Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33342d3334203d3e20323634353030.roa
File:                     323830343a323039383a3a2f33342d3334203d3e20323634353030.roa (raw, json)
Hash identifier:          1Eqw7K6MrdLTZ0JVP3N+d5KQouqHanQh/Ow98OytKjQ=
Subject key identifier:   88:49:1F:5B:63:A9:A6:80:B5:63:9C:89:4B:23:0F:64:4F:E3:81:53
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       41C15DA91BFF5F57AFBE89119089BDA96A8C88C4
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33342d3334203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:40:56 +0000
ROA not before:           Tue 30 Jul 2024 17:35:56 +0000
ROA not after:            Tue 29 Jul 2025 17:40:56 +0000
asID:                     264500
IP address blocks:        2804:2098::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c1:5d:a9:1b:ff:5f:57:af:be:89:11:90:89:bd:a9:6a:8c:88:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:35:56 2024 GMT
            Not After : Jul 29 17:40:56 2025 GMT
        Subject: CN=88491F5B63A9A680B5639C894B230F644FE38153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:95:37:a6:40:36:49:e3:7c:03:db:21:4f:
                    6c:b2:cb:a3:2c:d9:99:a9:f0:a8:bf:0d:23:a9:b6:
                    0e:60:6e:15:89:22:7e:47:53:6b:96:e8:fb:e8:ae:
                    6b:59:27:3d:f5:b9:82:df:8b:f5:7f:ad:be:56:5a:
                    57:11:bc:a0:a4:02:67:e6:8b:31:4a:b6:fe:3b:8f:
                    81:34:b8:49:52:85:b3:cc:23:47:0d:c2:1d:84:28:
                    7a:99:6b:74:4b:09:8b:07:8c:b8:e4:f3:43:d8:bb:
                    ea:0c:ae:0c:cf:66:25:3a:27:67:ac:37:23:85:d2:
                    14:d9:db:33:07:79:0f:b7:dd:db:c6:2f:7a:e6:f8:
                    7c:94:94:cb:c5:9c:d1:6f:1b:0f:53:77:ef:96:e6:
                    f2:96:fe:c4:0a:fc:5f:31:51:f4:63:31:b3:c6:69:
                    5e:f5:ab:8b:c4:88:64:cd:97:b7:ee:e4:c7:23:04:
                    68:3f:92:62:1a:cd:89:1a:88:f4:12:17:df:e3:76:
                    8b:79:9d:2b:b5:cf:d5:6e:c6:f9:7c:dc:0b:fd:fd:
                    98:1f:7c:6a:60:07:90:b0:f8:97:a9:37:a2:86:58:
                    33:81:1c:a8:4d:55:b6:3e:78:f8:a0:1a:00:d4:71:
                    09:b0:c3:11:82:ce:96:6e:89:c8:9c:94:38:f2:1a:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:49:1F:5B:63:A9:A6:80:B5:63:9C:89:4B:23:0F:64:4F:E3:81:53
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33342d3334203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:c7:4c:15:a7:fb:7f:15:92:3f:94:5c:75:3b:39:2d:b3:aa:
         8e:85:00:72:44:b1:e6:08:5f:93:cb:d4:67:7d:56:2a:ac:9e:
         4b:79:6d:64:60:af:22:46:39:95:5d:19:b5:1c:38:70:4f:df:
         66:5f:98:70:e1:3a:a2:bf:32:ce:6d:20:44:22:99:bf:a7:16:
         d5:b2:39:78:aa:92:9a:9e:2b:09:21:b4:1e:54:28:a5:a5:ac:
         ec:9f:c5:35:e4:a7:e0:48:08:8f:d6:0f:e4:a0:9e:4e:9e:61:
         88:55:27:c1:4d:2a:2a:f2:68:6e:09:de:da:a6:fa:09:08:5e:
         33:06:9b:66:dd:7f:42:ca:06:39:e1:fb:d4:5b:89:aa:ed:40:
         99:bd:62:e8:04:e5:32:b3:a6:8d:ec:f6:c2:b0:9a:2a:6d:e8:
         d7:b8:05:c1:5c:0c:06:0a:c5:f3:2e:99:d1:6f:86:4a:b7:f7:
         9c:18:05:b5:ba:56:c0:84:88:65:51:73:84:73:f1:e1:f5:af:
         79:1f:fc:68:8b:ea:17:71:ca:cf:78:99:e0:0c:b8:fd:3a:04:
         1c:8b:6b:7e:82:8e:59:6a:ac:0c:16:bc:6c:64:82:b6:9d:ee:
         79:bf:af:a0:5e:ae:c8:51:68:51:67:41:c7:e4:bf:29:c6:ef:
         b9:08:f3:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQcFdqRv/X1evvokRkIm9qWqMiMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJEMzkxMTEzNzU3NUVCOTNDRTgzNjVEOEE0Q0QwNTUx
QTREOUJFNjAeFw0yNDA3MzAxNzM1NTZaFw0yNTA3MjkxNzQwNTZaMDMxMTAvBgNV
BAMTKDg4NDkxRjVCNjNBOUE2ODBCNTYzOUM4OTRCMjMwRjY0NEZFMzgxNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjeJU3pkA2SeN8A9shT2yyy6Ms
2Zmp8Ki/DSOptg5gbhWJIn5HU2uW6PvormtZJz31uYLfi/V/rb5WWlcRvKCkAmfm
izFKtv47j4E0uElShbPMI0cNwh2EKHqZa3RLCYsHjLjk80PYu+oMrgzPZiU6J2es
NyOF0hTZ2zMHeQ+33dvGL3rm+HyUlMvFnNFvGw9Td++W5vKW/sQK/F8xUfRjMbPG
aV71q4vEiGTNl7fu5McjBGg/kmIazYkaiPQSF9/jdot5nSu1z9Vuxvl83Av9/Zgf
fGpgB5Cw+JepN6KGWDOBHKhNVbY+ePigGgDUcQmwwxGCzpZuiciclDjyGsjnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiEkfW2OppoC1Y5yJSyMPZE/jgVMwHwYDVR0j
BBgwFoAUW9ORETdXXrk86DZdikzQVRpNm+YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFBqZXM0UHZmUmFCRHE2dTR0cUFYU3E5djNRUmc3YUxXQlg5VWRZZGg3
SkcvMC81QkQzOTExMTM3NTc1RUI5M0NFODM2NUQ4QTRDRDA1NTFBNEQ5QkU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRDM5MTExMzc1NzVFQjkz
Q0U4MzY1RDhBNENEMDU1MUE0RDlCRTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RQamVzNFB2ZlJhQkRxNnU0dHFBWFNxOXYzUVJnN2FMV0JYOVVkWWRoN0pHLzAv
MzIzODMwMzQzYTMyMzAzOTM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM0
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQgmAAwDQYJKoZIhvcNAQELBQADggEBAAXHTBWn
+38Vkj+UXHU7OS2zqo6FAHJEseYIX5PL1Gd9Viqsnkt5bWRgryJGOZVdGbUcOHBP
32ZfmHDhOqK/Ms5tIEQimb+nFtWyOXiqkpqeKwkhtB5UKKWlrOyfxTXkp+BICI/W
D+Sgnk6eYYhVJ8FNKiryaG4J3tqm+gkIXjMGm2bdf0LKBjnh+9RbiartQJm9YugE
5TKzpo3s9sKwmipt6Ne4BcFcDAYKxfMumdFvhkq395wYBbW6VsCEiGVRc4Rz8eH1
r3kf/GiL6hdxys94meAMuP06BByLa36CjllqrAwWvGxkgrad7nm/r6BershRaFFn
QcfkvynG77kI8wk=
-----END CERTIFICATE-----
Generated at Sun Oct 20 23:53:52 2024 by rpki-client on console-fra.rpki-client.org