Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a3a2f34372d3437203d3e20323731333533.roa
File:                     323830343a376133303a3a2f34372d3437203d3e20323731333533.roa (raw, json)
Hash identifier:          IJfUtcaRwnQsGIb4wN4tIt6arp3gf9YqCaBzacCkFUY=
Subject key identifier:   38:0D:02:6B:74:9E:DB:BD:E6:65:DE:02:36:D4:14:36:5F:DB:C6:4C
Certificate issuer:       /CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
Certificate serial:       15D6A043D077A6AD2228E945EC5081306D2F95F2
Authority key identifier: 63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a3a2f34372d3437203d3e20323731333533.roa
Signing time:             Thu 04 Apr 2024 20:55:47 +0000
ROA not before:           Thu 04 Apr 2024 20:50:47 +0000
ROA not after:            Thu 03 Apr 2025 20:55:47 +0000
asID:                     271353
IP address blocks:        2804:7a30::/47 maxlen: 47

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d6:a0:43:d0:77:a6:ad:22:28:e9:45:ec:50:81:30:6d:2f:95:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
        Validity
            Not Before: Apr  4 20:50:47 2024 GMT
            Not After : Apr  3 20:55:47 2025 GMT
        Subject: CN=380D026B749EDBBDE665DE0236D414365FDBC64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:29:e8:f7:88:f8:8e:70:e7:01:02:25:c9:
                    0a:5c:47:d1:7f:62:e9:43:99:22:6e:2f:e1:2a:1d:
                    df:52:8c:70:ac:35:a2:6d:8d:91:4a:6a:2b:69:6f:
                    15:b3:f5:31:45:7a:9d:53:4b:b0:22:90:b7:e9:03:
                    cc:6a:8a:1d:e2:c6:e3:97:68:86:2e:97:a3:34:a4:
                    a6:bb:e6:0d:60:d9:88:5c:81:6f:11:c4:79:4f:1b:
                    5c:e8:fb:0f:e4:a1:5d:c1:58:7a:2c:c8:ee:c8:05:
                    60:10:ed:f3:cf:0c:ba:84:f6:b2:8b:87:cb:89:78:
                    79:39:f7:e0:f8:2c:bb:81:7d:fe:21:b5:f6:81:eb:
                    43:a9:e2:b8:06:5f:3d:a7:49:4a:fb:d6:03:e6:37:
                    70:16:25:55:a9:bc:db:45:9e:24:6f:78:d7:1e:6e:
                    04:0b:4f:bc:d8:a4:ba:2f:50:3e:c0:31:91:e1:81:
                    d3:a9:15:db:05:b5:b5:76:0d:b5:2c:2d:b9:33:d6:
                    62:b4:34:1d:d9:b3:ce:c5:22:9f:30:d4:f4:7d:c0:
                    2c:ad:07:f3:b1:96:b6:61:6e:bf:20:8d:00:4b:3f:
                    98:74:e2:93:4b:65:a2:d7:b9:f3:38:45:07:c7:5c:
                    82:86:fa:cb:47:94:ab:34:03:43:ad:36:21:b6:44:
                    b7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0D:02:6B:74:9E:DB:BD:E6:65:DE:02:36:D4:14:36:5F:DB:C6:4C
            X509v3 Authority Key Identifier:
                keyid:63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a3a2f34372d3437203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30::/47

    Signature Algorithm: sha256WithRSAEncryption
         39:1f:3a:69:91:84:ec:d0:b6:fa:82:aa:a5:38:81:d9:93:b0:
         a6:5e:bc:78:86:9c:0f:36:91:7c:cc:10:50:0f:90:c3:aa:f4:
         10:fe:37:b2:4e:08:8b:c8:52:4c:e3:ec:8a:56:a0:10:09:6e:
         08:95:ac:24:21:91:10:dc:d4:e2:fa:a0:ed:51:ac:50:7a:6c:
         2a:df:51:4c:a3:6e:b0:97:03:38:95:35:e4:a3:3a:d5:a5:01:
         1b:13:aa:1c:29:af:84:61:af:82:fc:f2:c3:15:54:96:0b:df:
         3b:9d:5a:e9:67:9d:1d:6d:2b:cb:2d:77:c6:69:7c:24:5e:83:
         1e:5a:e4:a7:da:34:ab:42:92:74:52:e8:cf:67:7f:81:93:2c:
         8f:9d:1f:dd:46:e8:19:0b:9c:4f:3d:68:9f:ec:f8:93:ac:2a:
         79:85:99:09:df:60:47:c5:16:c6:85:ea:0c:8e:7a:59:b9:b2:
         48:b6:66:05:71:ce:00:6e:29:b9:28:25:d1:d5:9e:75:aa:16:
         2a:9a:69:b0:d8:cf:f5:06:9c:32:62:04:83:1a:ad:8b:de:81:
         5a:45:9f:9c:26:f5:dd:69:fb:be:85:74:ce:fc:7e:a5:7f:71:
         1e:1b:b1:3e:e1:0e:c8:5d:c5:6a:e4:6a:cb:22:c2:85:04:b4:
         1f:f6:e9:1c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUFdagQ9B3pq0iKOlF7FCBMG0vlfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMwQkRDNzQ4QzBDM0I4RjEwNTFFNEREODQ5MjQ2MTQ4
OTZCRkEwNzAeFw0yNDA0MDQyMDUwNDdaFw0yNTA0MDMyMDU1NDdaMDMxMTAvBgNV
BAMTKDM4MEQwMjZCNzQ5RURCQkRFNjY1REUwMjM2RDQxNDM2NUZEQkM2NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTCno94j4jnDnAQIlyQpcR9F/
YulDmSJuL+EqHd9SjHCsNaJtjZFKaitpbxWz9TFFep1TS7AikLfpA8xqih3ixuOX
aIYul6M0pKa75g1g2YhcgW8RxHlPG1zo+w/koV3BWHosyO7IBWAQ7fPPDLqE9rKL
h8uJeHk59+D4LLuBff4htfaB60Op4rgGXz2nSUr71gPmN3AWJVWpvNtFniRveNce
bgQLT7zYpLovUD7AMZHhgdOpFdsFtbV2DbUsLbkz1mK0NB3Zs87FIp8w1PR9wCyt
B/OxlrZhbr8gjQBLP5h04pNLZaLXufM4RQfHXIKG+stHlKs0A0OtNiG2RLe3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUOA0Ca3Se273mZd4CNtQUNl/bxkwwHwYDVR0j
BBgwFoAUYwvcdIwMO48QUeTdhJJGFIlr+gcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNjYnUxRnRjTUNqSEJ1bzVoQ285RFBDYUhYZFgxV2NSMVhXelZwdW5S
VjMvMS82MzBCREM3NDhDMEMzQjhGMTA1MUU0REQ4NDkyNDYxNDg5NkJGQTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMEJEQzc0OEMwQzNCOEYx
MDUxRTRERDg0OTI0NjE0ODk2QkZBMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzY2J1MUZ0Y01DakhCdW81aENvOURQQ2FIWGRYMVdjUjFYV3pWcHVuUlYzLzEv
MzIzODMwMzQzYTM3NjEzMzMwM2EzYTJmMzQzNzJkMzQzNzIwM2QzZTIwMzIzNzMx
MzMzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcBKAR6MAAAMA0GCSqGSIb3DQEBCwUAA4IBAQA5Hzpp
kYTs0Lb6gqqlOIHZk7CmXrx4hpwPNpF8zBBQD5DDqvQQ/jeyTgiLyFJM4+yKVqAQ
CW4IlawkIZEQ3NTi+qDtUaxQemwq31FMo26wlwM4lTXkozrVpQEbE6ocKa+EYa+C
/PLDFVSWC987nVrpZ50dbSvLLXfGaXwkXoMeWuSn2jSrQpJ0UujPZ3+BkyyPnR/d
RugZC5xPPWif7PiTrCp5hZkJ32BHxRbGheoMjnpZubJItmYFcc4Abim5KCXR1Z51
qhYqmmmw2M/1BpwyYgSDGq2L3oFaRZ+cJvXdafu+hXTO/H6lf3EeG7E+4Q7IXcVq
5GrLIsKFBLQf9ukc
-----END CERTIFICATE-----
Generated at Wed Jun 12 13:31:48 2024 by rpki-client on console-fra.rpki-client.org