Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a383030303a3a2f33332d3333203d3e20323732353636.roa
File:                     323830343a383533633a383030303a3a2f33332d3333203d3e20323732353636.roa (raw, json)
Hash identifier:          hCqAVM6gwzTj6YlafoJ5YK6ygWPYzg+pLum2te+4lAg=
Subject key identifier:   08:7B:2B:62:4D:06:CD:44:95:8A:1F:B8:65:83:46:EC:54:E2:41:F9
Certificate issuer:       /CN=20EE33C957E1A859D49A5E411C799465085E928F
Certificate serial:       38FAA3AFB448464D8792EC55D8E888488E6D7A3C
Authority key identifier: 20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a383030303a3a2f33332d3333203d3e20323732353636.roa
Signing time:             Tue 23 Apr 2024 22:16:34 +0000
ROA not before:           Tue 23 Apr 2024 22:11:34 +0000
ROA not after:            Tue 22 Apr 2025 22:16:34 +0000
asID:                     272566
IP address blocks:        2804:853c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fa:a3:af:b4:48:46:4d:87:92:ec:55:d8:e8:88:48:8e:6d:7a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EE33C957E1A859D49A5E411C799465085E928F
        Validity
            Not Before: Apr 23 22:11:34 2024 GMT
            Not After : Apr 22 22:16:34 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:72:f7:b9:42:9c:fd:c4:a7:7a:7f:af:27:
                    df:b2:8c:be:68:73:ac:7b:0e:cf:10:84:af:e5:4d:
                    10:7b:ab:e9:e7:68:94:d1:47:5b:12:af:1a:05:8e:
                    27:89:e7:23:a7:30:f0:ba:be:d8:ac:c1:9b:74:e4:
                    7e:19:1a:e1:66:ee:55:1f:3f:b5:ef:66:03:cd:94:
                    ed:71:50:ac:46:05:58:a7:79:83:de:82:6a:c2:d3:
                    6f:7d:b2:07:ad:4d:df:0b:8e:8f:7e:ef:a2:73:1c:
                    c4:86:5d:1d:1c:d3:ed:b1:8a:bc:52:46:f1:8b:e9:
                    44:45:cf:e5:2c:58:49:67:a2:22:01:8c:e3:52:18:
                    2b:e9:55:d5:98:bf:88:e7:a6:94:36:6d:00:10:67:
                    ae:fc:cb:ac:bf:80:ab:b8:18:7a:f4:47:8b:8e:f0:
                    f8:5c:4c:d7:3d:60:cb:9c:dd:64:7d:81:ce:0f:a5:
                    a3:eb:ae:c8:c7:37:90:f0:00:c6:70:53:b4:af:8d:
                    fe:17:68:26:25:b7:bc:ae:96:f3:97:88:ed:94:19:
                    95:82:30:0c:29:d7:f4:71:bc:68:a8:13:e7:49:a3:
                    ff:7d:1a:36:b1:25:fb:08:1b:7e:0c:d3:d8:4c:a3:
                    f2:bc:2d:08:83:63:bf:9a:17:30:54:48:03:3a:58:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7B:2B:62:4D:06:CD:44:95:8A:1F:B8:65:83:46:EC:54:E2:41:F9
            X509v3 Authority Key Identifier:
                keyid:20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/20EE33C957E1A859D49A5E411C799465085E928F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a383030303a3a2f33332d3333203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         76:c1:1c:7d:fa:5a:63:23:7b:4f:9f:33:31:7e:60:44:35:5e:
         74:92:b4:65:c8:e5:0e:1b:9c:69:2b:3d:4b:f9:95:f6:40:b1:
         74:b6:37:4a:59:f2:2c:d2:27:80:cf:8b:5f:b3:85:40:13:38:
         6c:3e:b2:d2:68:a5:5b:b6:04:ee:1a:5d:3e:de:62:71:51:a5:
         17:f8:e7:6a:25:23:07:a3:66:e4:a2:f0:af:51:f1:a9:fe:cc:
         d9:77:97:88:45:f3:90:b3:76:1f:05:31:4d:1a:c9:af:2f:9f:
         f6:95:e6:5a:2d:1a:57:a3:d1:ec:06:4e:7c:0e:59:20:17:76:
         c8:a4:f9:3f:c7:e3:f4:e3:30:ee:ff:2e:a4:f0:cb:d8:70:dc:
         89:1d:65:12:a2:48:74:70:13:fa:5f:14:fc:1b:66:5e:72:52:
         c9:d9:cb:07:31:0b:c3:3f:42:bd:58:07:0b:2c:f6:48:d1:1c:
         dc:04:05:49:bb:72:99:20:a4:d6:02:6a:15:9e:c6:34:ec:d2:
         84:49:c7:21:00:e1:8a:59:e4:c8:6f:ba:6f:32:98:a9:b2:49:
         8f:3a:7a:a8:e7:a5:33:00:e9:fb:5c:52:f3:a2:19:34:2d:24:
         f8:8d:91:ca:61:da:15:8a:6a:86:c4:bb:fe:a4:ca:5e:c4:a5:
         ef:f6:5e:45
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUOPqjr7RIRk2HkuxV2OiISI5tejwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBFRTMzQzk1N0UxQTg1OUQ0OUE1RTQxMUM3OTk0NjUw
ODVFOTI4RjAeFw0yNDA0MjMyMjExMzRaFw0yNTA0MjIyMjE2MzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0MwQzcyRjdCOTQyOUNGREM0
QTc3QTdGQUYyN0RGQjI4Q0JFNjg3M0FDN0IwRUNGMTA4NEFGRTU0RDEwN0JBQkU5
RTc2ODk0RDE0NzVCMTJBRjFBMDU4RTI3ODlFNzIzQTczMEYwQkFCRUQ4QUNDMTlC
NzRFNDdFMTkxQUUxNjZFRTU1MUYzRkI1RUY2NjAzQ0Q5NEVENzE1MEFDNDYwNTU4
QTc3OTgzREU4MjZBQzJEMzZGN0RCMjA3QUQ0RERGMEI4RThGN0VFRkEyNzMxQ0M0
ODY1RDFEMUNEM0VEQjE4QUJDNTI0NkYxOEJFOTQ0NDVDRkU1MkM1ODQ5NjdBMjIy
MDE4Q0UzNTIxODJCRTk1NUQ1OThCRjg4RTdBNjk0MzY2RDAwMTA2N0FFRkNDQkFD
QkY4MEFCQjgxODdBRjQ0NzhCOEVGMEY4NUM0Q0Q3M0Q2MENCOUNERDY0N0Q4MUNF
MEZBNUEzRUJBRUM4QzczNzkwRjAwMEM2NzA1M0I0QUY4REZFMTc2ODI2MjVCN0JD
QUU5NkYzOTc4OEVEOTQxOTk1ODIzMDBDMjlEN0Y0NzFCQzY4QTgxM0U3NDlBM0ZG
N0QxQTM2QjEyNUZCMDgxQjdFMENEM0Q4NENBM0YyQkMyRDA4ODM2M0JGOUExNzMw
NTQ0ODAzM0E1ODgzOTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzAxy97lCnP3Ep3p/ryffsoy+aHOsew7PEISv5U0Qe6vp52iU0Udb
Eq8aBY4niecjpzDwur7YrMGbdOR+GRrhZu5VHz+172YDzZTtcVCsRgVYp3mD3oJq
wtNvfbIHrU3fC46Pfu+icxzEhl0dHNPtsYq8Ukbxi+lERc/lLFhJZ6IiAYzjUhgr
6VXVmL+I56aUNm0AEGeu/Musv4CruBh69EeLjvD4XEzXPWDLnN1kfYHOD6Wj667I
xzeQ8ADGcFO0r43+F2gmJbe8rpbzl4jtlBmVgjAMKdf0cbxoqBPnSaP/fRo2sSX7
CBt+DNPYTKPyvC0Ig2O/mhcwVEgDOliDkQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FAh7K2JNBs1ElYofuGWDRuxU4kH5MB8GA1UdIwQYMBaAFCDuM8lX4ahZ1JpeQRx5
lGUIXpKPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N1ZXpXcGE4N1ZUYTl2
cmJCYjFmNmRSbkRWYUpnM3ZNVkRLN3BhS2hqa2FULzEvMjBFRTMzQzk1N0UxQTg1
OUQ0OUE1RTQxMUM3OTk0NjUwODVFOTI4Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMEVFMzNDOTU3RTFBODU5RDQ5QTVFNDExQzc5OTQ2NTA4NUU5
MjhGLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DdWV6V3BhODdWVGE5dnJiQmIx
ZjZkUm5EVmFKZzN2TVZESzdwYUtoamthVC8xLzMyMzgzMDM0M2EzODM1MzM2MzNh
MzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM3MzIzNTM2MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgcoBIU8gDANBgkqhkiG9w0BAQsFAAOCAQEAdsEcffpaYyN7T58zMX5g
RDVedJK0ZcjlDhucaSs9S/mV9kCxdLY3SlnyLNIngM+LX7OFQBM4bD6y0milW7YE
7hpdPt5icVGlF/jnaiUjB6Nm5KLwr1Hxqf7M2XeXiEXzkLN2HwUxTRrJry+f9pXm
Wi0aV6PR7AZOfA5ZIBd2yKT5P8fj9OMw7v8upPDL2HDciR1lEqJIdHAT+l8U/Btm
XnJSydnLBzELwz9CvVgHCyz2SNEc3AQFSbtymSCk1gJqFZ7GNOzShEnHIQDhilnk
yG+6bzKYqbJJjzp6qOelMwDp+1xS86IZNC0k+I2RymHaFYpqhsS7/qTKXsSl7/Ze
RQ==
-----END CERTIFICATE-----
Generated at Fri Jun 28 04:16:23 2024 by rpki-client on console-ams.rpki-client.org