Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a3a2f33332d3333203d3e20323730383134.roa
File:                     323830343a6637303a3a2f33332d3333203d3e20323730383134.roa (raw, json)
Hash identifier:          7/FUdo/8pu2Y3n4j1r0eFc/GDgWRr6B4S5oSLH70Zfo=
Subject key identifier:   58:E4:B6:1B:74:48:82:81:41:3F:2B:73:01:CA:7C:AB:BA:F7:93:54
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       49D08224EED356708E98139C8BC2C410051AACFB
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a3a2f33332d3333203d3e20323730383134.roa
Signing time:             Thu 22 Aug 2024 23:14:05 +0000
ROA not before:           Thu 22 Aug 2024 23:09:05 +0000
ROA not after:            Thu 21 Aug 2025 23:14:05 +0000
asID:                     270814
IP address blocks:        2804:f70::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d0:82:24:ee:d3:56:70:8e:98:13:9c:8b:c2:c4:10:05:1a:ac:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug 22 23:09:05 2024 GMT
            Not After : Aug 21 23:14:05 2025 GMT
        Subject: CN=58E4B61B74488281413F2B7301CA7CABBAF79354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:21:28:ad:2a:04:0b:0b:ed:a5:ad:58:a7:cc:
                    b6:55:f5:14:87:35:ac:b7:1a:3d:23:75:a9:60:1e:
                    67:e4:66:c5:40:ed:41:13:7b:5c:4c:aa:c2:bc:83:
                    4a:33:bf:cf:48:84:43:3d:7c:4a:23:e7:df:7f:34:
                    4f:f9:08:bb:4a:62:64:68:59:28:92:7d:87:77:42:
                    0e:f7:2f:33:aa:e7:fd:03:5c:8a:12:18:71:f5:f8:
                    8f:fc:6d:d8:15:31:39:fd:ca:b5:50:f3:2c:42:7d:
                    8b:35:ad:d5:53:2d:4f:fa:dd:eb:99:2a:39:70:67:
                    38:d9:13:f4:ff:ca:a9:c9:29:08:b2:b2:04:56:02:
                    f9:83:ec:3d:89:72:e0:fd:c6:44:e1:5a:b6:4d:35:
                    d1:8f:a2:06:8a:4b:25:4f:60:8e:fa:63:3c:12:82:
                    1b:c5:37:0b:1c:c4:38:7b:c0:31:39:fe:05:63:c0:
                    4c:f8:36:18:41:ec:12:29:71:74:b1:84:a1:42:e6:
                    a6:9c:22:cf:b7:cb:9a:e7:b4:63:44:3e:66:20:4b:
                    c1:0a:ac:fe:47:90:00:7c:ac:9c:52:f2:31:08:ea:
                    9d:05:a0:c4:39:e3:6c:62:74:f4:94:00:7e:03:35:
                    0e:63:81:0b:a5:2d:c1:97:6f:42:49:0e:f5:c3:a8:
                    65:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E4:B6:1B:74:48:82:81:41:3F:2B:73:01:CA:7C:AB:BA:F7:93:54
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a3a2f33332d3333203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f70::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:0f:03:cf:f6:3c:af:a5:ea:fa:7b:7f:c3:7b:c6:69:1c:b9:
         9b:44:f1:3d:ac:31:1e:29:54:55:f1:58:7c:af:45:be:48:2a:
         73:b5:61:ed:48:ad:8a:08:82:17:fa:cf:c1:4e:97:f3:a8:e8:
         21:68:a3:5b:21:ba:5a:fd:59:e0:f9:55:47:fd:02:b6:d2:e4:
         86:59:e9:f9:d9:bc:71:21:8d:ab:32:19:96:e2:e9:12:22:5a:
         f7:a0:32:7b:f0:a3:ae:31:c4:c3:72:4e:30:d9:a4:c6:af:4c:
         75:2c:73:35:5b:f5:b4:98:e1:33:6e:f6:98:e1:ef:08:fd:a0:
         a9:82:c0:74:8a:19:55:99:d2:e0:6e:f7:a7:69:5e:fa:20:77:
         8f:7f:26:d8:1a:2d:28:88:68:d6:e5:f8:cd:fd:5b:8c:be:d2:
         e2:ee:80:53:02:1b:e9:68:d5:13:2f:17:be:c8:39:8f:77:75:
         0a:1a:07:92:ef:de:b3:15:80:b0:64:6a:65:c9:67:cb:18:4a:
         1f:b5:b1:bf:ad:e9:11:b9:18:96:23:d4:db:6c:1e:cf:34:40:
         5d:fa:cf:d3:17:26:85:7a:b1:8e:fa:6b:76:90:db:29:7b:02:
         48:17:02:b4:3b:c7:aa:ba:d4:cf:37:81:53:13:a1:fe:00:43:
         ca:cf:a3:ab
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSdCCJO7TVnCOmBOci8LEEAUarPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1REEzMTkwRUQ5QkNENEZEQjcyMzcwOEFGNURCODc1
MkMyQ0FDMjAeFw0yNDA4MjIyMzA5MDVaFw0yNTA4MjEyMzE0MDVaMDMxMTAvBgNV
BAMTKDU4RTRCNjFCNzQ0ODgyODE0MTNGMkI3MzAxQ0E3Q0FCQkFGNzkzNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYISitKgQLC+2lrVinzLZV9RSH
Nay3Gj0jdalgHmfkZsVA7UETe1xMqsK8g0ozv89IhEM9fEoj599/NE/5CLtKYmRo
WSiSfYd3Qg73LzOq5/0DXIoSGHH1+I/8bdgVMTn9yrVQ8yxCfYs1rdVTLU/63euZ
KjlwZzjZE/T/yqnJKQiysgRWAvmD7D2JcuD9xkThWrZNNdGPogaKSyVPYI76YzwS
ghvFNwscxDh7wDE5/gVjwEz4NhhB7BIpcXSxhKFC5qacIs+3y5rntGNEPmYgS8EK
rP5HkAB8rJxS8jEI6p0FoMQ542xidPSUAH4DNQ5jgQulLcGXb0JJDvXDqGXJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWOS2G3RIgoFBPytzAcp8q7r3k1QwHwYDVR0j
BBgwFoAUe12jGQ7ZvNT9tyNwivXbh1LCysIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRGdERucFlKa0NKc2R0U3FqWW9oM1JGd29DTDlQQVdDZEpLU3VteHhK
UWkvMC83QjVEQTMxOTBFRDlCQ0Q0RkRCNzIzNzA4QUY1REI4NzUyQzJDQUMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNURBMzE5MEVEOUJDRDRG
REI3MjM3MDhBRjVEQjg3NTJDMkNBQzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0RnREbnBZSmtDSnNkdFNxallvaDNSRndvQ0w5UEFXQ2RKS1N1bXh4SlFpLzAv
MzIzODMwMzQzYTY2MzczMDNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzczMDM4
MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygED3AAMA0GCSqGSIb3DQEBCwUAA4IBAQAWDwPP9jyv
per6e3/De8ZpHLmbRPE9rDEeKVRV8Vh8r0W+SCpztWHtSK2KCIIX+s/BTpfzqOgh
aKNbIbpa/Vng+VVH/QK20uSGWen52bxxIY2rMhmW4ukSIlr3oDJ78KOuMcTDck4w
2aTGr0x1LHM1W/W0mOEzbvaY4e8I/aCpgsB0ihlVmdLgbvenaV76IHePfybYGi0o
iGjW5fjN/VuMvtLi7oBTAhvpaNUTLxe+yDmPd3UKGgeS796zFYCwZGplyWfLGEof
tbG/rekRuRiWI9TbbB7PNEBd+s/TFyaFerGO+mt2kNspewJIFwK0O8equtTPN4FT
E6H+AEPKz6Or
-----END CERTIFICATE-----
Generated at Thu Sep 26 06:01:40 2024 by rpki-client on console-fra.rpki-client.org