Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a373164343a3a2f33322d3438203d3e20323730383134.roa
File:                     323830343a373164343a3a2f33322d3438203d3e20323730383134.roa (raw, json)
Hash identifier:          /EaI+XBiYfrynlJKQES0zjBAVaUiD0BU4IpXRg/rVDc=
Subject key identifier:   BD:E5:81:6E:4F:23:DF:C0:25:2A:FD:8D:11:CC:DA:60:5E:4E:9F:A0
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       73B0E8BBB62B2D999D19878EB9EF5CE0F0EDE50D
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a373164343a3a2f33322d3438203d3e20323730383134.roa
Signing time:             Fri 09 Aug 2024 17:26:52 +0000
ROA not before:           Fri 09 Aug 2024 17:21:52 +0000
ROA not after:            Fri 08 Aug 2025 17:26:52 +0000
asID:                     270814
IP address blocks:        2804:71d4::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b0:e8:bb:b6:2b:2d:99:9d:19:87:8e:b9:ef:5c:e0:f0:ed:e5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:21:52 2024 GMT
            Not After : Aug  8 17:26:52 2025 GMT
        Subject: CN=BDE5816E4F23DFC0252AFD8D11CCDA605E4E9FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c1:6a:8f:5f:63:4d:ad:be:a1:4e:b9:c8:66:
                    6b:c0:ff:03:cb:e9:f0:56:88:a1:c2:d0:62:b8:de:
                    9e:57:27:68:7d:30:2a:76:8e:40:97:6f:84:3e:c3:
                    5f:31:77:b6:42:a8:14:98:14:67:01:be:80:c1:14:
                    5e:de:86:ed:00:37:f5:09:d1:ec:a6:7e:4a:21:a6:
                    4e:27:83:bb:ca:37:94:21:bd:3d:62:37:f1:95:8d:
                    10:39:3b:cd:a9:55:df:2c:be:65:67:fe:02:f0:0a:
                    72:be:8c:f6:a2:b9:1e:df:f0:a4:ae:f5:59:bd:2e:
                    87:b6:31:15:3d:fb:c3:b8:3b:e3:e0:52:af:f6:d9:
                    0c:44:d1:12:91:70:d4:32:fd:2b:39:a7:4e:5e:79:
                    04:96:88:01:47:50:fb:ec:54:07:25:39:a8:3c:e9:
                    a2:eb:7e:8e:2d:f8:b5:a0:7e:48:b4:e0:db:3b:3c:
                    c4:38:77:2b:8e:d4:14:9b:ee:5d:12:74:14:0e:98:
                    c7:23:15:f3:e4:5e:a6:0b:55:e3:23:3b:c2:4f:85:
                    f4:3d:78:89:b3:70:a4:e5:a4:d8:12:52:44:70:32:
                    56:54:90:1f:80:6d:f2:ec:8e:81:aa:a5:ca:f4:62:
                    a7:35:2e:5c:b6:ff:dc:31:28:1b:bc:b3:2a:54:c1:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E5:81:6E:4F:23:DF:C0:25:2A:FD:8D:11:CC:DA:60:5E:4E:9F:A0
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a373164343a3a2f33322d3438203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:04:fb:05:af:ea:43:83:07:70:a6:18:48:cd:cf:07:32:6e:
         c2:97:a0:6b:dc:8e:8b:7d:70:13:65:21:73:62:9a:f2:05:58:
         8d:8e:30:a9:77:b3:8d:37:d3:67:d3:52:fe:62:0f:41:c3:df:
         f6:1b:0a:14:e9:93:c4:fe:fe:74:2d:43:fc:e3:79:80:6d:9f:
         93:92:2e:56:12:fe:c1:33:7e:ed:94:53:96:3a:8c:89:4f:8c:
         3a:30:31:61:52:20:f8:86:93:6c:d4:1b:0e:bf:20:80:74:31:
         f0:73:5f:4f:dc:de:5c:e1:52:49:a6:80:dd:d3:a2:8f:49:95:
         8f:68:18:7b:a9:67:ce:10:46:da:ab:42:50:06:dc:3b:60:a5:
         1d:3d:36:f4:4f:bf:61:7c:e1:ee:e3:57:cb:9f:31:71:68:97:
         48:33:a2:f6:fb:82:c4:96:1e:e6:8d:d6:aa:1d:bb:d2:c3:b6:
         c5:2a:42:70:53:5e:b8:8c:ce:21:28:52:c5:08:84:cc:6c:9c:
         9c:b8:38:c5:59:45:24:ff:1a:af:9f:c7:90:89:60:2b:f2:c8:
         a3:12:ae:34:ff:17:4e:c0:cd:c3:33:9c:5e:54:f9:3a:42:ce:
         e4:dc:3b:a1:e6:91:77:4c:0e:e5:17:8e:bb:d9:9c:cf:8f:29:
         24:00:79:4e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUc7Dou7YrLZmdGYeOue9c4PDt5Q0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1REEzMTkwRUQ5QkNENEZEQjcyMzcwOEFGNURCODc1
MkMyQ0FDMjAeFw0yNDA4MDkxNzIxNTJaFw0yNTA4MDgxNzI2NTJaMDMxMTAvBgNV
BAMTKEJERTU4MTZFNEYyM0RGQzAyNTJBRkQ4RDExQ0NEQTYwNUU0RTlGQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDowWqPX2NNrb6hTrnIZmvA/wPL
6fBWiKHC0GK43p5XJ2h9MCp2jkCXb4Q+w18xd7ZCqBSYFGcBvoDBFF7ehu0AN/UJ
0eymfkohpk4ng7vKN5QhvT1iN/GVjRA5O82pVd8svmVn/gLwCnK+jPaiuR7f8KSu
9Vm9Loe2MRU9+8O4O+PgUq/22QxE0RKRcNQy/Ss5p05eeQSWiAFHUPvsVAclOag8
6aLrfo4t+LWgfki04Ns7PMQ4dyuO1BSb7l0SdBQOmMcjFfPkXqYLVeMjO8JPhfQ9
eImzcKTlpNgSUkRwMlZUkB+AbfLsjoGqpcr0Yqc1Lly2/9wxKBu8sypUwQnzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUveWBbk8j38AlKv2NEczaYF5On6AwHwYDVR0j
BBgwFoAUe12jGQ7ZvNT9tyNwivXbh1LCysIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRGdERucFlKa0NKc2R0U3FqWW9oM1JGd29DTDlQQVdDZEpLU3VteHhK
UWkvMC83QjVEQTMxOTBFRDlCQ0Q0RkRCNzIzNzA4QUY1REI4NzUyQzJDQUMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNURBMzE5MEVEOUJDRDRG
REI3MjM3MDhBRjVEQjg3NTJDMkNBQzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0RnREbnBZSmtDSnNkdFNxallvaDNSRndvQ0w5UEFXQ2RKS1N1bXh4SlFpLzAv
MzIzODMwMzQzYTM3MzE2NDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzgzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARx1DANBgkqhkiG9w0BAQsFAAOCAQEAWQT7Ba/q
Q4MHcKYYSM3PBzJuwpega9yOi31wE2Uhc2Ka8gVYjY4wqXezjTfTZ9NS/mIPQcPf
9hsKFOmTxP7+dC1D/ON5gG2fk5IuVhL+wTN+7ZRTljqMiU+MOjAxYVIg+IaTbNQb
Dr8ggHQx8HNfT9zeXOFSSaaA3dOij0mVj2gYe6lnzhBG2qtCUAbcO2ClHT029E+/
YXzh7uNXy58xcWiXSDOi9vuCxJYe5o3Wqh270sO2xSpCcFNeuIzOIShSxQiEzGyc
nLg4xVlFJP8ar5/HkIlgK/LIoxKuNP8XTsDNwzOcXlT5OkLO5Nw7oeaRd0wO5ReO
u9mcz48pJAB5Tg==
-----END CERTIFICATE-----
Generated at Thu Sep 26 06:01:40 2024 by rpki-client on console-fra.rpki-client.org