Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/323830343a376566343a3a2f33322d3430203d3e20323731363537.roa
File:                     323830343a376566343a3a2f33322d3430203d3e20323731363537.roa (raw, json)
Hash identifier:          +XarrdwIU8CbXE8Q/+O0DXHjtDwRzCDEKN+f+t3q2Bk=
Subject key identifier:   74:5D:69:ED:E1:3B:5D:18:68:73:50:87:DE:29:C2:2A:8F:E0:9C:A8
Certificate issuer:       /CN=27F3762BD620EAE6FD757763F0CCC22C5A38EF36
Certificate serial:       4FB7B14CFFB3543F160A20872D990E6114F3B670
Authority key identifier: 27:F3:76:2B:D6:20:EA:E6:FD:75:77:63:F0:CC:C2:2C:5A:38:EF:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/323830343a376566343a3a2f33322d3430203d3e20323731363537.roa
Signing time:             Mon 20 May 2024 20:14:13 +0000
ROA not before:           Mon 20 May 2024 20:09:13 +0000
ROA not after:            Mon 19 May 2025 20:14:13 +0000
asID:                     271657
IP address blocks:        2804:7ef4::/32 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b7:b1:4c:ff:b3:54:3f:16:0a:20:87:2d:99:0e:61:14:f3:b6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27F3762BD620EAE6FD757763F0CCC22C5A38EF36
        Validity
            Not Before: May 20 20:09:13 2024 GMT
            Not After : May 19 20:14:13 2025 GMT
        Subject: CN=745D69EDE13B5D1868735087DE29C22A8FE09CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:b6:cb:93:07:11:d9:48:f5:73:74:4a:93:
                    1f:e2:57:63:12:97:f6:ca:f6:b1:ba:0f:9c:3b:34:
                    0d:6d:50:4a:0f:a5:ca:e2:c6:35:9d:be:11:b7:06:
                    b2:06:57:4a:12:c0:2d:14:b3:53:31:9d:27:97:ac:
                    7a:28:c3:7c:c2:cd:67:4e:d9:23:30:3b:df:dc:88:
                    d5:41:f2:50:0a:c1:32:ca:73:92:b2:fd:c0:38:26:
                    ae:74:1f:5e:e1:79:2a:6f:9e:a5:79:5d:11:5f:36:
                    f3:7f:e1:15:9c:5a:5d:de:33:c4:60:4f:cb:39:72:
                    65:8c:cd:20:ee:d1:6c:f7:61:95:28:be:f5:64:ab:
                    51:84:58:58:18:2d:33:f9:ef:a5:9a:f6:8e:eb:29:
                    67:dd:4a:51:4f:86:be:cf:6c:30:b9:b2:5d:b0:cc:
                    f3:71:10:51:3a:18:79:eb:19:f7:0c:4d:0c:8e:0c:
                    3f:89:e9:a4:c5:e5:80:18:2c:67:d3:61:69:48:7b:
                    4c:39:3a:86:c1:8c:4b:a5:59:1c:ea:7a:3a:43:33:
                    75:c8:e1:2c:c2:fd:27:b8:0f:ce:05:76:db:d2:b2:
                    d5:38:f1:d3:17:b5:95:fb:4f:d5:b6:37:3f:7e:91:
                    bb:87:ee:83:e0:70:1f:8f:9a:64:9f:5f:85:c7:86:
                    c7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5D:69:ED:E1:3B:5D:18:68:73:50:87:DE:29:C2:2A:8F:E0:9C:A8
            X509v3 Authority Key Identifier:
                keyid:27:F3:76:2B:D6:20:EA:E6:FD:75:77:63:F0:CC:C2:2C:5A:38:EF:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/323830343a376566343a3a2f33322d3430203d3e20323731363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ef4::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:63:e9:63:6d:7c:1a:ee:9b:8f:13:46:53:ee:5c:c4:b3:be:
         e1:15:b7:97:8f:62:0d:07:f5:ea:50:5e:e5:04:61:98:2e:d5:
         d3:39:2e:b9:46:43:62:45:3d:be:30:d1:ca:91:46:fb:4c:24:
         94:65:cf:c1:0f:bf:85:91:20:3b:1a:e0:f1:8e:de:96:40:b6:
         65:64:8b:81:c9:66:bf:d8:29:15:40:6e:f9:dc:77:ff:4b:60:
         2f:4b:d1:33:45:d0:6f:7c:48:ed:6a:16:0c:bf:4b:c6:f6:ea:
         29:e1:1f:95:3f:bc:f7:64:62:6f:b9:09:29:b4:56:78:53:2f:
         13:0b:99:d4:8e:a6:e4:94:a6:82:97:b1:ed:12:f0:5d:a7:50:
         06:e2:55:09:b8:85:f4:cd:a5:56:03:61:b6:86:e1:78:cc:d6:
         71:02:6f:86:72:5d:ff:d0:ad:b6:56:7c:48:a5:6f:63:19:19:
         32:0d:0b:db:bf:45:a7:2c:77:30:54:19:f8:f5:a3:5d:4b:23:
         a5:56:5c:d8:7e:ed:fb:76:a3:3c:04:16:d2:a3:57:ee:e5:ac:
         bd:f9:ec:da:63:2b:f3:41:89:dc:b9:8c:19:ab:75:dd:58:28:
         cc:d8:cc:99:24:96:12:98:80:e7:3b:4a:0a:be:e9:e1:33:e2:
         98:ea:3b:a0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUT7exTP+zVD8WCiCHLZkOYRTztnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdGMzc2MkJENjIwRUFFNkZENzU3NzYzRjBDQ0MyMkM1
QTM4RUYzNjAeFw0yNDA1MjAyMDA5MTNaFw0yNTA1MTkyMDE0MTNaMDMxMTAvBgNV
BAMTKDc0NUQ2OUVERTEzQjVEMTg2ODczNTA4N0RFMjlDMjJBOEZFMDlDQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nLbLkwcR2Uj1c3RKkx/iV2MS
l/bK9rG6D5w7NA1tUEoPpcrixjWdvhG3BrIGV0oSwC0Us1MxnSeXrHoow3zCzWdO
2SMwO9/ciNVB8lAKwTLKc5Ky/cA4Jq50H17heSpvnqV5XRFfNvN/4RWcWl3eM8Rg
T8s5cmWMzSDu0Wz3YZUovvVkq1GEWFgYLTP576Wa9o7rKWfdSlFPhr7PbDC5sl2w
zPNxEFE6GHnrGfcMTQyODD+J6aTF5YAYLGfTYWlIe0w5OobBjEulWRzqejpDM3XI
4SzC/Se4D84FdtvSstU48dMXtZX7T9W2Nz9+kbuH7oPgcB+PmmSfX4XHhsdtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdF1p7eE7XRhoc1CH3inCKo/gnKgwHwYDVR0j
BBgwFoAUJ/N2K9Yg6ub9dXdj8MzCLFo47zYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZtZG04Q1pmbXhEcGNmZkpncWQzN1U1NlptZlhteGVOUzdXVENjV3g1
UUovMC8yN0YzNzYyQkQ2MjBFQUU2RkQ3NTc3NjNGMENDQzIyQzVBMzhFRjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3RjM3NjJCRDYyMEVBRTZG
RDc1Nzc2M0YwQ0NDMjJDNUEzOEVGMzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2bWRtOENaZm14RHBjZmZKZ3FkMzdVNTZabWZYbXhlTlM3V1RDY1d4NVFKLzAv
MzIzODMwMzQzYTM3NjU2NjM0M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNzMx
MzYzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR+9DANBgkqhkiG9w0BAQsFAAOCAQEAVmPpY218
Gu6bjxNGU+5cxLO+4RW3l49iDQf16lBe5QRhmC7V0zkuuUZDYkU9vjDRypFG+0wk
lGXPwQ+/hZEgOxrg8Y7elkC2ZWSLgclmv9gpFUBu+dx3/0tgL0vRM0XQb3xI7WoW
DL9LxvbqKeEflT+892Rib7kJKbRWeFMvEwuZ1I6m5JSmgpex7RLwXadQBuJVCbiF
9M2lVgNhtobheMzWcQJvhnJd/9CttlZ8SKVvYxkZMg0L279Fpyx3MFQZ+PWjXUsj
pVZc2H7t+3ajPAQW0qNX7uWsvfns2mMr80GJ3LmMGat13VgozNjMmSSWEpiA5ztK
Cr7p4TPimOo7oA==
-----END CERTIFICATE-----
Generated at Wed Sep 18 19:10:59 2024 by rpki-client on console-fra.rpki-client.org