Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a633030303a3a2f33342d3334203d3e20323731313334.roa
File:                     323830343a373663383a633030303a3a2f33342d3334203d3e20323731313334.roa (raw, json)
Hash identifier:          R/8NdeXyaGsCNwTEp3FeyxWvkONNLMP8daqcICou7co=
Subject key identifier:   67:E1:5C:B1:24:8F:E4:9D:34:04:C0:A0:CD:75:B1:F9:87:51:E6:48
Certificate issuer:       /CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
Certificate serial:       7F11BAC91D56FAFF5B7E9F1A8B0FF0EF6EFF1C3D
Authority key identifier: E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a633030303a3a2f33342d3334203d3e20323731313334.roa
Signing time:             Thu 04 Apr 2024 08:42:52 +0000
ROA not before:           Thu 04 Apr 2024 08:37:52 +0000
ROA not after:            Thu 03 Apr 2025 08:42:52 +0000
asID:                     271134
IP address blocks:        2804:76c8:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:11:ba:c9:1d:56:fa:ff:5b:7e:9f:1a:8b:0f:f0:ef:6e:ff:1c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
        Validity
            Not Before: Apr  4 08:37:52 2024 GMT
            Not After : Apr  3 08:42:52 2025 GMT
        Subject: CN=67E15CB1248FE49D3404C0A0CD75B1F98751E648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:de:61:ee:23:1a:0a:62:74:f2:07:58:da:
                    ce:02:61:d0:a7:09:d2:2c:48:75:ec:d4:1f:a5:6b:
                    e0:e0:ea:1c:c9:d7:11:a3:91:01:1e:b9:96:1b:49:
                    48:de:91:d8:fe:cb:45:57:2e:64:9d:b7:74:54:10:
                    02:8c:bd:75:ce:e8:e3:ac:bb:5d:7a:93:6a:1f:c6:
                    ca:32:f5:24:cd:a9:d0:71:e2:fd:2d:b8:7b:ea:b9:
                    a1:28:cd:71:e1:dd:29:21:45:e9:fe:2b:8a:c7:8f:
                    c3:b2:cb:ca:b0:4d:14:df:69:ca:05:48:b1:c1:9b:
                    b1:03:af:8b:e7:27:4c:3a:df:37:95:f6:5e:7e:39:
                    a1:b2:ad:6b:31:80:69:78:07:87:77:c9:31:b0:d8:
                    a6:7f:cc:1e:29:c0:78:de:83:00:a9:3f:fc:d8:70:
                    ce:b2:16:0e:9d:3e:e5:23:2f:05:cb:8f:c7:e8:f8:
                    01:13:bb:bb:5f:12:08:29:c3:65:77:b4:75:fb:fb:
                    ea:4b:fa:95:93:32:7a:bb:06:e1:02:6c:d8:e7:f9:
                    cb:d8:02:23:90:c8:5b:dd:bb:c4:9f:7e:2c:7e:20:
                    d8:c2:36:88:f4:ff:87:2e:69:4e:a3:fb:3e:53:15:
                    da:3c:86:c5:c8:57:18:17:05:d4:e1:c1:d5:f1:27:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E1:5C:B1:24:8F:E4:9D:34:04:C0:A0:CD:75:B1:F9:87:51:E6:48
            X509v3 Authority Key Identifier:
                keyid:E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a633030303a3a2f33342d3334203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76c8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b3:20:d0:f3:df:23:9f:e7:9e:a3:76:13:5f:19:d9:0a:3f:99:
         a9:18:bd:3b:36:bc:02:bd:3a:ee:53:bc:a5:ff:f8:9d:8e:0a:
         20:bf:61:d1:4d:98:29:76:92:d8:f2:9c:6a:e9:ae:e8:ea:0a:
         8d:f6:82:6f:be:c5:2a:ec:23:9d:45:21:8a:a2:47:0e:e7:48:
         0c:67:69:bd:cc:b2:e3:54:a3:34:a6:a2:12:fb:e0:35:0b:7f:
         40:50:63:93:24:42:fb:ec:9d:b3:f1:6c:51:10:21:03:2b:35:
         06:d3:b2:a8:19:be:f8:db:15:7f:56:92:78:eb:15:e4:58:56:
         fc:f9:8f:d3:6d:8d:c0:0d:6a:4d:75:66:cb:de:e4:4a:ca:48:
         c3:db:57:40:a3:20:7b:89:fd:40:e3:a1:af:7f:44:db:a4:db:
         f8:0d:e0:d4:e5:8a:13:fa:8c:cb:96:36:ec:62:60:84:29:ed:
         9d:51:57:95:c7:ba:d7:ef:63:60:67:5e:67:5a:68:a3:f7:ba:
         ea:13:c5:23:7b:9b:71:46:31:d8:44:9e:fc:df:ed:55:96:c5:
         b1:63:89:63:b3:84:8a:2b:56:28:5e:f6:d5:55:e5:36:82:42:
         a0:c8:cc:c7:d5:90:2e:0c:3e:b9:1d:7e:94:42:00:4b:fc:94:
         cb:6b:0e:0f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfxG6yR1W+v9bfp8aiw/w727/HD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5MjE0RTVDQ0E5RUIwRUQ3ODE4Mzg5NERCRTQ2Mzkx
M0Y3MjcyQTAeFw0yNDA0MDQwODM3NTJaFw0yNTA0MDMwODQyNTJaMDMxMTAvBgNV
BAMTKDY3RTE1Q0IxMjQ4RkU0OUQzNDA0QzBBMENENzVCMUY5ODc1MUU2NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Dt5h7iMaCmJ08gdY2s4CYdCn
CdIsSHXs1B+la+Dg6hzJ1xGjkQEeuZYbSUjekdj+y0VXLmSdt3RUEAKMvXXO6OOs
u116k2ofxsoy9STNqdBx4v0tuHvquaEozXHh3SkhRen+K4rHj8Oyy8qwTRTfacoF
SLHBm7EDr4vnJ0w63zeV9l5+OaGyrWsxgGl4B4d3yTGw2KZ/zB4pwHjegwCpP/zY
cM6yFg6dPuUjLwXLj8fo+AETu7tfEggpw2V3tHX7++pL+pWTMnq7BuECbNjn+cvY
AiOQyFvdu8Sffix+INjCNoj0/4cuaU6j+z5TFdo8hsXIVxgXBdThwdXxJ/4VAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZ+FcsSSP5J00BMCgzXWx+YdR5kgwHwYDVR0j
BBgwFoAU4ZIU5cyp6w7XgYOJTb5GORP3JyowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhVM1FoTWF0aldYQW8yWEUzVTkzekxTR0hHY0JFR1pycmQ2MTdnTWFw
NHovMS9FMTkyMTRFNUNDQTlFQjBFRDc4MTgzODk0REJFNDYzOTEzRjcyNzJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxOTIxNEU1Q0NBOUVCMEVE
NzgxODM4OTREQkU0NjM5MTNGNzI3MkEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoVTNRaE1hdGpXWEFvMlhFM1U5M3pMU0dIR2NCRUdacnJkNjE3Z01hcDR6LzEv
MzIzODMwMzQzYTM3MzY2MzM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTMxMzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEdsjAMA0GCSqGSIb3DQEBCwUA
A4IBAQCzINDz3yOf556jdhNfGdkKP5mpGL07NrwCvTruU7yl//idjgogv2HRTZgp
dpLY8pxq6a7o6gqN9oJvvsUq7COdRSGKokcO50gMZ2m9zLLjVKM0pqIS++A1C39A
UGOTJEL77J2z8WxRECEDKzUG07KoGb742xV/VpJ46xXkWFb8+Y/TbY3ADWpNdWbL
3uRKykjD21dAoyB7if1A46Gvf0TbpNv4DeDU5YoT+ozLljbsYmCEKe2dUVeVx7rX
72NgZ15nWmij97rqE8Uje5txRjHYRJ783+1VlsWxY4ljs4SKK1YoXvbVVeU2gkKg
yMzH1ZAuDD65HX6UQgBL/JTLaw4P
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org