Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/323830343a333531383a633030303a3a2f33342d3334203d3e20323635353030.roa
File:                     323830343a333531383a633030303a3a2f33342d3334203d3e20323635353030.roa (raw, json)
Hash identifier:          zStqOIVUrECRU5k+GSKb18DUbD5VBEf7HNWSo6aUzS0=
Subject key identifier:   9F:8F:69:CD:52:3D:05:20:98:12:DE:15:40:42:ED:C7:09:10:2F:74
Certificate issuer:       /CN=2B36FD67FD146F6ABC421C609744891EA7512F17
Certificate serial:       475E2A1634F43E1A9E3272750A607E6C6CB76D02
Authority key identifier: 2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/323830343a333531383a633030303a3a2f33342d3334203d3e20323635353030.roa
Signing time:             Thu 04 Apr 2024 05:43:33 +0000
ROA not before:           Thu 04 Apr 2024 05:38:33 +0000
ROA not after:            Thu 03 Apr 2025 05:43:33 +0000
asID:                     265500
IP address blocks:        2804:3518:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5e:2a:16:34:f4:3e:1a:9e:32:72:75:0a:60:7e:6c:6c:b7:6d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B36FD67FD146F6ABC421C609744891EA7512F17
        Validity
            Not Before: Apr  4 05:38:33 2024 GMT
            Not After : Apr  3 05:43:33 2025 GMT
        Subject: CN=9F8F69CD523D05209812DE154042EDC709102F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:ff:82:d8:8b:53:8d:41:1e:11:1c:ca:24:
                    91:a4:82:22:ed:24:6e:57:5e:15:e3:e5:4d:2a:e5:
                    36:36:68:ca:ac:20:90:b1:63:6f:d5:d7:60:49:fc:
                    70:52:5f:1a:fd:da:dc:45:c0:61:c5:5c:c3:6e:25:
                    d6:83:1b:8d:5f:ea:0f:2d:00:04:7f:05:82:c8:f0:
                    cc:02:f8:7d:ec:a0:3d:42:81:74:9a:44:4c:0f:3c:
                    6a:a8:e1:1f:f9:96:77:07:f4:74:cf:41:53:48:a5:
                    51:dc:9c:33:21:34:84:51:c7:dc:ab:a8:af:99:e0:
                    d5:36:16:e4:2c:c3:1f:a4:8d:7b:10:71:92:99:22:
                    43:a8:96:bd:cf:7d:75:f2:9e:72:5f:d9:07:de:94:
                    dc:60:56:62:40:c8:75:67:3f:3b:9e:eb:85:2d:1a:
                    1f:2b:cd:50:3f:9b:3f:ce:9c:93:8f:9f:fe:60:a9:
                    c6:f2:a8:10:67:bf:b7:3e:c4:5a:1a:a4:28:f3:4f:
                    80:41:91:8d:7c:5e:00:0b:fb:8f:15:0b:74:4f:31:
                    5b:1b:6b:58:05:5e:4c:7c:a1:2a:d8:ba:e5:bc:98:
                    fa:65:4e:be:3e:8a:87:38:a1:05:07:0a:cb:f7:2e:
                    f3:1c:a2:7c:e4:4e:75:e0:01:4e:df:55:9b:4a:6b:
                    b9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8F:69:CD:52:3D:05:20:98:12:DE:15:40:42:ED:C7:09:10:2F:74
            X509v3 Authority Key Identifier:
                keyid:2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/2B36FD67FD146F6ABC421C609744891EA7512F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/323830343a333531383a633030303a3a2f33342d3334203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         72:01:76:c7:71:3b:e0:10:a4:bf:81:60:65:5e:82:77:ae:87:
         cc:e7:95:42:d0:01:b5:ef:81:1a:47:40:2a:ed:f0:1e:57:0f:
         87:6b:51:26:f3:97:2f:80:e6:4d:6f:69:55:c3:c6:0e:fe:8d:
         f1:43:c0:03:bf:22:fa:1a:92:4f:57:0f:2c:ea:ac:31:f3:9a:
         d4:ae:a6:df:34:22:fb:c1:99:e3:5f:91:de:a4:0d:67:bf:49:
         f9:6b:3f:d6:75:a8:19:4b:b9:92:b2:b8:b2:35:a9:13:c8:ab:
         86:68:40:bb:28:98:f6:2f:79:42:6f:07:6b:78:8f:04:64:c0:
         37:e9:18:f9:39:46:2f:f2:6c:aa:72:f7:d3:0d:bd:12:ca:b2:
         b4:6e:23:e1:18:f3:19:3c:f0:4a:56:c1:7d:e0:98:cb:1e:50:
         59:93:bf:c5:89:7b:19:22:ad:29:38:ee:d6:26:f0:39:48:28:
         b0:4f:c8:40:bd:5d:02:aa:eb:43:bc:14:92:e7:c0:5c:0c:10:
         b6:8c:3b:57:e7:1b:27:29:13:68:ce:9e:0c:93:40:1c:f2:5e:
         36:f5:8e:ad:1a:c3:74:51:5e:14:7c:cf:b2:f7:58:06:e8:55:
         e6:45:cc:59:27:71:18:0e:5f:0a:b1:56:28:ad:f6:bf:2b:8e:
         d7:dd:8f:e1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUR14qFjT0PhqeMnJ1CmB+bGy3bQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIzNkZENjdGRDE0NkY2QUJDNDIxQzYwOTc0NDg5MUVB
NzUxMkYxNzAeFw0yNDA0MDQwNTM4MzNaFw0yNTA0MDMwNTQzMzNaMDMxMTAvBgNV
BAMTKDlGOEY2OUNENTIzRDA1MjA5ODEyREUxNTQwNDJFREM3MDkxMDJGNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFK/+C2ItTjUEeERzKJJGkgiLt
JG5XXhXj5U0q5TY2aMqsIJCxY2/V12BJ/HBSXxr92txFwGHFXMNuJdaDG41f6g8t
AAR/BYLI8MwC+H3soD1CgXSaREwPPGqo4R/5lncH9HTPQVNIpVHcnDMhNIRRx9yr
qK+Z4NU2FuQswx+kjXsQcZKZIkOolr3PfXXynnJf2QfelNxgVmJAyHVnPzue64Ut
Gh8rzVA/mz/OnJOPn/5gqcbyqBBnv7c+xFoapCjzT4BBkY18XgAL+48VC3RPMVsb
a1gFXkx8oSrYuuW8mPplTr4+ioc4oQUHCsv3LvMconzkTnXgAU7fVZtKa7mPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUn49pzVI9BSCYEt4VQELtxwkQL3QwHwYDVR0j
BBgwFoAUKzb9Z/0Ub2q8Qhxgl0SJHqdRLxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj
eGovMS8yQjM2RkQ2N0ZEMTQ2RjZBQkM0MjFDNjA5NzQ0ODkxRUE3NTEyRjE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCMzZGRDY3RkQxNDZGNkFC
QzQyMUM2MDk3NDQ4OTFFQTc1MTJGMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzEv
MzIzODMwMzQzYTMzMzUzMTM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENRjAMA0GCSqGSIb3DQEBCwUA
A4IBAQByAXbHcTvgEKS/gWBlXoJ3rofM55VC0AG174EaR0Aq7fAeVw+Ha1Em85cv
gOZNb2lVw8YO/o3xQ8ADvyL6GpJPVw8s6qwx85rUrqbfNCL7wZnjX5HepA1nv0n5
az/WdagZS7mSsriyNakTyKuGaEC7KJj2L3lCbwdreI8EZMA36Rj5OUYv8myqcvfT
Db0SyrK0biPhGPMZPPBKVsF94JjLHlBZk7/FiXsZIq0pOO7WJvA5SCiwT8hAvV0C
qutDvBSS58BcDBC2jDtX5xsnKRNozp4Mk0Ac8l429Y6tGsN0UV4UfM+y91gG6FXm
RcxZJ3EYDl8KsVYorfa/K47X3Y/h
-----END CERTIFICATE-----
Generated at Fri Jun 14 00:23:35 2024 by rpki-client on console-fra.rpki-client.org