Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/323830343a376339303a3a2f33332d3333203d3e20323731353034.roa
File:                     323830343a376339303a3a2f33332d3333203d3e20323731353034.roa (raw, json)
Hash identifier:          UXNFXG7xEgnzfBGRQQdGe7qoOt9aYqnKvUdRiIDS05I=
Subject key identifier:   4D:22:11:49:59:B5:F5:0A:C4:35:38:EF:2C:24:70:4A:9D:E8:4D:8D
Certificate issuer:       /CN=BDBF088AD60886FED4A9616708283717E8AD2443
Certificate serial:       0E886DB8F0C048CDE622DD132DD8C156B2BC1C4C
Authority key identifier: BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/323830343a376339303a3a2f33332d3333203d3e20323731353034.roa
Signing time:             Wed 03 Apr 2024 19:11:21 +0000
ROA not before:           Wed 03 Apr 2024 19:06:21 +0000
ROA not after:            Wed 02 Apr 2025 19:11:21 +0000
asID:                     271504
IP address blocks:        2804:7c90::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:88:6d:b8:f0:c0:48:cd:e6:22:dd:13:2d:d8:c1:56:b2:bc:1c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDBF088AD60886FED4A9616708283717E8AD2443
        Validity
            Not Before: Apr  3 19:06:21 2024 GMT
            Not After : Apr  2 19:11:21 2025 GMT
        Subject: CN=4D22114959B5F50AC43538EF2C24704A9DE84D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:12:81:82:e8:c5:5a:5a:60:6a:97:0e:52:
                    ec:4b:40:7f:4f:37:b3:f8:9e:d2:bb:4f:09:5b:61:
                    ff:e7:b6:ef:29:f0:4f:75:9d:78:9e:79:1b:60:48:
                    11:bd:22:5f:7d:ab:5a:d0:3e:d7:b5:a2:69:43:bf:
                    bb:1a:7b:44:ec:72:6d:ce:d1:93:23:b9:19:21:ec:
                    07:e8:ee:b3:f4:76:33:68:e5:c7:57:13:0d:ea:cd:
                    27:e5:17:69:f4:a4:a5:e7:69:5c:bb:bd:94:26:35:
                    7f:47:63:be:39:49:f1:2d:bd:0a:db:62:dc:67:27:
                    a6:1b:68:63:e0:3b:3a:09:68:74:c9:62:05:b7:db:
                    ca:48:27:02:18:fd:a6:f7:b4:d4:cf:f6:12:6e:fb:
                    43:17:7c:f5:9c:ae:34:dd:7b:ab:27:0f:88:13:1a:
                    82:1b:78:4e:90:17:7d:fc:cd:e9:fe:97:b3:54:41:
                    3a:29:b3:8d:23:f1:1a:19:a0:23:ce:5f:00:d5:fc:
                    7b:e9:fd:8e:fb:2e:4b:4a:23:8d:8b:ae:e9:60:11:
                    9a:6a:06:ca:2c:ab:6b:38:5e:9d:54:c5:33:34:b9:
                    43:26:95:52:b4:93:11:e1:b8:71:f4:14:98:d3:5c:
                    ca:ce:3e:fd:bd:05:66:75:bc:ba:4c:ae:10:09:7b:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:22:11:49:59:B5:F5:0A:C4:35:38:EF:2C:24:70:4A:9D:E8:4D:8D
            X509v3 Authority Key Identifier:
                keyid:BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/BDBF088AD60886FED4A9616708283717E8AD2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/323830343a376339303a3a2f33332d3333203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c90::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:f9:5f:b7:cc:fc:62:bf:16:15:e5:7b:d8:af:d0:eb:37:46:
         94:d6:1d:43:8d:7e:24:9b:9d:f3:73:2a:5b:10:02:ee:9f:c4:
         81:62:04:45:45:43:62:4b:97:21:cf:21:39:50:d1:e0:01:57:
         29:f7:1c:82:7e:67:01:e1:75:d4:8b:5f:ec:92:18:f8:c6:d8:
         3b:ca:0c:c6:b6:85:19:bc:51:74:5e:7a:28:59:6f:56:44:8f:
         aa:2c:97:a0:80:42:06:35:7f:69:7e:e2:c6:8d:39:b9:12:a5:
         f1:4d:52:4e:87:fd:c3:a7:fa:0c:e0:4b:4e:96:09:88:e4:ee:
         33:12:a6:63:cc:8d:53:38:78:61:98:e7:5c:49:65:b2:b9:28:
         fc:49:50:d9:42:9c:88:40:13:3d:a0:db:22:76:40:0c:ce:b7:
         69:0d:cd:68:30:e0:34:e1:96:1f:2f:19:a3:42:cd:73:ea:62:
         81:bf:1b:0a:74:e4:4c:00:f9:f4:76:e0:65:f9:99:7f:a2:7b:
         3a:77:f5:b0:20:ab:0a:01:a8:02:32:3b:6c:09:79:78:5e:91:
         82:f4:f5:a2:bf:8e:1a:ea:29:76:3f:cd:1f:9c:03:ca:4a:a2:
         b5:49:0d:cd:9e:f1:79:9c:7f:6a:64:44:be:00:e8:11:59:61:
         af:55:9e:74
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDohtuPDASM3mIt0TLdjBVrK8HEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRCRjA4OEFENjA4ODZGRUQ0QTk2MTY3MDgyODM3MTdF
OEFEMjQ0MzAeFw0yNDA0MDMxOTA2MjFaFw0yNTA0MDIxOTExMjFaMDMxMTAvBgNV
BAMTKDREMjIxMTQ5NTlCNUY1MEFDNDM1MzhFRjJDMjQ3MDRBOURFODREOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BRKBgujFWlpgapcOUuxLQH9P
N7P4ntK7TwlbYf/ntu8p8E91nXieeRtgSBG9Il99q1rQPte1omlDv7sae0Tscm3O
0ZMjuRkh7Afo7rP0djNo5cdXEw3qzSflF2n0pKXnaVy7vZQmNX9HY745SfEtvQrb
YtxnJ6YbaGPgOzoJaHTJYgW328pIJwIY/ab3tNTP9hJu+0MXfPWcrjTde6snD4gT
GoIbeE6QF338zen+l7NUQTops40j8RoZoCPOXwDV/Hvp/Y77LktKI42LrulgEZpq
Bsosq2s4Xp1UxTM0uUMmlVK0kxHhuHH0FJjTXMrOPv29BWZ1vLpMrhAJe/OTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTSIRSVm19QrENTjvLCRwSp3oTY0wHwYDVR0j
BBgwFoAUvb8IitYIhv7UqWFnCCg3F+itJEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFdQNnd6N3hyZXNzb1NCY2dYS3FtUW9BV0ZmMmZyOEs2aFNrZjFRR3ZM
OXovMS9CREJGMDg4QUQ2MDg4NkZFRDRBOTYxNjcwODI4MzcxN0U4QUQyNDQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQkYwODhBRDYwODg2RkVE
NEE5NjE2NzA4MjgzNzE3RThBRDI0NDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RXUDZ3ejd4cmVzc29TQmNnWEtxbVFvQVdGZjJmcjhLNmhTa2YxUUd2TDl6LzEv
MzIzODMwMzQzYTM3NjMzOTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMx
MzUzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAR8kAAwDQYJKoZIhvcNAQELBQADggEBAGv5X7fM
/GK/FhXle9iv0Os3RpTWHUONfiSbnfNzKlsQAu6fxIFiBEVFQ2JLlyHPITlQ0eAB
Vyn3HIJ+ZwHhddSLX+ySGPjG2DvKDMa2hRm8UXReeihZb1ZEj6osl6CAQgY1f2l+
4saNObkSpfFNUk6H/cOn+gzgS06WCYjk7jMSpmPMjVM4eGGY51xJZbK5KPxJUNlC
nIhAEz2g2yJ2QAzOt2kNzWgw4DThlh8vGaNCzXPqYoG/Gwp05EwA+fR24GX5mX+i
ezp39bAgqwoBqAIyO2wJeXhekYL09aK/jhrqKXY/zR+cA8pKorVJDc2e8Xmcf2pk
RL4A6BFZYa9VnnQ=
-----END CERTIFICATE-----
Generated at Sun Aug 11 04:03:12 2024 by rpki-client on console-fra.rpki-client.org