Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa
File:                     323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa (raw, json)
Hash identifier:          q03X/fA4M6UcIVJaW52mbZp33rnfPoRZwh42slaD9R0=
Subject key identifier:   C1:DC:D8:65:1E:EE:55:02:16:E4:09:D2:AE:95:E7:C7:01:9D:BC:8D
Certificate issuer:       /CN=20EE33C957E1A859D49A5E411C799465085E928F
Certificate serial:       226C47B8363767B17A685545C266083745F8D13B
Authority key identifier: 20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa
Signing time:             Tue 23 Apr 2024 22:16:33 +0000
ROA not before:           Tue 23 Apr 2024 22:11:33 +0000
ROA not after:            Tue 22 Apr 2025 22:16:33 +0000
asID:                     272566
IP address blocks:        2804:853c:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6c:47:b8:36:37:67:b1:7a:68:55:45:c2:66:08:37:45:f8:d1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EE33C957E1A859D49A5E411C799465085E928F
        Validity
            Not Before: Apr 23 22:11:33 2024 GMT
            Not After : Apr 22 22:16:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:fd:cc:ca:39:c8:7f:40:74:17:4f:3c:44:
                    c6:ff:e1:b8:c7:6c:25:eb:3d:5e:e2:fd:b2:bc:34:
                    ea:48:a3:fa:58:15:f8:ea:73:7b:1a:17:c9:22:0f:
                    4c:46:50:9d:53:f3:30:1b:fa:4c:e8:f3:a9:61:d2:
                    92:72:f9:1d:47:22:9b:ab:38:41:20:ea:27:53:db:
                    9f:88:df:1e:99:39:78:4a:3d:83:83:58:c3:06:27:
                    09:a1:76:ed:e8:df:b7:b2:08:54:1c:9e:25:ed:39:
                    1e:2c:0b:5d:09:ec:24:0f:b4:48:0c:e3:4d:c8:22:
                    98:75:36:e7:59:3f:c6:8d:e8:8e:c6:73:89:fe:27:
                    7b:29:ae:4e:22:9c:7c:64:7d:12:c6:8b:66:d8:d7:
                    85:77:41:ed:44:ba:85:ae:53:06:a1:c4:25:91:e6:
                    0f:bc:2a:6d:c6:5e:e7:a2:32:29:51:d6:48:18:d0:
                    09:db:fa:80:10:04:cf:76:03:76:30:c4:cc:d4:75:
                    b5:fa:5f:cf:98:b6:44:eb:e1:69:f6:d6:56:4e:80:
                    29:20:09:f0:d0:fb:77:44:bb:37:29:67:97:95:43:
                    14:7b:ce:5b:71:f7:04:1a:26:18:67:73:5c:42:d6:
                    69:b4:e3:38:50:53:4c:0e:41:d6:86:45:8e:2d:75:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DC:D8:65:1E:EE:55:02:16:E4:09:D2:AE:95:E7:C7:01:9D:BC:8D
            X509v3 Authority Key Identifier:
                keyid:20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/20EE33C957E1A859D49A5E411C799465085E928F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         df:f1:a5:92:1a:05:18:5b:1c:c4:ad:c7:c3:24:c0:70:8d:5b:
         49:47:a0:d1:13:07:32:8f:7b:aa:1c:5a:86:ad:80:b3:ca:61:
         6f:95:94:17:e0:ac:16:93:c6:9a:0a:5f:0f:eb:29:ae:0e:9f:
         ad:6c:a4:33:1c:80:33:e4:0f:6e:f8:28:5e:d3:11:56:4c:05:
         c1:dc:cc:e2:2e:26:43:8c:f2:79:80:ba:41:25:f4:16:22:7d:
         08:dd:33:e5:0e:14:db:7e:a5:e4:9d:32:84:9f:d6:68:5d:c1:
         a1:b9:c9:38:70:18:48:12:8e:ee:3c:c6:8b:ac:88:ad:9f:3f:
         05:73:7e:6a:49:21:1d:3f:1d:dc:3a:a7:47:ec:33:40:24:0c:
         30:43:f2:fc:2a:a8:a5:9e:e5:65:11:f0:b3:e5:6f:6e:24:d0:
         ec:36:24:77:ee:1a:5e:46:4d:57:0e:5e:6e:bc:6f:e7:70:cb:
         67:b9:d5:cb:45:4f:3d:95:22:d1:7b:9f:b6:52:a2:04:78:78:
         df:b6:ea:0d:b6:41:be:3e:9e:fa:c1:8d:f7:73:de:a4:fe:6c:
         e0:16:c5:96:fa:aa:84:9b:ad:6a:3c:19:f9:20:ad:12:c4:d0:
         b5:37:98:e5:35:3e:98:13:73:2a:95:65:c2:34:d7:0d:3c:7c:
         fa:74:6e:64
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUImxHuDY3Z7F6aFVFwmYIN0X40TswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBFRTMzQzk1N0UxQTg1OUQ0OUE1RTQxMUM3OTk0NjUw
ODVFOTI4RjAeFw0yNDA0MjMyMjExMzNaFw0yNTA0MjIyMjE2MzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjYyQ0ZEQ0NDQTM5Qzg3RjQw
NzQxNzRGM0M0NEM2RkZFMUI4Qzc2QzI1RUIzRDVFRTJGREIyQkMzNEVBNDhBM0ZB
NTgxNUY4RUE3MzdCMUExN0M5MjIwRjRDNDY1MDlENTNGMzMwMUJGQTRDRThGM0E5
NjFEMjkyNzJGOTFENDcyMjlCQUIzODQxMjBFQTI3NTNEQjlGODhERjFFOTkzOTc4
NEEzRDgzODM1OEMzMDYyNzA5QTE3NkVERThERkI3QjIwODU0MUM5RTI1RUQzOTFF
MkMwQjVEMDlFQzI0MEZCNDQ4MENFMzREQzgyMjk4NzUzNkU3NTkzRkM2OERFODhF
QzY3Mzg5RkUyNzdCMjlBRTRFMjI5QzdDNjQ3RDEyQzY4QjY2RDhENzg1Nzc0MUVE
NDRCQTg1QUU1MzA2QTFDNDI1OTFFNjBGQkMyQTZEQzY1RUU3QTIzMjI5NTFENjQ4
MThEMDA5REJGQTgwMTAwNENGNzYwMzc2MzBDNENDRDQ3NUI1RkE1RkNGOThCNjQ0
RUJFMTY5RjZENjU2NEU4MDI5MjAwOUYwRDBGQjc3NDRCQjM3Mjk2Nzk3OTU0MzE0
N0JDRTVCNzFGNzA0MUEyNjE4Njc3MzVDNDJENjY5QjRFMzM4NTA1MzRDMEU0MUQ2
ODY0NThFMkQ3NUEyNzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtiz9zMo5yH9AdBdPPETG/+G4x2wl6z1e4v2yvDTqSKP6WBX46nN7
GhfJIg9MRlCdU/MwG/pM6POpYdKScvkdRyKbqzhBIOonU9ufiN8emTl4Sj2Dg1jD
BicJoXbt6N+3sghUHJ4l7TkeLAtdCewkD7RIDONNyCKYdTbnWT/GjeiOxnOJ/id7
Ka5OIpx8ZH0Sxotm2NeFd0HtRLqFrlMGocQlkeYPvCptxl7nojIpUdZIGNAJ2/qA
EATPdgN2MMTM1HW1+l/PmLZE6+Fp9tZWToApIAnw0Pt3RLs3KWeXlUMUe85bcfcE
GiYYZ3NcQtZptOM4UFNMDkHWhkWOLXWicQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FMHc2GUe7lUCFuQJ0q6V58cBnbyNMB8GA1UdIwQYMBaAFCDuM8lX4ahZ1JpeQRx5
lGUIXpKPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N1ZXpXcGE4N1ZUYTl2
cmJCYjFmNmRSbkRWYUpnM3ZNVkRLN3BhS2hqa2FULzEvMjBFRTMzQzk1N0UxQTg1
OUQ0OUE1RTQxMUM3OTk0NjUwODVFOTI4Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMEVFMzNDOTU3RTFBODU5RDQ5QTVFNDExQzc5OTQ2NTA4NUU5
MjhGLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DdWV6V3BhODdWVGE5dnJiQmIx
ZjZkUm5EVmFKZzN2TVZESzdwYUtoamthVC8xLzMyMzgzMDM0M2EzODM1MzM2MzNh
MzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM3MzIzNTM2MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBIU8QDANBgkqhkiG9w0BAQsFAAOCAQEA3/GlkhoFGFscxK3HwyTA
cI1bSUeg0RMHMo97qhxahq2As8phb5WUF+CsFpPGmgpfD+sprg6frWykMxyAM+QP
bvgoXtMRVkwFwdzM4i4mQ4zyeYC6QSX0FiJ9CN0z5Q4U236l5J0yhJ/WaF3BobnJ
OHAYSBKO7jzGi6yIrZ8/BXN+akkhHT8d3DqnR+wzQCQMMEPy/CqopZ7lZRHws+Vv
biTQ7DYkd+4aXkZNVw5ebrxv53DLZ7nVy0VPPZUi0XuftlKiBHh437bqDbZBvj6e
+sGN93PepP5s4BbFlvqqhJutajwZ+SCtEsTQtTeY5TU+mBNzKpVlwjTXDTx8+nRu
ZA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 03:59:08 2024 by rpki-client on console-fra.rpki-client.org