Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/323830343a383a3a2f33302d313238203d3e203134383430.roa
File:                     323830343a383a3a2f33302d313238203d3e203134383430.roa (raw, json)
Hash identifier:          TA7PchePUsFojvjCOvK8Y++++BxW3Z8r93RW7cbiBF0=
Subject key identifier:   FC:A9:25:96:80:5A:1F:4F:76:D8:AD:E6:F0:05:3D:23:1E:A4:BD:F3
Certificate issuer:       /CN=935257EB3C9C286B284FF65477D23761A683AD6E
Certificate serial:       017D39CEB8C02F12CFC12B76D35CAC7AE2CFFA13
Authority key identifier: 93:52:57:EB:3C:9C:28:6B:28:4F:F6:54:77:D2:37:61:A6:83:AD:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/935257EB3C9C286B284FF65477D23761A683AD6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/323830343a383a3a2f33302d313238203d3e203134383430.roa
Signing time:             Mon 22 Apr 2024 18:33:48 +0000
ROA not before:           Mon 22 Apr 2024 18:28:48 +0000
ROA not after:            Mon 21 Apr 2025 18:33:48 +0000
asID:                     14840
IP address blocks:        2804:8::/30 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7d:39:ce:b8:c0:2f:12:cf:c1:2b:76:d3:5c:ac:7a:e2:cf:fa:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935257EB3C9C286B284FF65477D23761A683AD6E
        Validity
            Not Before: Apr 22 18:28:48 2024 GMT
            Not After : Apr 21 18:33:48 2025 GMT
        Subject: CN=FCA92596805A1F4F76D8ADE6F0053D231EA4BDF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:a5:bb:11:fe:93:cb:95:c4:fd:c2:6f:f7:
                    c8:8c:6b:ac:df:af:b2:85:f8:2a:74:5b:d0:1c:57:
                    de:73:18:f1:bd:5c:bc:09:53:9f:17:36:ee:e4:3d:
                    3d:10:4a:dd:e3:0b:d4:05:f3:d5:3c:ba:00:cf:62:
                    00:4d:45:9f:a8:d4:42:b8:2b:07:5e:cc:15:05:4c:
                    a1:67:21:66:8a:cc:59:a0:6c:9c:97:73:0d:69:05:
                    de:27:24:8a:df:dc:89:7e:d6:ba:e5:f1:49:14:ad:
                    9c:e9:17:7f:19:4a:7a:ab:9b:d1:e4:8d:a5:a9:32:
                    a0:c5:04:d5:16:ae:de:74:dc:06:40:2b:51:62:89:
                    ab:a9:4a:71:39:56:74:ff:19:6b:5c:6c:92:0a:4e:
                    aa:49:3b:da:ef:0b:63:4b:8d:7c:0c:87:d4:15:b4:
                    1a:9e:98:eb:f4:9c:0f:a2:83:c4:db:16:42:64:ed:
                    20:52:3a:eb:24:b2:40:3f:7e:1a:ab:b7:99:e5:1c:
                    de:42:64:cb:80:d3:c2:bc:4a:ab:6c:f3:8a:9f:1d:
                    b5:bb:3e:37:29:21:6c:22:79:5b:cf:62:cf:a5:eb:
                    c6:77:82:67:7a:c0:ca:e9:1d:3d:a2:51:70:62:6b:
                    31:42:14:0a:1c:c9:bd:8e:14:f7:4b:50:32:aa:79:
                    6d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A9:25:96:80:5A:1F:4F:76:D8:AD:E6:F0:05:3D:23:1E:A4:BD:F3
            X509v3 Authority Key Identifier:
                keyid:93:52:57:EB:3C:9C:28:6B:28:4F:F6:54:77:D2:37:61:A6:83:AD:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/935257EB3C9C286B284FF65477D23761A683AD6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/935257EB3C9C286B284FF65477D23761A683AD6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/323830343a383a3a2f33302d313238203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8::/30

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:36:97:4d:42:73:50:6a:28:93:62:6b:d8:c6:fa:85:8a:
         1c:83:74:42:58:95:39:58:16:58:a0:41:96:bd:d5:10:0a:42:
         dd:44:cf:42:3b:7d:23:75:a1:45:5a:ee:c7:1e:7f:de:15:62:
         bc:54:5d:ee:31:a4:87:8e:ed:43:30:c0:dc:d7:ba:a0:cb:1b:
         f8:6e:60:c7:c6:75:d9:64:fd:74:72:da:cb:b4:55:16:35:b8:
         82:ff:d2:ee:22:b2:e9:76:1f:92:26:42:81:28:14:cb:17:f8:
         c0:3c:a2:a2:e9:f8:26:a1:69:08:7e:f2:f8:c3:31:cb:ec:e7:
         78:a8:80:17:de:28:fe:b9:52:94:16:c7:f8:d9:b9:42:bf:d7:
         6e:0c:be:bb:fb:1a:6f:e2:da:81:98:9a:64:c5:20:f6:5a:27:
         1e:a4:4f:fd:91:83:82:96:41:d4:d9:10:62:dd:4c:96:9d:ec:
         48:1a:52:cb:d2:8f:02:c4:dc:79:07:34:77:4a:38:97:44:c8:
         3b:18:e5:6b:b1:ae:c1:ae:14:00:12:7a:44:ad:97:c8:79:99:
         95:4b:ff:b6:ba:b8:6c:a6:98:df:06:6d:77:37:ea:ab:28:2f:
         6d:b8:63:43:8b:21:16:e8:dd:cf:bc:c9:c8:11:3b:fa:54:ee:
         f7:07:f8:4d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUAX05zrjALxLPwSt201yseuLP+hMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM1MjU3RUIzQzlDMjg2QjI4NEZGNjU0NzdEMjM3NjFB
NjgzQUQ2RTAeFw0yNDA0MjIxODI4NDhaFw0yNTA0MjExODMzNDhaMDMxMTAvBgNV
BAMTKEZDQTkyNTk2ODA1QTFGNEY3NkQ4QURFNkYwMDUzRDIzMUVBNEJERjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CqW7Ef6Ty5XE/cJv98iMa6zf
r7KF+Cp0W9AcV95zGPG9XLwJU58XNu7kPT0QSt3jC9QF89U8ugDPYgBNRZ+o1EK4
KwdezBUFTKFnIWaKzFmgbJyXcw1pBd4nJIrf3Il+1rrl8UkUrZzpF38ZSnqrm9Hk
jaWpMqDFBNUWrt503AZAK1FiiaupSnE5VnT/GWtcbJIKTqpJO9rvC2NLjXwMh9QV
tBqemOv0nA+ig8TbFkJk7SBSOuskskA/fhqrt5nlHN5CZMuA08K8Sqts84qfHbW7
PjcpIWwieVvPYs+l68Z3gmd6wMrpHT2iUXBiazFCFAocyb2OFPdLUDKqeW3ZAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU/KklloBaH0922K3m8AU9Ix6kvfMwHwYDVR0j
BBgwFoAUk1JX6zycKGsoT/ZUd9I3YaaDrW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2NLVGFzWW9rMk42dTR5cnBRTGFjU054WkM5M3RLc05SWTZpaUFzMnpa
ZWUvMC85MzUyNTdFQjNDOUMyODZCMjg0RkY2NTQ3N0QyMzc2MUE2ODNBRDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzNTI1N0VCM0M5QzI4NkIy
ODRGRjY1NDc3RDIzNzYxQTY4M0FENkUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NjS1Rhc1lvazJONnU0eXJwUUxhY1NOeFpDOTN0S3NOUlk2aWlBczJ6WmVlLzAv
MzIzODMwMzQzYTM4M2EzYTJmMzMzMDJkMzEzMjM4MjAzZDNlMjAzMTM0MzgzNDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUCKAQACDANBgkqhkiG9w0BAQsFAAOCAQEAqpE2l01Cc1BqKJNi
a9jG+oWKHIN0QliVOVgWWKBBlr3VEApC3UTPQjt9I3WhRVruxx5/3hVivFRd7jGk
h47tQzDA3Ne6oMsb+G5gx8Z12WT9dHLay7RVFjW4gv/S7iKy6XYfkiZCgSgUyxf4
wDyioun4JqFpCH7y+MMxy+zneKiAF94o/rlSlBbH+Nm5Qr/Xbgy+u/sab+LagZia
ZMUg9lonHqRP/ZGDgpZB1NkQYt1Mlp3sSBpSy9KPAsTceQc0d0o4l0TIOxjla7Gu
wa4UABJ6RK2XyHmZlUv/trq4bKaY3wZtdzfqqygvbbhjQ4shFujdz7zJyBE7+lTu
9wf4TQ==
-----END CERTIFICATE-----
Generated at Sat May 18 16:23:38 2024 by rpki-client on console-fra.rpki-client.org