Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/323830343a376436303a3a2f33322d3334203d3e203230343733.roa
File:                     323830343a376436303a3a2f33322d3334203d3e203230343733.roa (raw, json)
Hash identifier:          eF/sT6tNRoujlOWGT01bopQ09gQb88Taab0nFuLI4AM=
Subject key identifier:   83:C1:57:6F:E6:E0:3F:F7:B9:5B:57:B6:59:51:BF:70:81:65:0C:77
Certificate issuer:       /CN=8C50B18948FB749C5395482072FE7285BFCC98F1
Certificate serial:       19FD64768D451391403FF338A7AC2C0E12986A97
Authority key identifier: 8C:50:B1:89:48:FB:74:9C:53:95:48:20:72:FE:72:85:BF:CC:98:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C50B18948FB749C5395482072FE7285BFCC98F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/323830343a376436303a3a2f33322d3334203d3e203230343733.roa
Signing time:             Sat 25 Feb 2023 15:16:00 +0000
ROA not before:           Sat 25 Feb 2023 15:11:00 +0000
ROA not after:            Sat 24 Feb 2024 15:16:00 +0000
asID:                     20473
IP address blocks:        2804:7d60::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fd:64:76:8d:45:13:91:40:3f:f3:38:a7:ac:2c:0e:12:98:6a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C50B18948FB749C5395482072FE7285BFCC98F1
        Validity
            Not Before: Feb 25 15:11:00 2023 GMT
            Not After : Feb 24 15:16:00 2024 GMT
        Subject: CN=83C1576FE6E03FF7B95B57B65951BF7081650C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:30:a7:7c:5a:a1:e7:ad:a0:22:cc:e6:9a:7c:
                    cf:ac:ae:21:0f:3b:ea:54:ea:96:cd:c6:af:9f:18:
                    f5:67:b3:b3:31:48:64:0c:40:0e:b5:54:c5:a9:c9:
                    5e:55:3b:ba:6a:2f:2a:1a:d7:af:53:c0:e9:ee:45:
                    2b:8e:53:fd:bf:2d:9c:c8:79:92:3a:e3:5f:1c:b6:
                    46:8b:fe:6f:35:b3:7f:5a:3f:65:4a:02:02:07:13:
                    02:f7:af:9b:5a:a2:8a:ac:24:fe:e5:2a:b3:21:b2:
                    31:e6:a8:e6:5f:d1:8d:71:0f:58:ec:c6:26:27:93:
                    bc:3e:1a:31:41:52:83:18:a7:e8:15:68:bb:f5:dd:
                    3a:cc:09:39:83:3f:3f:6f:6b:b9:11:18:bc:07:27:
                    58:07:3d:91:0d:10:43:9c:4e:c7:19:6d:95:9b:5d:
                    6c:5e:a3:e7:bb:f9:f3:3a:c1:68:33:b6:9c:5b:cb:
                    47:66:c3:14:13:41:9e:ad:63:09:2a:f0:35:1b:a1:
                    d8:d4:41:68:5a:e3:b0:ec:af:dd:c4:43:e7:b7:83:
                    87:48:01:c4:95:fc:49:e7:5a:38:00:28:96:e8:73:
                    29:23:3c:8f:87:38:52:d3:92:b4:b2:a3:91:46:68:
                    aa:d5:60:1c:7c:80:39:24:4f:70:36:fd:d0:61:4b:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                83:C1:57:6F:E6:E0:3F:F7:B9:5B:57:B6:59:51:BF:70:81:65:0C:77
            X509v3 Authority Key Identifier: 
                keyid:8C:50:B1:89:48:FB:74:9C:53:95:48:20:72:FE:72:85:BF:CC:98:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/8C50B18948FB749C5395482072FE7285BFCC98F1.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C50B18948FB749C5395482072FE7285BFCC98F1.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/323830343a376436303a3a2f33322d3334203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:ca:9b:ba:7a:b7:73:4d:52:ff:dd:e4:6f:a8:5b:33:0a:6d:
         4a:57:88:6e:ae:15:e4:5f:c2:e8:a6:f9:44:48:1c:97:8b:d0:
         61:96:35:2e:0d:f7:34:f8:49:da:e9:c2:8a:2b:44:0c:87:c4:
         4e:64:f2:e6:fa:e3:c5:71:bf:57:cb:53:e1:54:c5:ea:04:8d:
         65:90:86:65:bc:95:8c:b0:08:03:d6:2e:05:0a:9d:fd:23:a9:
         cd:34:04:0c:90:d5:23:e6:fb:48:27:01:2d:db:8f:10:12:04:
         35:1d:91:05:fc:f2:84:fd:3c:7f:7a:58:1b:ef:24:5f:61:79:
         97:49:df:a5:ba:69:09:aa:ce:30:ac:47:ca:7c:3a:10:d8:09:
         3c:8e:8b:e7:9b:06:9c:6b:fb:e6:04:e3:8c:4d:87:09:1d:ec:
         10:3d:43:9c:ee:be:d8:a7:ab:71:f0:b5:5b:40:8a:6e:f5:b1:
         b6:bf:25:b8:ef:ed:32:46:5b:fc:2c:7e:a1:74:92:32:c5:c2:
         8a:82:28:da:51:df:da:6a:79:0a:d1:2e:41:1a:30:06:26:44:
         c3:7f:78:f2:c4:4f:4d:de:c5:10:8a:04:e9:bd:ab:39:0e:5b:
         37:38:77:66:00:11:7f:55:23:05:06:27:08:3c:61:8d:b6:ea:
         dd:b7:bb:f1
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUGf1kdo1FE5FAP/M4p6wsDhKYapcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM1MEIxODk0OEZCNzQ5QzUzOTU0ODIwNzJGRTcyODVC
RkNDOThGMTAeFw0yMzAyMjUxNTExMDBaFw0yNDAyMjQxNTE2MDBaMDMxMTAvBgNV
BAMTKDgzQzE1NzZGRTZFMDNGRjdCOTVCNTdCNjU5NTFCRjcwODE2NTBDNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuMKd8WqHnraAizOaafM+sriEP
O+pU6pbNxq+fGPVns7MxSGQMQA61VMWpyV5VO7pqLyoa169TwOnuRSuOU/2/LZzI
eZI6418ctkaL/m81s39aP2VKAgIHEwL3r5taooqsJP7lKrMhsjHmqOZf0Y1xD1js
xiYnk7w+GjFBUoMYp+gVaLv13TrMCTmDPz9va7kRGLwHJ1gHPZENEEOcTscZbZWb
XWxeo+e7+fM6wWgztpxby0dmwxQTQZ6tYwkq8DUbodjUQWha47Dsr93EQ+e3g4dI
AcSV/EnnWjgAKJbocykjPI+HOFLTkrSyo5FGaKrVYBx8gDkkT3A2/dBhS12lAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUg8FXb+bgP/e5W1e2WVG/cIFlDHcwHwYDVR0j
BBgwFoAUjFCxiUj7dJxTlUggcv5yhb/MmPEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3RhSzdBVFZkbVpXYllORTZkUFpXV3RIMXA2U003TFVZaVhLVXRkRjlE
dFYvMC84QzUwQjE4OTQ4RkI3NDlDNTM5NTQ4MjA3MkZFNzI4NUJGQ0M5OEYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDNTBCMTg5NDhGQjc0OUM1
Mzk1NDgyMDcyRkU3Mjg1QkZDQzk4RjEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N0YUs3QVRWZG1aV2JZTkU2ZFBaV1d0SDFwNlNNN0xVWWlYS1V0ZEY5RHRWLzAv
MzIzODMwMzQzYTM3NjQzNjMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzMDM0
MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEfWAwDQYJKoZIhvcNAQELBQADggEBAA7Km7p6t3NN
Uv/d5G+oWzMKbUpXiG6uFeRfwuim+URIHJeL0GGWNS4N9zT4SdrpwoorRAyHxE5k
8ub648Vxv1fLU+FUxeoEjWWQhmW8lYywCAPWLgUKnf0jqc00BAyQ1SPm+0gnAS3b
jxASBDUdkQX88oT9PH96WBvvJF9heZdJ36W6aQmqzjCsR8p8OhDYCTyOi+ebBpxr
++YE44xNhwkd7BA9Q5zuvtinq3HwtVtAim71sba/Jbjv7TJGW/wsfqF0kjLFwoqC
KNpR39pqeQrRLkEaMAYmRMN/ePLET03exRCKBOm9qzkOWzc4d2YAEX9VIwUGJwg8
YY226t23u/E=
-----END CERTIFICATE-----
Generated at Tue Apr 11 12:28:01 2023 by rpki-client on console-ams.rpki-client.org