Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa
File:                     323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa (raw, json)
Hash identifier:          ipkYAPnNy1OeEUIdis1D6ARltw+j/iaKfZgBNyBFKa8=
Subject key identifier:   00:47:8F:17:E3:AD:7E:EE:37:9E:96:61:C4:F1:D4:C1:B7:96:8B:93
Certificate issuer:       /CN=20EE33C957E1A859D49A5E411C799465085E928F
Certificate serial:       1E8947DF81D6635098DE35F478E8268D02285410
Authority key identifier: 20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa
Signing time:             Tue 23 Apr 2024 22:16:33 +0000
ROA not before:           Tue 23 Apr 2024 22:11:33 +0000
ROA not after:            Tue 22 Apr 2025 22:16:33 +0000
asID:                     272566
IP address blocks:        2804:853c:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:89:47:df:81:d6:63:50:98:de:35:f4:78:e8:26:8d:02:28:54:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EE33C957E1A859D49A5E411C799465085E928F
        Validity
            Not Before: Apr 23 22:11:33 2024 GMT
            Not After : Apr 22 22:16:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:44:02:ff:26:22:56:a3:76:81:6d:9d:2a:
                    ec:0b:93:a2:f3:22:3a:1c:04:23:8f:71:02:9c:72:
                    87:61:cc:54:6c:d4:aa:49:f8:b1:54:48:83:1b:59:
                    2e:72:8a:ad:73:91:8c:5e:fe:15:a4:1d:ce:d0:c2:
                    27:53:fa:9b:e9:85:8a:9b:a3:c7:2c:ea:1b:01:2d:
                    ee:83:51:23:cd:d0:5d:b1:55:b1:3c:cd:27:74:9e:
                    d5:48:87:6b:e3:b1:6c:72:7f:7d:23:e0:ce:0b:4d:
                    40:14:c7:a2:bd:97:d7:c0:fb:96:9d:47:a8:7f:6c:
                    85:a7:ee:ed:74:76:33:72:aa:bc:21:10:a8:72:8c:
                    53:2d:d5:a9:f2:9a:a9:7b:ce:0d:51:45:96:24:13:
                    5c:3f:ce:d5:4f:ce:51:62:86:b0:45:9e:23:76:a4:
                    8c:21:33:ef:1b:2f:c6:cf:37:bf:ec:b0:c2:71:f1:
                    a6:f2:62:d5:5e:e1:50:64:06:5b:00:3a:d1:0d:b8:
                    cc:59:ca:7e:5a:f0:36:47:db:32:76:75:e0:74:29:
                    7f:c2:fb:bc:55:c1:cd:ed:62:e2:34:13:8a:c9:31:
                    04:06:a6:15:29:a5:c4:ef:0e:28:7a:4c:09:da:94:
                    e8:e8:c5:c7:8a:ac:72:59:69:47:24:a2:7d:46:94:
                    7a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:47:8F:17:E3:AD:7E:EE:37:9E:96:61:C4:F1:D4:C1:B7:96:8B:93
            X509v3 Authority Key Identifier:
                keyid:20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/20EE33C957E1A859D49A5E411C799465085E928F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9b:8c:02:a0:9e:28:4b:ef:f9:b5:e8:a6:6d:13:bb:ba:c6:e7:
         75:5b:60:e4:37:66:27:46:53:4c:b4:19:be:50:93:22:82:b8:
         84:42:37:77:3d:b2:a2:aa:1a:e2:34:35:22:8c:b2:19:02:40:
         1e:08:72:e7:d3:6e:c5:59:95:3b:6f:dc:38:0e:4b:a1:76:df:
         41:d5:1f:76:39:7b:d2:6e:6d:ee:40:52:d5:c0:b2:25:5b:55:
         ad:3e:3a:21:39:57:da:be:38:5b:87:de:bc:52:98:4b:fb:81:
         d9:0e:43:21:40:83:e6:7d:14:6b:e6:2f:0b:95:6b:91:24:72:
         be:ad:44:fb:10:40:00:00:ac:36:9d:78:58:73:be:00:a2:89:
         27:26:77:78:3b:2e:b8:fb:57:cc:3d:5e:4b:1e:a7:d0:0a:eb:
         18:1b:ab:3a:f3:f3:3d:d1:b6:07:b5:4c:6c:5e:6d:6c:cd:b4:
         d9:f9:72:c9:34:8e:96:1d:a5:da:6d:1a:ad:82:c0:db:10:ec:
         cd:a0:c5:9b:f3:41:40:20:7e:8f:c7:52:bd:46:52:e8:3b:72:
         7c:25:24:78:16:45:f4:00:21:a6:35:0b:56:ea:79:09:14:d0:
         bc:b0:64:13:d2:d6:e1:6a:7e:a8:7b:08:3c:1d:8d:9a:ec:0e:
         40:9b:32:97
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUHolH34HWY1CY3jX0eOgmjQIoVBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBFRTMzQzk1N0UxQTg1OUQ0OUE1RTQxMUM3OTk0NjUw
ODVFOTI4RjAeFw0yNDA0MjMyMjExMzNaFw0yNTA0MjIyMjE2MzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTlFNjQ0MDJGRjI2MjI1NkEz
NzY4MTZEOUQyQUVDMEI5M0EyRjMyMjNBMUMwNDIzOEY3MTAyOUM3Mjg3NjFDQzU0
NkNENEFBNDlGOEIxNTQ0ODgzMUI1OTJFNzI4QUFENzM5MThDNUVGRTE1QTQxRENF
RDBDMjI3NTNGQTlCRTk4NThBOUJBM0M3MkNFQTFCMDEyREVFODM1MTIzQ0REMDVE
QjE1NUIxM0NDRDI3NzQ5RUQ1NDg4NzZCRTNCMTZDNzI3RjdEMjNFMENFMEI0RDQw
MTRDN0EyQkQ5N0Q3QzBGQjk2OUQ0N0E4N0Y2Qzg1QTdFRUVENzQ3NjMzNzJBQUJD
MjExMEE4NzI4QzUzMkRENUE5RjI5QUE5N0JDRTBENTE0NTk2MjQxMzVDM0ZDRUQ1
NEZDRTUxNjI4NkIwNDU5RTIzNzZBNDhDMjEzM0VGMUIyRkM2Q0YzN0JGRUNCMEMy
NzFGMUE2RjI2MkQ1NUVFMTUwNjQwNjVCMDAzQUQxMERCOENDNTlDQTdFNUFGMDM2
NDdEQjMyNzY3NUUwNzQyOTdGQzJGQkJDNTVDMUNERUQ2MkUyMzQxMzhBQzkzMTA0
MDZBNjE1MjlBNUM0RUYwRTI4N0E0QzA5REE5NEU4RThDNUM3OEFBQzcyNTk2OTQ3
MjRBMjdENDY5NDdBRDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqeZEAv8mIlajdoFtnSrsC5Oi8yI6HAQjj3ECnHKHYcxUbNSqSfix
VEiDG1kucoqtc5GMXv4VpB3O0MInU/qb6YWKm6PHLOobAS3ug1EjzdBdsVWxPM0n
dJ7VSIdr47Fscn99I+DOC01AFMeivZfXwPuWnUeof2yFp+7tdHYzcqq8IRCocoxT
LdWp8pqpe84NUUWWJBNcP87VT85RYoawRZ4jdqSMITPvGy/Gzze/7LDCcfGm8mLV
XuFQZAZbADrRDbjMWcp+WvA2R9sydnXgdCl/wvu8VcHN7WLiNBOKyTEEBqYVKaXE
7w4oekwJ2pTo6MXHiqxyWWlHJKJ9RpR60wIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FABHjxfjrX7uN56WYcTx1MG3louTMB8GA1UdIwQYMBaAFCDuM8lX4ahZ1JpeQRx5
lGUIXpKPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N1ZXpXcGE4N1ZUYTl2
cmJCYjFmNmRSbkRWYUpnM3ZNVkRLN3BhS2hqa2FULzEvMjBFRTMzQzk1N0UxQTg1
OUQ0OUE1RTQxMUM3OTk0NjUwODVFOTI4Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMEVFMzNDOTU3RTFBODU5RDQ5QTVFNDExQzc5OTQ2NTA4NUU5
MjhGLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DdWV6V3BhODdWVGE5dnJiQmIx
ZjZkUm5EVmFKZzN2TVZESzdwYUtoamthVC8xLzMyMzgzMDM0M2EzODM1MzM2MzNh
NjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM3MzIzNTM2MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBIU8wDANBgkqhkiG9w0BAQsFAAOCAQEAm4wCoJ4oS+/5teimbRO7
usbndVtg5DdmJ0ZTTLQZvlCTIoK4hEI3dz2yoqoa4jQ1IoyyGQJAHghy59NuxVmV
O2/cOA5LoXbfQdUfdjl70m5t7kBS1cCyJVtVrT46ITlX2r44W4fevFKYS/uB2Q5D
IUCD5n0Ua+YvC5VrkSRyvq1E+xBAAACsNp14WHO+AKKJJyZ3eDsuuPtXzD1eSx6n
0ArrGBurOvPzPdG2B7VMbF5tbM202flyyTSOlh2l2m0arYLA2xDszaDFm/NBQCB+
j8dSvUZS6DtyfCUkeBZF9AAhpjULVup5CRTQvLBkE9LW4Wp+qHsIPB2NmuwOQJsy
lw==
-----END CERTIFICATE-----
Generated at Fri Jun 28 03:59:08 2024 by rpki-client on console-fra.rpki-client.org