Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/323830343a31303a3a2f33322d3438203d3e203238323939.roa
File:                     323830343a31303a3a2f33322d3438203d3e203238323939.roa (raw, json)
Hash identifier:          EEB0eeVnTg7Wq7ueF3MUTtqMNWseE4u/AHKPziO3KaA=
Subject key identifier:   11:86:47:E4:B4:57:38:56:EA:2E:FD:27:36:E5:D4:F6:97:3A:F6:4C
Certificate issuer:       /CN=34C6F2DF7281688C9EB5859F562AC4E3F612149F
Certificate serial:       123A07F859BD22751AF24739C4FD9D1F2202A6A8
Authority key identifier: 34:C6:F2:DF:72:81:68:8C:9E:B5:85:9F:56:2A:C4:E3:F6:12:14:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/323830343a31303a3a2f33322d3438203d3e203238323939.roa
Signing time:             Thu 04 Apr 2024 23:14:07 +0000
ROA not before:           Thu 04 Apr 2024 23:09:07 +0000
ROA not after:            Thu 03 Apr 2025 23:14:07 +0000
asID:                     28299
IP address blocks:        2804:10::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3a:07:f8:59:bd:22:75:1a:f2:47:39:c4:fd:9d:1f:22:02:a6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34C6F2DF7281688C9EB5859F562AC4E3F612149F
        Validity
            Not Before: Apr  4 23:09:07 2024 GMT
            Not After : Apr  3 23:14:07 2025 GMT
        Subject: CN=118647E4B4573856EA2EFD2736E5D4F6973AF64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a3:47:20:1d:54:48:ef:a2:0d:07:f7:ca:56:
                    9c:08:1d:8f:62:56:83:5a:31:1d:73:14:5d:03:42:
                    c4:1e:92:4b:52:fc:c2:ae:81:7e:ed:54:1b:56:ba:
                    d9:4b:3c:da:99:50:5b:20:a4:ad:46:68:bf:19:1d:
                    c6:31:bb:2a:a7:a8:32:54:79:40:f5:1f:68:68:9b:
                    96:27:d6:44:32:e3:a3:d6:d7:c5:9c:85:be:40:49:
                    6e:72:08:cf:35:d2:b4:57:2c:7c:0c:20:45:d2:7f:
                    a5:8f:bb:c2:b6:f8:82:71:1f:2d:42:6d:41:5e:44:
                    20:dd:0d:83:70:af:dc:4f:f0:1a:cc:ad:7d:b5:6a:
                    fc:86:79:be:73:bc:6e:21:98:70:f0:f8:e1:91:08:
                    cb:3c:37:ed:80:c9:10:48:6f:4b:d1:23:fc:ce:0b:
                    a2:b6:87:2d:b2:00:16:4f:d8:d1:b7:8b:71:cd:9c:
                    84:19:2c:58:1d:d5:8a:25:df:f3:02:51:d0:37:c3:
                    11:d7:2f:ad:ca:9a:c8:9b:a2:dd:53:1b:1c:b8:78:
                    8f:4e:07:09:79:60:bb:ae:79:b5:bc:af:0a:c2:7a:
                    d2:5c:11:2c:c0:15:35:96:ff:ab:c2:85:b0:84:4b:
                    ca:69:f9:33:d9:a1:08:44:66:94:8c:4d:f1:bc:d3:
                    af:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:86:47:E4:B4:57:38:56:EA:2E:FD:27:36:E5:D4:F6:97:3A:F6:4C
            X509v3 Authority Key Identifier:
                keyid:34:C6:F2:DF:72:81:68:8C:9E:B5:85:9F:56:2A:C4:E3:F6:12:14:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/323830343a31303a3a2f33322d3438203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:fd:d1:d7:b0:13:76:d3:43:a8:e8:c3:87:1a:8e:b8:7f:84:
         ed:74:01:a5:65:b8:4e:28:1d:ae:a2:87:df:88:73:36:a0:50:
         02:86:6f:3e:0b:04:45:cd:df:f3:1b:2b:31:92:d5:2d:bb:07:
         3f:3e:27:d7:98:cd:65:d6:73:09:87:21:eb:f1:b7:b2:55:ba:
         b4:b8:4a:c8:46:be:3e:e4:89:e0:54:35:c9:11:31:b6:ef:90:
         de:85:73:15:5c:38:61:cd:3b:a8:10:67:ae:68:e5:21:48:24:
         d8:24:80:ce:45:d2:14:f5:2a:fa:4d:9e:47:22:0a:bf:f9:64:
         27:03:da:df:32:14:ba:64:bd:20:bf:9b:f8:2a:07:e4:ea:b6:
         85:90:fb:ee:97:83:22:23:5a:1b:71:55:8b:7a:8f:38:0d:9e:
         50:e7:d2:2b:4f:a1:f0:16:47:7f:38:08:c2:fa:c8:2b:51:80:
         f4:a5:f5:97:1f:0f:eb:f5:08:a2:f7:e0:af:45:61:7c:40:74:
         a5:4d:e3:68:23:9e:08:87:6b:09:99:78:67:42:28:eb:0d:27:
         1a:a4:4e:f0:12:f8:97:67:cc:cc:bb:25:43:b5:0c:fb:01:61:
         24:2d:83:3c:20:3a:c2:48:f3:5f:29:44:1a:33:e4:62:4b:5d:
         a3:07:1d:5b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUEjoH+Fm9InUa8kc5xP2dHyICpqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRDNkYyREY3MjgxNjg4QzlFQjU4NTlGNTYyQUM0RTNG
NjEyMTQ5RjAeFw0yNDA0MDQyMzA5MDdaFw0yNTA0MDMyMzE0MDdaMDMxMTAvBgNV
BAMTKDExODY0N0U0QjQ1NzM4NTZFQTJFRkQyNzM2RTVENEY2OTczQUY2NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6o0cgHVRI76INB/fKVpwIHY9i
VoNaMR1zFF0DQsQekktS/MKugX7tVBtWutlLPNqZUFsgpK1GaL8ZHcYxuyqnqDJU
eUD1H2hom5Yn1kQy46PW18Wchb5ASW5yCM810rRXLHwMIEXSf6WPu8K2+IJxHy1C
bUFeRCDdDYNwr9xP8BrMrX21avyGeb5zvG4hmHDw+OGRCMs8N+2AyRBIb0vRI/zO
C6K2hy2yABZP2NG3i3HNnIQZLFgd1Yol3/MCUdA3wxHXL63Kmsibot1TGxy4eI9O
Bwl5YLuuebW8rwrCetJcESzAFTWW/6vChbCES8pp+TPZoQhEZpSMTfG806/zAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUEYZH5LRXOFbqLv0nNuXU9pc69kwwHwYDVR0j
BBgwFoAUNMby33KBaIyetYWfVirE4/YSFJ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmV0OHh6QVE0aGt2Vm5GcTNXNmkxV3diQ3RReHdOem9jODgyclMzR0w1
OUgvMS8zNEM2RjJERjcyODE2ODhDOUVCNTg1OUY1NjJBQzRFM0Y2MTIxNDlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0QzZGMkRGNzI4MTY4OEM5
RUI1ODU5RjU2MkFDNEUzRjYxMjE0OUYuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JldDh4ekFRNGhrdlZuRnEzVzZpMVd3YkN0UXh3TnpvYzg4MnJTM0dMNTlILzEv
MzIzODMwMzQzYTMxMzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMjM4MzIzOTM5
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAQAEDANBgkqhkiG9w0BAQsFAAOCAQEAsv3R17ATdtNDqOjD
hxqOuH+E7XQBpWW4TigdrqKH34hzNqBQAoZvPgsERc3f8xsrMZLVLbsHPz4n15jN
ZdZzCYch6/G3slW6tLhKyEa+PuSJ4FQ1yRExtu+Q3oVzFVw4Yc07qBBnrmjlIUgk
2CSAzkXSFPUq+k2eRyIKv/lkJwPa3zIUumS9IL+b+CoH5Oq2hZD77peDIiNaG3FV
i3qPOA2eUOfSK0+h8BZHfzgIwvrIK1GA9KX1lx8P6/UIovfgr0VhfEB0pU3jaCOe
CIdrCZl4Z0Io6w0nGqRO8BL4l2fMzLslQ7UM+wFhJC2DPCA6wkjzXylEGjPkYktd
owcdWw==
-----END CERTIFICATE-----
Generated at Fri Oct 11 17:42:54 2024 by rpki-client on console-ams.rpki-client.org