Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3230303a3a2f34302d3430203d3e20323638353936.roa
File:                     323830343a353361303a3230303a3a2f34302d3430203d3e20323638353936.roa (raw, json)
Hash identifier:          vIkZGDs9BMNqVxbvBlwsGvtq+ru+9T18t74zhrOKyoM=
Subject key identifier:   64:65:F8:05:5A:9F:C3:DE:A7:A3:FE:24:A4:C2:E6:E2:FF:6C:17:1F
Certificate issuer:       /CN=4D75809E071D4433F365FE41E48F4C2BED13B507
Certificate serial:       5DAA053B1EFA5F3B2A966EDE72E17C58698A9437
Authority key identifier: 4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3230303a3a2f34302d3430203d3e20323638353936.roa
Signing time:             Wed 14 Aug 2024 15:24:51 +0000
ROA not before:           Wed 14 Aug 2024 15:19:51 +0000
ROA not after:            Wed 13 Aug 2025 15:24:51 +0000
asID:                     268596
IP address blocks:        2804:53a0:200::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:aa:05:3b:1e:fa:5f:3b:2a:96:6e:de:72:e1:7c:58:69:8a:94:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D75809E071D4433F365FE41E48F4C2BED13B507
        Validity
            Not Before: Aug 14 15:19:51 2024 GMT
            Not After : Aug 13 15:24:51 2025 GMT
        Subject: CN=6465F8055A9FC3DEA7A3FE24A4C2E6E2FF6C171F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:a7:e0:63:11:88:e4:41:9d:eb:5d:40:08:
                    4e:85:94:c9:43:61:77:63:77:2d:fb:5e:23:24:5d:
                    62:71:3d:35:1e:29:60:38:57:b4:bb:0f:73:46:ef:
                    72:41:c4:92:29:9a:4d:3e:66:a5:63:b3:da:e9:f8:
                    88:2d:8d:85:8b:8b:a7:9a:20:25:5e:40:d6:2d:15:
                    85:d3:a3:a9:fa:9f:3a:0d:20:32:55:43:35:c1:ca:
                    06:8a:75:d9:db:e1:ff:3f:57:8b:13:ac:82:54:68:
                    05:7f:df:9e:45:38:79:7f:0a:98:f0:9c:ae:83:33:
                    6b:90:cb:45:1e:3d:a6:8c:ed:d1:c7:05:50:d1:91:
                    5c:eb:09:b6:e5:09:3f:46:a1:c9:aa:d4:e1:90:60:
                    1f:27:fc:2d:46:54:74:50:94:fa:1b:aa:5d:0e:61:
                    7f:12:7d:66:da:70:3d:e3:b3:8b:78:ce:f3:8e:59:
                    b2:f9:fa:ba:7a:37:7e:8c:9e:d6:f5:ec:9f:e2:dc:
                    45:d7:4c:76:df:d0:b2:99:f5:4c:8c:46:2a:ad:f9:
                    d6:36:95:9b:30:06:81:df:7e:f8:60:c9:fd:47:ba:
                    46:f3:78:a5:ed:80:28:c3:0c:35:be:0f:5c:38:4b:
                    14:2b:bf:e7:90:64:3b:91:56:32:10:01:62:40:56:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:65:F8:05:5A:9F:C3:DE:A7:A3:FE:24:A4:C2:E6:E2:FF:6C:17:1F
            X509v3 Authority Key Identifier:
                keyid:4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/4D75809E071D4433F365FE41E48F4C2BED13B507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a3230303a3a2f34302d3430203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53a0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:be:d9:8c:f4:ca:13:e2:b9:d1:92:2c:76:f5:1e:05:62:a1:
         53:00:f8:1a:93:f7:5c:84:3d:47:1a:47:fe:46:50:57:b3:ea:
         01:18:d0:5a:1b:2a:3d:c6:3e:4e:f3:50:7e:ea:c1:11:00:b1:
         53:5b:24:f9:e0:d0:b1:e6:30:67:e5:03:71:5c:75:7a:43:73:
         d6:c5:dc:dd:5f:72:3e:c8:68:25:8f:8f:97:d9:93:70:2e:c5:
         c8:9c:34:6a:65:74:9f:08:66:e1:a3:4a:6d:6d:61:ec:74:a2:
         1a:e4:1d:27:02:37:94:8e:b2:d2:6e:af:67:d5:f9:77:c4:44:
         79:7c:ba:68:7d:36:83:dd:3f:1f:1f:53:32:31:61:17:7b:79:
         30:d3:b7:7f:30:3d:74:da:52:6d:d1:f0:e7:ed:ca:8b:90:ec:
         bd:60:70:10:e5:70:44:75:90:05:33:fb:87:d4:a0:b1:f3:2b:
         1a:5e:07:28:92:a7:27:1c:a6:03:8f:c3:61:74:5b:53:3a:76:
         e5:09:12:bb:a8:0b:39:f2:f8:0a:06:d7:bf:94:e9:74:f3:22:
         f8:76:c9:42:77:ed:2d:29:eb:43:47:dc:f6:dc:c9:c0:dc:8c:
         01:a9:0f:cc:48:5a:67:0f:06:b4:1f:5e:57:fd:44:80:3b:45:
         17:18:a0:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXaoFOx76Xzsqlm7ecuF8WGmKlDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ3NTgwOUUwNzFENDQzM0YzNjVGRTQxRTQ4RjRDMkJF
RDEzQjUwNzAeFw0yNDA4MTQxNTE5NTFaFw0yNTA4MTMxNTI0NTFaMDMxMTAvBgNV
BAMTKDY0NjVGODA1NUE5RkMzREVBN0EzRkUyNEE0QzJFNkUyRkY2QzE3MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiXafgYxGI5EGd611ACE6FlMlD
YXdjdy37XiMkXWJxPTUeKWA4V7S7D3NG73JBxJIpmk0+ZqVjs9rp+IgtjYWLi6ea
ICVeQNYtFYXTo6n6nzoNIDJVQzXBygaKddnb4f8/V4sTrIJUaAV/355FOHl/Cpjw
nK6DM2uQy0UePaaM7dHHBVDRkVzrCbblCT9Gocmq1OGQYB8n/C1GVHRQlPobql0O
YX8SfWbacD3js4t4zvOOWbL5+rp6N36Mntb17J/i3EXXTHbf0LKZ9UyMRiqt+dY2
lZswBoHffvhgyf1HukbzeKXtgCjDDDW+D1w4SxQrv+eQZDuRVjIQAWJAVgKbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZGX4BVqfw96no/4kpMLm4v9sFx8wHwYDVR0j
BBgwFoAUTXWAngcdRDPzZf5B5I9MK+0TtQcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtzQ1N0b3phdFlURXNNNGEzQkNGRGZnWnJZQ3o3MjFyZUt2U29CSmdl
eWsvMC80RDc1ODA5RTA3MUQ0NDMzRjM2NUZFNDFFNDhGNEMyQkVEMTNCNTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRENzU4MDlFMDcxRDQ0MzNG
MzY1RkU0MUU0OEY0QzJCRUQxM0I1MDcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rrc0NTdG96YXRZVEVzTTRhM0JDRkRmZ1pyWUN6NzIxcmVLdlNvQkpnZXlrLzAv
MzIzODMwMzQzYTM1MzM2MTMwM2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzgzNTM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBFOgAjANBgkqhkiG9w0BAQsFAAOC
AQEAmL7ZjPTKE+K50ZIsdvUeBWKhUwD4GpP3XIQ9RxpH/kZQV7PqARjQWhsqPcY+
TvNQfurBEQCxU1sk+eDQseYwZ+UDcVx1ekNz1sXc3V9yPshoJY+Pl9mTcC7FyJw0
amV0nwhm4aNKbW1h7HSiGuQdJwI3lI6y0m6vZ9X5d8REeXy6aH02g90/Hx9TMjFh
F3t5MNO3fzA9dNpSbdHw5+3Ki5DsvWBwEOVwRHWQBTP7h9SgsfMrGl4HKJKnJxym
A4/DYXRbUzp25QkSu6gLOfL4CgbXv5TpdPMi+HbJQnftLSnrQ0fc9tzJwNyMAakP
zEhaZw8GtB9eV/1EgDtFFxigGQ==
-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:33 2024 by rpki-client on console-fra.rpki-client.org