Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/1/323830343a333734303a3a2f33322d313238203d3e20323636333939.roa
File:                     323830343a333734303a3a2f33322d313238203d3e20323636333939.roa (raw, json)
Hash identifier:          d73T+U45iPAxcBu7qajTJbqP15whXpI/dmtIMI1a7E4=
Subject key identifier:   6E:09:41:2E:79:B5:14:95:E3:D7:87:1E:AD:E1:59:2B:CF:AE:41:78
Certificate issuer:       /CN=A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7
Certificate serial:       626072B176DDFCB7B2FC30C431D3E4F056B35861
Authority key identifier: A4:CC:1E:89:E3:27:97:2A:B3:16:12:1D:F9:E8:C6:C9:B5:EF:EE:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/1/323830343a333734303a3a2f33322d313238203d3e20323636333939.roa
Signing time:             Thu 04 Apr 2024 19:45:12 +0000
ROA not before:           Thu 04 Apr 2024 19:40:12 +0000
ROA not after:            Thu 03 Apr 2025 19:45:12 +0000
asID:                     266399
IP address blocks:        2804:3740::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:60:72:b1:76:dd:fc:b7:b2:fc:30:c4:31:d3:e4:f0:56:b3:58:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7
        Validity
            Not Before: Apr  4 19:40:12 2024 GMT
            Not After : Apr  3 19:45:12 2025 GMT
        Subject: CN=6E09412E79B51495E3D7871EADE1592BCFAE4178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:66:6c:e1:e5:a0:47:3d:18:69:f7:f9:52:
                    db:48:c2:9c:2c:71:40:7c:bd:13:9c:6b:69:35:76:
                    51:ac:bc:0b:33:5e:1d:51:a9:b3:12:ce:83:df:a0:
                    72:c4:f1:70:df:2b:6d:6f:c2:6f:ed:40:c5:05:97:
                    8d:a4:c7:88:8b:21:f9:5d:7b:77:59:91:f4:dc:c8:
                    20:58:6b:bf:16:29:ff:aa:fa:a9:ed:54:16:93:7d:
                    99:ec:ff:c5:a3:3d:6f:b2:09:26:b4:4f:99:9a:8d:
                    bf:5e:fb:5c:17:a0:98:0d:13:bb:75:13:e2:a7:f3:
                    fb:9c:9e:38:f3:30:71:fe:18:8f:16:1b:25:1b:3a:
                    42:4a:02:cc:b7:6b:83:28:29:01:80:14:91:e3:b7:
                    87:5c:ea:07:51:44:f9:6c:60:bb:ee:14:db:ad:dd:
                    46:8f:e8:d6:1d:ea:92:85:62:78:a6:8c:b9:89:f0:
                    64:c7:2a:6b:0b:cd:b8:97:be:a3:82:78:9c:08:0c:
                    b9:f2:aa:47:4b:45:df:03:36:3e:75:d8:ca:35:4e:
                    e5:63:4d:61:7e:1c:3d:35:35:3f:cd:e4:a5:7b:68:
                    4b:3b:f8:07:b5:f8:a7:02:4e:02:17:e9:00:0e:8f:
                    1b:b6:56:f6:9a:95:6f:de:97:ae:ef:9e:59:ca:f9:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:09:41:2E:79:B5:14:95:E3:D7:87:1E:AD:E1:59:2B:CF:AE:41:78
            X509v3 Authority Key Identifier:
                keyid:A4:CC:1E:89:E3:27:97:2A:B3:16:12:1D:F9:E8:C6:C9:B5:EF:EE:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/1/A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/1/323830343a333734303a3a2f33322d313238203d3e20323636333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3740::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:76:c7:9f:de:a6:d8:f1:f6:ab:f8:f9:76:58:e7:9a:6e:f9:
         6d:fe:67:dd:2e:31:db:8b:81:56:31:d7:68:96:fe:35:0a:7b:
         8a:d4:1d:f7:a8:5c:28:a7:0d:ec:e3:e0:91:a9:ca:6d:8a:b6:
         a1:ee:21:78:54:68:f6:a7:9a:97:2e:73:84:9f:16:c9:13:f9:
         f2:52:23:c3:8c:16:0e:96:85:c7:0a:79:69:c2:0c:ff:5d:57:
         1e:49:ea:53:3b:7c:cf:13:4c:73:74:56:e1:48:38:d5:dd:66:
         2b:55:8f:08:d5:fd:c7:19:5c:c5:8a:fa:47:0e:dc:10:c1:c8:
         33:25:22:4a:ce:66:91:e6:29:6b:f7:c5:0a:fe:21:a6:ba:8f:
         52:58:6b:ad:ba:02:45:3b:2e:35:18:db:a9:c3:84:30:9a:dd:
         21:e6:d5:6d:ce:31:20:d9:bc:3c:e9:49:55:7d:38:d3:3c:0e:
         32:6f:29:4f:db:23:13:26:e8:67:2d:a7:50:9b:01:90:3a:4c:
         ff:c2:5d:a4:fe:42:38:35:bc:ba:2f:d8:ae:db:29:53:00:9c:
         b8:4a:1d:9d:2e:4c:b3:ee:0a:1e:3f:35:4e:18:e6:7e:35:6e:
         ad:b8:98:f1:b4:6b:8e:d4:58:53:03:24:81:c4:ed:f1:9b:5f:
         ac:eb:a5:7b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUYmBysXbd/Ley/DDEMdPk8FazWGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRDQzFFODlFMzI3OTcyQUIzMTYxMjFERjlFOEM2QzlC
NUVGRUVDNzAeFw0yNDA0MDQxOTQwMTJaFw0yNTA0MDMxOTQ1MTJaMDMxMTAvBgNV
BAMTKDZFMDk0MTJFNzlCNTE0OTVFM0Q3ODcxRUFERTE1OTJCQ0ZBRTQxNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFjGZs4eWgRz0Yaff5UttIwpws
cUB8vROca2k1dlGsvAszXh1RqbMSzoPfoHLE8XDfK21vwm/tQMUFl42kx4iLIfld
e3dZkfTcyCBYa78WKf+q+qntVBaTfZns/8WjPW+yCSa0T5majb9e+1wXoJgNE7t1
E+Kn8/ucnjjzMHH+GI8WGyUbOkJKAsy3a4MoKQGAFJHjt4dc6gdRRPlsYLvuFNut
3UaP6NYd6pKFYnimjLmJ8GTHKmsLzbiXvqOCeJwIDLnyqkdLRd8DNj512Mo1TuVj
TWF+HD01NT/N5KV7aEs7+Ae1+KcCTgIX6QAOjxu2VvaalW/el67vnlnK+XWLAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUbglBLnm1FJXj14cereFZK8+uQXgwHwYDVR0j
BBgwFoAUpMweieMnlyqzFhId+ejGybXv7scwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnJpUlkzUlVYQTExd1BRVWVKTlN4OFhjWGZ3WFdUQWFXSm5zSFRmclFk
eHEvMS9BNENDMUU4OUUzMjc5NzJBQjMxNjEyMURGOUU4QzZDOUI1RUZFRUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0Q0MxRTg5RTMyNzk3MkFC
MzE2MTIxREY5RThDNkM5QjVFRkVFQzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JyaVJZM1JVWEExMXdQUVVlSk5TeDhYY1hmd1hXVEFhV0puc0hUZnJRZHhxLzEv
MzIzODMwMzQzYTMzMzczNDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMzM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDdAMA0GCSqGSIb3DQEBCwUAA4IBAQAAdsef
3qbY8far+Pl2WOeabvlt/mfdLjHbi4FWMddolv41CnuK1B33qFwopw3s4+CRqcpt
irah7iF4VGj2p5qXLnOEnxbJE/nyUiPDjBYOloXHCnlpwgz/XVceSepTO3zPE0xz
dFbhSDjV3WYrVY8I1f3HGVzFivpHDtwQwcgzJSJKzmaR5ilr98UK/iGmuo9SWGut
ugJFOy41GNupw4Qwmt0h5tVtzjEg2bw86UlVfTjTPA4ybylP2yMTJuhnLadQmwGQ
Okz/wl2k/kI4Nby6L9iu2ylTAJy4Sh2dLkyz7goePzVOGOZ+NW6tuJjxtGuO1FhT
AySBxO3xm1+s66V7
-----END CERTIFICATE-----
Generated at Thu Jun 13 18:44:41 2024 by rpki-client on console-fra.rpki-client.org