Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a393030303a3a2f33362d3336203d3e20323633343536.roa
File:                     323830343a313231383a393030303a3a2f33362d3336203d3e20323633343536.roa (raw, json)
Hash identifier:          dIw1BZHz8X6Bb4BGUFaOdvCDjjaxTNYVVO1NI1YuWD0=
Subject key identifier:   BA:F7:74:DB:3F:54:84:E3:15:D7:60:25:8A:B7:A0:80:28:91:66:86
Certificate issuer:       /CN=01D49D08A0B6576FA14AD618E6273454526E7BC9
Certificate serial:       57277FE4B1AD8644D7BE13912A7C5985B0911629
Authority key identifier: 01:D4:9D:08:A0:B6:57:6F:A1:4A:D6:18:E6:27:34:54:52:6E:7B:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D49D08A0B6576FA14AD618E6273454526E7BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a393030303a3a2f33362d3336203d3e20323633343536.roa
Signing time:             Tue 28 May 2024 12:18:14 +0000
ROA not before:           Tue 28 May 2024 12:13:14 +0000
ROA not after:            Tue 27 May 2025 12:18:14 +0000
asID:                     263456
IP address blocks:        2804:1218:9000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:27:7f:e4:b1:ad:86:44:d7:be:13:91:2a:7c:59:85:b0:91:16:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01D49D08A0B6576FA14AD618E6273454526E7BC9
        Validity
            Not Before: May 28 12:13:14 2024 GMT
            Not After : May 27 12:18:14 2025 GMT
        Subject: CN=BAF774DB3F5484E315D760258AB7A08028916686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:18:7c:d3:5a:b5:bf:8d:d4:e8:4f:b2:05:
                    d8:89:cc:03:5d:4a:16:37:1e:5d:7a:aa:a9:be:b8:
                    d2:9b:cd:bb:28:34:b0:d0:39:49:18:87:b9:03:fd:
                    77:65:ef:21:98:ab:95:4d:53:04:7e:66:4f:2f:7f:
                    c6:67:04:2a:39:81:93:fd:7c:c6:2a:a6:27:6a:dc:
                    3e:55:f7:97:25:38:da:d5:41:eb:72:f6:df:f7:4d:
                    53:97:32:ba:a5:d3:32:2c:fb:5f:3d:03:b5:bd:0a:
                    1d:09:be:b6:a1:12:35:87:b0:74:28:3d:fc:3a:1c:
                    c5:7a:a4:90:98:82:9a:87:51:39:78:82:93:a8:be:
                    81:aa:11:a1:6c:1c:39:70:ab:a9:bd:c2:31:84:62:
                    e3:33:81:15:29:a8:62:7e:db:ab:dc:f0:dd:13:47:
                    10:c5:03:b4:af:b1:aa:b7:0a:13:8d:ea:b4:ee:75:
                    b8:4a:8b:9e:c3:0e:20:33:62:52:6e:d9:0a:3f:8d:
                    9b:e8:a2:24:41:ab:a7:6f:e7:d4:dd:b5:27:b8:d1:
                    6b:3b:7b:60:89:b4:ad:ec:ad:73:c9:88:e4:81:96:
                    10:78:c8:dd:c4:33:b9:5d:3a:04:88:42:87:03:24:
                    93:22:ef:16:d7:c5:c3:38:e6:be:18:09:cc:e2:68:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:74:DB:3F:54:84:E3:15:D7:60:25:8A:B7:A0:80:28:91:66:86
            X509v3 Authority Key Identifier:
                keyid:01:D4:9D:08:A0:B6:57:6F:A1:4A:D6:18:E6:27:34:54:52:6E:7B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/01D49D08A0B6576FA14AD618E6273454526E7BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D49D08A0B6576FA14AD618E6273454526E7BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a393030303a3a2f33362d3336203d3e20323633343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1218:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:58:75:6f:54:af:7d:9d:7c:99:a6:7d:23:89:09:5b:39:
         7f:d1:ac:23:73:ab:3e:c9:4e:b7:f8:da:44:30:7d:51:1c:29:
         cd:2d:4d:c6:1f:b2:fe:20:c6:1f:4f:21:c6:c4:61:04:31:6e:
         9c:8a:f4:2d:c2:aa:e7:c2:d3:0e:23:c4:f7:04:86:3b:cc:01:
         f6:65:1a:d0:e2:e2:00:99:0e:6c:f3:7a:7b:03:4e:87:d1:86:
         b1:db:5f:0a:ba:db:f0:fa:93:55:62:1b:00:a2:16:23:72:fd:
         79:ae:29:e2:32:c7:72:aa:31:bd:b0:13:76:b1:d7:ac:49:f7:
         ec:7b:07:e7:9c:66:ca:6f:12:4d:6c:9b:f4:72:95:c9:22:b1:
         35:38:ae:b9:12:26:40:06:e4:91:e2:56:53:a7:a1:68:d2:d6:
         e4:7d:bd:4c:8d:70:93:52:c8:d3:02:84:41:cf:3d:73:c4:aa:
         9c:c5:94:37:43:2b:7a:4f:74:39:6a:3f:9c:0c:36:ff:ef:d1:
         9e:89:03:0b:73:35:29:7b:24:43:e0:03:d4:a6:5f:98:24:31:
         15:c6:80:de:e3:fd:69:4b:b2:00:83:47:9e:b5:3f:57:f1:f6:
         fe:82:41:84:9c:bc:c6:a5:5e:91:92:83:12:f8:24:51:4c:33:
         31:ed:47:ac
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVyd/5LGthkTXvhORKnxZhbCRFikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFENDlEMDhBMEI2NTc2RkExNEFENjE4RTYyNzM0NTQ1
MjZFN0JDOTAeFw0yNDA1MjgxMjEzMTRaFw0yNTA1MjcxMjE4MTRaMDMxMTAvBgNV
BAMTKEJBRjc3NERCM0Y1NDg0RTMxNUQ3NjAyNThBQjdBMDgwMjg5MTY2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmHxh801q1v43U6E+yBdiJzANd
ShY3Hl16qqm+uNKbzbsoNLDQOUkYh7kD/Xdl7yGYq5VNUwR+Zk8vf8ZnBCo5gZP9
fMYqpidq3D5V95clONrVQety9t/3TVOXMrql0zIs+189A7W9Ch0JvrahEjWHsHQo
Pfw6HMV6pJCYgpqHUTl4gpOovoGqEaFsHDlwq6m9wjGEYuMzgRUpqGJ+26vc8N0T
RxDFA7Svsaq3ChON6rTudbhKi57DDiAzYlJu2Qo/jZvooiRBq6dv59TdtSe40Ws7
e2CJtK3srXPJiOSBlhB4yN3EM7ldOgSIQocDJJMi7xbXxcM45r4YCcziaPddAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUuvd02z9UhOMV12AlireggCiRZoYwHwYDVR0j
BBgwFoAUAdSdCKC2V2+hStYY5ic0VFJue8kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUt5NERVdUxpMnVoVGtLc1lSSGVXZXBqbWRQTjFXVmpHcFZhZEFva2dy
bTMvMC8wMUQ0OUQwOEEwQjY1NzZGQTE0QUQ2MThFNjI3MzQ1NDUyNkU3QkM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxRDQ5RDA4QTBCNjU3NkZB
MTRBRDYxOEU2MjczNDU0NTI2RTdCQzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VLeTREVXVMaTJ1aFRrS3NZUkhlV2Vwam1kUE4xV1ZqR3BWYWRBb2tncm0zLzAv
MzIzODMwMzQzYTMxMzIzMTM4M2EzOTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzM0MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEhiQMA0GCSqGSIb3DQEBCwUA
A4IBAQBOOVh1b1SvfZ18maZ9I4kJWzl/0awjc6s+yU63+NpEMH1RHCnNLU3GH7L+
IMYfTyHGxGEEMW6civQtwqrnwtMOI8T3BIY7zAH2ZRrQ4uIAmQ5s83p7A06H0Yax
218Kutvw+pNVYhsAohYjcv15riniMsdyqjG9sBN2sdesSffsewfnnGbKbxJNbJv0
cpXJIrE1OK65EiZABuSR4lZTp6Fo0tbkfb1MjXCTUsjTAoRBzz1zxKqcxZQ3Qyt6
T3Q5aj+cDDb/79GeiQMLczUpeyRD4APUpl+YJDEVxoDe4/1pS7IAg0eetT9X8fb+
gkGEnLzGpV6RkoMS+CRRTDMx7Ues
-----END CERTIFICATE-----
Generated at Tue Jul 16 18:30:11 2024 by rpki-client on console-fra.rpki-client.org