef:42:21:34:59:1c:19:57:57:
                    f7:ea:18:0b:6f:a4:49:0f:32:9f:81:6f:fb:ab:a8:
                    75:4a:21:2e:80:0f:6a:94:0b:9e:aa:5c:f4:d6:52:
                    d9:3d:fc:dd:21:f7:2b:a4:43:d4:c3:a0:51:8f:67:
                    2a:2c:4a:ea:c0:e5:ab:41:e3:af:97:c4:89:cb:72:
                    8e:a1:54:c1:9d:52:21:5c:9f:37:d5:e6:83:29:2c:
                    37:06:e8:6b:c7:05:3f:f8:d3:e4:6e:b2:77:36:57:
                    06:57:d3:5f:1b:ff:c1:77:4d:0a:4a:02:5d:d5:09:
                    67:5f:40:62:b5:ae:0a:0f:a5:71:a8:5c:b7:d0:e3:
                    53:b6:7b:ac:aa:fa:f4:68:0e:ab:4f:f4:14:2a:45:
                    a2:95:7a:3b:e7:6e:82:35:91:0b:c9:d4:3b:1a:55:
                    61:0f:36:0b:ac:d7:f0:af:89:b0:17:29:ac:b3:49:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C5:20:C6:A0:FD:56:9F:31:0F:91:12:BC:C3:76:8F:52:F3:00:40
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a643030343a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:d004::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:72:f8:08:13:4b:69:95:34:53:4d:00:40:f9:36:59:e7:b2:
         1b:42:77:e4:f4:6e:b6:39:12:e7:22:c1:64:2d:eb:2c:d7:f1:
         c2:c8:6f:4c:f4:94:1e:d3:37:7c:59:10:66:d8:bb:3c:68:2a:
         7d:83:ac:75:2c:dc:f5:f4:c4:2e:0a:63:4c:06:54:ef:49:99:
         0e:16:e4:a2:ec:e8:0b:38:14:2e:20:77:db:3a:a0:39:cb:88:
         aa:96:ec:0f:f5:9e:21:fa:65:62:de:32:4c:d8:51:03:98:a0:
         25:2b:09:c9:e8:c1:d8:6d:09:37:65:23:b9:51:c6:d1:e0:f5:
         4a:3f:65:b0:1b:2d:ca:8e:d5:2f:5d:e1:a9:55:e1:bc:a0:3e:
         81:0f:85:1c:5d:dc:e1:0c:0f:88:9a:ff:49:0f:cf:56:9e:bb:
         96:6f:8d:7a:af:b6:b2:87:96:21:f8:f7:03:64:56:eb:fc:97:
         c1:58:0a:e9:37:fb:96:27:be:c5:bf:09:5a:b6:c8:65:5d:27:
         4c:82:9b:ca:0f:2d:33:e9:c2:27:ee:da:e8:ee:ef:8f:2b:98:
         52:d7:29:d6:8b:58:0e:44:d3:2b:53:90:4e:e5:6e:c3:2f:a5:
         e0:93:e5:63:26:71:42:ed:23:bc:6b:2b:8c:87:68:55:8b:35:
         b3:e9:2b:28
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUGhxKq6hTBQQfLPkaVUokXd32rKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUwNjc3MDY3OEUwOTlCREM5MjU1NzkxMEM5NDE4ODdG
QTg1NzFCMjAeFw0yNDA0MDMyMTE5MzZaFw0yNTA0MDIyMTI0MzZaMDMxMTAvBgNV
BAMTKDhCQzUyMEM2QTBGRDU2OUYzMTBGOTExMkJDQzM3NjhGNTJGMzAwNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqoqcsyeDj81g6DnaB61vXqZNL
pGS+JIvJmERbaT1s+hqa6/xU19syhm6GNte6jZRADI7iDpeEMF3dr3uynKWtxIYJ
fVtX6JWsTakvS43hQu9CITRZHBlXV/fqGAtvpEkPMp+Bb/urqHVKIS6AD2qUC56q
XPTWUtk9/N0h9yukQ9TDoFGPZyosSurA5atB46+XxInLco6hVMGdUiFcnzfV5oMp
LDcG6GvHBT/40+Rusnc2VwZX018b/8F3TQpKAl3VCWdfQGK1rgoPpXGoXLfQ41O2
e6yq+vRoDqtP9BQqRaKVejvnboI1kQvJ1DsaVWEPNgus1/CvibAXKayzSRr1AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUi8UgxqD9Vp8xD5ESvMN2j1LzAEAwHwYDVR0j
BBgwFoAU3gZ3Bnjgmb3JJVeRDJQYh/qFcbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMS9ERTA2NzcwNjc4RTA5OUJEQzkyNTU3OTEwQzk0MTg4N0ZBODU3MUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMDY3NzA2NzhFMDk5QkRD
OTI1NTc5MTBDOTQxODg3RkE4NTcxQjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzEv
MzIzODMwMzQzYTMyMzYzNzM0M2E2NDMwMzAzNDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEJnTQBDANBgkqhkiG9w0BAQsF
AAOCAQEARXL4CBNLaZU0U00AQPk2WeeyG0J35PRutjkS5yLBZC3rLNfxwshvTPSU
HtM3fFkQZti7PGgqfYOsdSzc9fTELgpjTAZU70mZDhbkouzoCzgULiB32zqgOcuI
qpbsD/WeIfplYt4yTNhRA5igJSsJyejB2G0JN2UjuVHG0eD1Sj9lsBstyo7VL13h
qVXhvKA+gQ+FHF3c4QwPiJr/SQ/PVp67lm+Neq+2soeWIfj3A2RW6/yXwVgK6Tf7
lie+xb8JWrbIZV0nTIKbyg8tM+nCJ+7a6O7vjyuYUtcp1otYDkTTK1OQTuVuwy+l
4JPlYyZxQu0jvGsrjIdoVYs1s+krKA==
-----END CERTIFICATE-----
Generated at Sat Sep 7 14:00:36 2024 by rpki-client on console-fra.rpki-client.org