Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a343030303a3a2f33342d3334203d3e20323634353030.roa
File:                     323830343a323039383a343030303a3a2f33342d3334203d3e20323634353030.roa (raw, json)
Hash identifier:          FypWHDLr9W0F1KC0JM5vjKysQIg4FWntfoJU9tjzS7c=
Subject key identifier:   E1:83:20:A0:12:F6:E2:2C:4D:08:23:55:BC:38:28:A0:98:E8:CF:92
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       1A88CBDD00CE328E55E070ADE8D7405B543153B2
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a343030303a3a2f33342d3334203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:41:07 +0000
ROA not before:           Tue 30 Jul 2024 17:36:07 +0000
ROA not after:            Tue 29 Jul 2025 17:41:07 +0000
asID:                     264500
IP address blocks:        2804:2098:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:88:cb:dd:00:ce:32:8e:55:e0:70:ad:e8:d7:40:5b:54:31:53:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:36:07 2024 GMT
            Not After : Jul 29 17:41:07 2025 GMT
        Subject: CN=E18320A012F6E22C4D082355BC3828A098E8CF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:2b:27:cc:56:78:c0:4f:61:b6:cf:a9:be:
                    c4:cb:3a:e1:02:19:e3:d4:ba:12:33:51:75:08:54:
                    ef:d4:09:6d:4c:55:16:c4:36:49:78:b1:e4:c8:13:
                    cf:60:f0:41:f0:84:72:e6:8b:75:01:ac:83:20:78:
                    39:5a:2a:36:a6:15:20:18:9b:92:76:de:75:15:6b:
                    9c:53:1f:20:36:9e:c3:18:a9:a8:e3:55:ed:ad:1a:
                    cc:d6:9d:3f:92:60:3e:87:07:73:af:17:34:73:56:
                    33:4c:c7:3c:0a:10:5e:5c:4b:c4:cd:6b:9e:e3:8a:
                    6e:d1:a4:6c:6a:cd:6e:4e:e9:2b:1e:dc:45:c2:c2:
                    4c:7b:2e:32:35:21:3c:0a:02:9a:b8:d2:db:78:e3:
                    a5:87:40:5d:42:1b:d5:c8:7b:f4:70:ce:09:43:f8:
                    42:f1:af:5e:12:13:30:f3:34:56:67:27:70:5c:d6:
                    b1:de:60:e1:03:b0:41:4e:93:5f:58:b8:26:8d:16:
                    cd:eb:44:71:b3:05:75:84:8c:84:5d:39:72:15:70:
                    78:f6:10:33:66:85:92:b6:9c:24:77:63:27:dd:eb:
                    ec:93:3d:48:c5:bc:e0:51:f5:73:ec:1e:0d:51:87:
                    0d:ff:8e:d9:6e:bf:2d:fe:9a:57:d9:70:6a:75:0e:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:83:20:A0:12:F6:E2:2C:4D:08:23:55:BC:38:28:A0:98:E8:CF:92
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a343030303a3a2f33342d3334203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         90:93:53:e1:82:c6:9d:5f:04:4e:31:fc:25:a1:98:2d:45:19:
         1f:08:bc:06:94:f5:d5:35:bc:98:8d:0c:3e:6b:f9:39:9f:5a:
         ef:e1:62:a6:81:31:62:37:3f:4a:e8:f0:18:e8:bd:ed:9b:9d:
         87:6e:c3:60:7a:e8:e0:49:39:61:b8:84:bc:63:2e:2c:85:9c:
         c7:d4:ba:d6:dd:10:95:82:e8:4d:3b:91:25:15:fc:93:83:70:
         d3:d5:cd:c4:7a:e2:ed:85:36:88:77:69:64:49:bd:d2:d5:00:
         8d:a8:ff:fc:8d:c9:d5:c7:0e:f4:bc:54:b4:ac:e6:eb:7b:31:
         11:ef:12:be:c8:b0:e5:12:40:f9:f3:e8:7c:89:55:30:d3:2c:
         77:02:9b:17:cc:5c:40:c7:ae:72:83:1d:f7:49:5e:77:34:56:
         70:f0:d7:39:0d:11:77:4b:bb:92:02:80:49:68:78:02:c3:c2:
         d4:a6:1c:b2:fb:5c:6d:10:41:4b:78:ea:15:16:fb:2c:93:57:
         6f:8b:af:04:f5:5c:94:cb:8c:d1:e0:3d:3d:6e:24:f0:40:2d:
         47:f3:87:55:d8:f5:01:24:2f:81:b9:c1:a4:05:1f:ec:2b:27:
         5a:5e:c7:e5:c1:cc:62:98:e9:1e:4e:a1:85:c5:53:60:ee:b1:
         90:c8:5c:b8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGojL3QDOMo5V4HCt6NdAW1QxU7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJEMzkxMTEzNzU3NUVCOTNDRTgzNjVEOEE0Q0QwNTUx
QTREOUJFNjAeFw0yNDA3MzAxNzM2MDdaFw0yNTA3MjkxNzQxMDdaMDMxMTAvBgNV
BAMTKEUxODMyMEEwMTJGNkUyMkM0RDA4MjM1NUJDMzgyOEEwOThFOENGOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWAisnzFZ4wE9hts+pvsTLOuEC
GePUuhIzUXUIVO/UCW1MVRbENkl4seTIE89g8EHwhHLmi3UBrIMgeDlaKjamFSAY
m5J23nUVa5xTHyA2nsMYqajjVe2tGszWnT+SYD6HB3OvFzRzVjNMxzwKEF5cS8TN
a57jim7RpGxqzW5O6Sse3EXCwkx7LjI1ITwKApq40tt446WHQF1CG9XIe/RwzglD
+ELxr14SEzDzNFZnJ3Bc1rHeYOEDsEFOk19YuCaNFs3rRHGzBXWEjIRdOXIVcHj2
EDNmhZK2nCR3Yyfd6+yTPUjFvOBR9XPsHg1Rhw3/jtluvy3+mlfZcGp1Dpi/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU4YMgoBL24ixNCCNVvDgooJjoz5IwHwYDVR0j
BBgwFoAUW9ORETdXXrk86DZdikzQVRpNm+YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFBqZXM0UHZmUmFCRHE2dTR0cUFYU3E5djNRUmc3YUxXQlg5VWRZZGg3
SkcvMC81QkQzOTExMTM3NTc1RUI5M0NFODM2NUQ4QTRDRDA1NTFBNEQ5QkU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRDM5MTExMzc1NzVFQjkz
Q0U4MzY1RDhBNENEMDU1MUE0RDlCRTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RQamVzNFB2ZlJhQkRxNnU0dHFBWFNxOXYzUVJnN2FMV0JYOVVkWWRoN0pHLzAv
MzIzODMwMzQzYTMyMzAzOTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEIJhAMA0GCSqGSIb3DQEBCwUA
A4IBAQCQk1PhgsadXwROMfwloZgtRRkfCLwGlPXVNbyYjQw+a/k5n1rv4WKmgTFi
Nz9K6PAY6L3tm52HbsNgeujgSTlhuIS8Yy4shZzH1LrW3RCVguhNO5ElFfyTg3DT
1c3EeuLthTaId2lkSb3S1QCNqP/8jcnVxw70vFS0rObrezER7xK+yLDlEkD58+h8
iVUw0yx3ApsXzFxAx65ygx33SV53NFZw8Nc5DRF3S7uSAoBJaHgCw8LUphyy+1xt
EEFLeOoVFvssk1dvi68E9VyUy4zR4D09biTwQC1H84dV2PUBJC+BucGkBR/sKyda
XsflwcximOkeTqGFxVNg7rGQyFy4
-----END CERTIFICATE-----
Generated at Sun Oct 20 23:53:52 2024 by rpki-client on console-fra.rpki-client.org