Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/323830343a343063303a3a2f33322d3332203d3e20323635393739.roa
File:                     323830343a343063303a3a2f33322d3332203d3e20323635393739.roa (raw, json)
Hash identifier:          l30f1+I6SpLjCC7wGZAvSLlKIVIgLRdifEuAgSFbQV8=
Subject key identifier:   99:49:61:53:E4:1E:A3:57:84:37:B8:96:C8:EB:42:07:B4:28:E4:95
Certificate issuer:       /CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
Certificate serial:       405E6687D2F82FF837553CC09AED5148548E7873
Authority key identifier: F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/323830343a343063303a3a2f33322d3332203d3e20323635393739.roa
Signing time:             Mon 06 May 2024 14:46:13 +0000
ROA not before:           Mon 06 May 2024 14:41:13 +0000
ROA not after:            Mon 05 May 2025 14:46:13 +0000
asID:                     265979
IP address blocks:        2804:40c0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5e:66:87:d2:f8:2f:f8:37:55:3c:c0:9a:ed:51:48:54:8e:78:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
        Validity
            Not Before: May  6 14:41:13 2024 GMT
            Not After : May  5 14:46:13 2025 GMT
        Subject: CN=99496153E41EA3578437B896C8EB4207B428E495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:63:d4:67:62:3e:4e:ab:72:42:1f:5c:0f:
                    eb:c0:fe:57:26:44:77:e8:f7:4f:a3:5b:79:87:9c:
                    75:c3:90:56:05:26:26:bc:d9:70:91:ea:52:84:5e:
                    93:42:08:1a:ca:1e:d3:8b:55:b2:29:91:39:35:eb:
                    14:d7:78:26:01:f9:39:60:b7:95:d6:fb:0f:10:06:
                    bb:53:84:5f:7d:bd:7a:e1:ca:bd:76:24:2c:91:ea:
                    c2:2c:b6:1f:7d:0d:90:fb:fa:e7:dd:f6:bc:ef:bd:
                    bc:a3:be:84:8f:14:42:16:b6:9d:23:e3:c0:84:30:
                    b6:5f:21:a3:a6:ec:16:85:ba:df:e9:f1:f8:bc:c7:
                    c4:83:1a:f8:71:6f:1c:35:0a:56:95:05:dd:d5:23:
                    53:a4:17:59:ac:25:68:e3:41:6b:f8:45:af:f7:69:
                    8c:d9:88:6e:9b:4f:0d:d8:e3:67:95:af:77:0a:1f:
                    b6:63:dc:28:f4:2a:51:3a:e7:aa:d6:50:29:b7:59:
                    47:7a:f7:54:a2:70:aa:ba:6f:33:ad:39:2b:be:72:
                    de:11:22:d9:e7:50:29:a7:90:88:c4:b9:f3:ad:e0:
                    88:b6:fa:70:06:33:14:e8:d8:b7:ef:f4:f3:55:1e:
                    0d:7f:4e:28:3b:f2:f4:8f:89:40:1c:d1:09:21:81:
                    51:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:49:61:53:E4:1E:A3:57:84:37:B8:96:C8:EB:42:07:B4:28:E4:95
            X509v3 Authority Key Identifier:
                keyid:F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/323830343a343063303a3a2f33322d3332203d3e20323635393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:4d:44:35:19:1b:5a:99:5b:73:2e:53:7b:6e:ef:1e:9d:20:
         7c:23:61:8a:0a:91:87:e3:14:c9:ec:03:30:3b:4d:6c:75:85:
         94:3b:50:64:4e:27:7e:e3:ad:af:97:65:5d:68:5c:3a:1c:b4:
         a3:6f:de:bc:a0:20:63:f2:57:2e:ce:ae:f7:e1:56:1c:4a:d6:
         c2:e8:66:76:3c:35:db:c7:07:cf:a0:1d:7e:73:34:f5:91:d4:
         4a:82:98:bd:06:cd:fe:df:5a:83:62:5c:63:ae:c4:88:ce:6c:
         a4:fa:1d:4b:aa:6c:17:d2:6c:72:57:95:ad:aa:27:3a:4e:fc:
         da:75:ed:52:c6:de:64:24:bf:04:0d:ac:5e:27:5a:77:cb:12:
         52:6c:75:7e:94:82:95:c3:4b:b0:d0:0b:f9:c9:96:99:08:5e:
         ef:fe:88:a3:c3:8f:7d:ea:29:d6:4f:6b:8d:07:f1:74:13:34:
         0d:36:48:8b:6c:25:cc:37:52:7a:4b:b8:9d:a4:b0:7f:e0:01:
         ac:4c:bb:20:95:9b:7a:da:a0:33:8a:fc:6b:73:25:30:fd:67:
         45:ad:e6:b6:89:fa:06:e8:9b:f3:2c:e6:a2:26:cc:06:31:a1:
         e1:a1:77:d6:4a:c1:34:18:08:57:2e:ac:5a:b7:01:bd:53:9f:
         79:f9:78:04
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQF5mh9L4L/g3VTzAmu1RSFSOeHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg2NjM0MUMyQjJERDU4MTlEODBBQjQ1RTJCMEU2NzU0
RTBDNzY4MjAeFw0yNDA1MDYxNDQxMTNaFw0yNTA1MDUxNDQ2MTNaMDMxMTAvBgNV
BAMTKDk5NDk2MTUzRTQxRUEzNTc4NDM3Qjg5NkM4RUI0MjA3QjQyOEU0OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMS2PUZ2I+TqtyQh9cD+vA/lcm
RHfo90+jW3mHnHXDkFYFJia82XCR6lKEXpNCCBrKHtOLVbIpkTk16xTXeCYB+Tlg
t5XW+w8QBrtThF99vXrhyr12JCyR6sIsth99DZD7+ufd9rzvvbyjvoSPFEIWtp0j
48CEMLZfIaOm7BaFut/p8fi8x8SDGvhxbxw1ClaVBd3VI1OkF1msJWjjQWv4Ra/3
aYzZiG6bTw3Y42eVr3cKH7Zj3Cj0KlE656rWUCm3WUd691SicKq6bzOtOSu+ct4R
ItnnUCmnkIjEufOt4Ii2+nAGMxTo2Lfv9PNVHg1/Tig78vSPiUAc0QkhgVEzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmUlhU+Qeo1eEN7iWyOtCB7Qo5JUwHwYDVR0j
BBgwFoAU+GY0HCst1YGdgKtF4rDmdU4MdoIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3dKN3pXUHhQTlpQZHhLYzZZdWd4aVJzdnRHbUVDV3BDTXFETUUyZ0U2
SG4vMC9GODY2MzQxQzJCMkRENTgxOUQ4MEFCNDVFMkIwRTY3NTRFMEM3NjgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4NjYzNDFDMkIyREQ1ODE5
RDgwQUI0NUUyQjBFNjc1NEUwQzc2ODIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N3Sjd6V1B4UE5aUGR4S2M2WXVneGlSc3Z0R21FQ1dwQ01xRE1FMmdFNkhuLzAv
MzIzODMwMzQzYTM0MzA2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzkzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARAwDANBgkqhkiG9w0BAQsFAAOCAQEAdk1ENRkb
Wplbcy5Te27vHp0gfCNhigqRh+MUyewDMDtNbHWFlDtQZE4nfuOtr5dlXWhcOhy0
o2/evKAgY/JXLs6u9+FWHErWwuhmdjw128cHz6AdfnM09ZHUSoKYvQbN/t9ag2Jc
Y67EiM5spPodS6psF9JscleVraonOk782nXtUsbeZCS/BA2sXidad8sSUmx1fpSC
lcNLsNAL+cmWmQhe7/6Io8OPfeop1k9rjQfxdBM0DTZIi2wlzDdSeku4naSwf+AB
rEy7IJWbetqgM4r8a3MlMP1nRa3mton6Buib8yzmoibMBjGh4aF31krBNBgIVy6s
WrcBvVOfefl4BA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:32:24 2024 by rpki-client on console-fra.rpki-client.org