Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/323830343a373031633a3a2f33322d313238203d3e20323730373036.roa
File:                     323830343a373031633a3a2f33322d313238203d3e20323730373036.roa (raw, json)
Hash identifier:          y4E9I72F2fpNCW7OixWwk5BMssp4NdSTuk+Vj/ZZfVE=
Subject key identifier:   1D:0A:16:FA:19:1F:D7:1E:7F:10:D6:B8:1F:2A:BB:90:07:7D:0D:B6
Certificate issuer:       /CN=693F6FE5908AC83D8E07CCD94B49D5502D3FE383
Certificate serial:       5246136F33476519C4575C40D80C6BCD1F5639CE
Authority key identifier: 69:3F:6F:E5:90:8A:C8:3D:8E:07:CC:D9:4B:49:D5:50:2D:3F:E3:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/693F6FE5908AC83D8E07CCD94B49D5502D3FE383.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/323830343a373031633a3a2f33322d313238203d3e20323730373036.roa
Signing time:             Mon 05 Aug 2024 02:03:54 +0000
ROA not before:           Mon 05 Aug 2024 01:58:54 +0000
ROA not after:            Mon 04 Aug 2025 02:03:54 +0000
asID:                     270706
IP address blocks:        2804:701c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:46:13:6f:33:47:65:19:c4:57:5c:40:d8:0c:6b:cd:1f:56:39:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=693F6FE5908AC83D8E07CCD94B49D5502D3FE383
        Validity
            Not Before: Aug  5 01:58:54 2024 GMT
            Not After : Aug  4 02:03:54 2025 GMT
        Subject: CN=1D0A16FA191FD71E7F10D6B81F2ABB90077D0DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:b3:35:41:cd:cf:10:10:ec:af:b2:d8:67:
                    f5:b3:02:68:fe:b6:4c:7c:c3:64:68:3c:29:06:76:
                    1f:76:80:76:b3:28:c7:d7:b3:16:23:ae:81:db:40:
                    be:ac:75:9e:89:2a:cd:50:2a:ab:22:41:89:00:73:
                    3c:c5:b0:e5:7a:5a:e4:5b:ca:b2:28:17:f2:90:b4:
                    73:34:c9:6b:4b:fa:fe:af:44:01:ec:71:0b:e8:c5:
                    14:a4:c2:c8:f1:2f:c3:b2:17:4f:92:2b:da:f1:60:
                    1d:df:8e:d0:e8:8c:5f:85:63:50:b5:60:cd:03:8a:
                    5d:f3:37:04:19:d8:61:bb:b2:2a:f4:d4:d6:df:d2:
                    5c:38:b5:02:16:6a:f0:33:2d:db:a9:0b:c8:a9:c6:
                    b7:5f:1a:f0:0b:76:5b:d2:a9:63:01:02:75:3e:a5:
                    35:84:59:68:5f:f3:26:a0:8a:06:e2:dc:98:58:ac:
                    ca:3d:e0:e6:ef:96:9f:30:2f:1a:99:20:e2:47:9d:
                    80:7c:3e:9f:f2:0a:99:46:c2:34:a9:8e:14:b5:92:
                    0e:e5:d9:de:6d:54:d4:7d:fe:ef:64:a3:5a:86:98:
                    47:87:49:45:6d:09:9d:c1:27:6d:19:49:60:32:7e:
                    30:0e:b3:ac:d2:87:b8:83:89:b9:b5:a6:b4:06:53:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0A:16:FA:19:1F:D7:1E:7F:10:D6:B8:1F:2A:BB:90:07:7D:0D:B6
            X509v3 Authority Key Identifier:
                keyid:69:3F:6F:E5:90:8A:C8:3D:8E:07:CC:D9:4B:49:D5:50:2D:3F:E3:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/693F6FE5908AC83D8E07CCD94B49D5502D3FE383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/693F6FE5908AC83D8E07CCD94B49D5502D3FE383.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/323830343a373031633a3a2f33322d313238203d3e20323730373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:701c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:2e:c5:a6:99:64:9d:18:cd:13:f6:db:ec:40:23:9b:dd:7e:
         55:86:08:f0:29:26:cb:8c:55:cf:d3:63:a1:dc:9b:2d:52:d9:
         3d:56:f9:73:b5:fc:12:d3:9e:3b:b5:a6:5d:fb:2a:44:38:5a:
         f1:41:e4:d5:93:cd:5d:76:c1:74:10:cd:ba:f1:0e:a7:33:24:
         e9:ca:6f:18:72:ed:e8:e6:1f:0e:48:38:49:a2:23:fa:0b:7f:
         fc:72:22:d4:d8:4c:a7:51:d9:35:2c:ea:61:6e:eb:4c:d5:15:
         eb:a2:3d:d4:e0:f2:2e:42:fc:57:4d:83:1f:d8:85:99:0b:61:
         77:4e:2a:94:57:9a:27:f4:01:54:cb:20:d6:11:0b:70:b6:15:
         25:46:4d:6a:5d:00:42:75:e2:c7:b3:b3:a6:c6:9d:07:59:8d:
         84:fd:3e:84:a3:3c:d8:d8:3e:6f:19:71:4f:2d:c7:18:ea:93:
         7a:b5:0e:2c:1c:7a:b9:d5:d3:4e:dd:03:50:e7:76:52:f3:1a:
         3b:98:12:f1:ed:70:d8:4e:7c:80:57:d6:18:06:ef:3c:f3:15:
         43:8e:c1:78:be:c5:69:4c:5a:88:4f:4b:8f:05:9d:d5:6b:a2:
         a7:6e:4c:84:c8:5a:76:e4:3d:23:3c:9a:ef:0f:88:9c:9e:c4:
         ce:b2:6c:18
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUkYTbzNHZRnEV1xA2AxrzR9WOc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkzRjZGRTU5MDhBQzgzRDhFMDdDQ0Q5NEI0OUQ1NTAy
RDNGRTM4MzAeFw0yNDA4MDUwMTU4NTRaFw0yNTA4MDQwMjAzNTRaMDMxMTAvBgNV
BAMTKDFEMEExNkZBMTkxRkQ3MUU3RjEwRDZCODFGMkFCQjkwMDc3RDBEQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUyLM1Qc3PEBDsr7LYZ/WzAmj+
tkx8w2RoPCkGdh92gHazKMfXsxYjroHbQL6sdZ6JKs1QKqsiQYkAczzFsOV6WuRb
yrIoF/KQtHM0yWtL+v6vRAHscQvoxRSkwsjxL8OyF0+SK9rxYB3fjtDojF+FY1C1
YM0Dil3zNwQZ2GG7sir01Nbf0lw4tQIWavAzLdupC8ipxrdfGvALdlvSqWMBAnU+
pTWEWWhf8yagigbi3JhYrMo94Obvlp8wLxqZIOJHnYB8Pp/yCplGwjSpjhS1kg7l
2d5tVNR9/u9ko1qGmEeHSUVtCZ3BJ20ZSWAyfjAOs6zSh7iDibm1prQGU1xDAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUHQoW+hkf1x5/ENa4Hyq7kAd9DbYwHwYDVR0j
BBgwFoAUaT9v5ZCKyD2OB8zZS0nVUC0/44MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpRQnZScDR6WjFyNFdwR2RoeVVKZkZxVmFjMVhQb0hveFd6NVZTUWY2
aE4vMC82OTNGNkZFNTkwOEFDODNEOEUwN0NDRDk0QjQ5RDU1MDJEM0ZFMzgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5M0Y2RkU1OTA4QUM4M0Q4
RTA3Q0NEOTRCNDlENTUwMkQzRkUzODMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6UUJ2UnA0eloxcjRXcEdkaHlVSmZGcVZhYzFYUG9Ib3hXejVWU1FmNmhOLzAv
MzIzODMwMzQzYTM3MzAzMTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHAcMA0GCSqGSIb3DQEBCwUAA4IBAQBNLsWm
mWSdGM0T9tvsQCOb3X5VhgjwKSbLjFXP02Oh3JstUtk9VvlztfwS0547taZd+ypE
OFrxQeTVk81ddsF0EM268Q6nMyTpym8Ycu3o5h8OSDhJoiP6C3/8ciLU2EynUdk1
LOphbutM1RXroj3U4PIuQvxXTYMf2IWZC2F3TiqUV5on9AFUyyDWEQtwthUlRk1q
XQBCdeLHs7Omxp0HWY2E/T6EozzY2D5vGXFPLccY6pN6tQ4sHHq51dNO3QNQ53ZS
8xo7mBLx7XDYTnyAV9YYBu888xVDjsF4vsVpTFqIT0uPBZ3Va6KnbkyEyFp25D0j
PJrvD4icnsTOsmwY
-----END CERTIFICATE-----
Generated at Tue Sep 3 16:46:28 2024 by rpki-client on console-fra.rpki-client.org