Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/1/323830343a3565383a3a2f33322d3332203d3e20323632353439.roa
File:                     323830343a3565383a3a2f33322d3332203d3e20323632353439.roa (raw, json)
Hash identifier:          pAlHKBYYSzqExG3PMCNV0asxyPxoz6Gr/3wqxbNAYRI=
Subject key identifier:   E4:9F:C6:37:AF:2F:F6:63:83:D6:4F:2C:7C:E3:99:5D:FD:FE:D8:1C
Certificate issuer:       /CN=7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4
Certificate serial:       6FCCA968AF60554F2C72767681CEE4185C004F6A
Authority key identifier: 7F:17:5C:48:BF:0E:2B:F9:2E:CE:B4:5C:8E:8D:5A:B9:31:AA:29:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/1/323830343a3565383a3a2f33322d3332203d3e20323632353439.roa
Signing time:             Thu 04 Apr 2024 00:24:53 +0000
ROA not before:           Thu 04 Apr 2024 00:19:53 +0000
ROA not after:            Thu 03 Apr 2025 00:24:53 +0000
asID:                     262549
IP address blocks:        2804:5e8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cc:a9:68:af:60:55:4f:2c:72:76:76:81:ce:e4:18:5c:00:4f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4
        Validity
            Not Before: Apr  4 00:19:53 2024 GMT
            Not After : Apr  3 00:24:53 2025 GMT
        Subject: CN=E49FC637AF2FF66383D64F2C7CE3995DFDFED81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fa:10:01:32:a2:ed:10:97:1c:ef:f9:0e:4e:
                    03:9f:a9:57:b0:1c:ef:03:e2:cc:be:b1:e1:b2:a1:
                    63:34:b3:18:63:47:a4:39:cd:54:7c:9a:38:7e:a8:
                    bd:a5:bc:22:7e:52:28:f4:5d:a6:f7:f1:b8:46:72:
                    9f:b4:9a:a5:cf:ed:e0:d0:2c:ad:e9:52:38:ba:a8:
                    3c:b9:49:f8:f1:f3:ac:72:c0:86:8f:4a:c4:ee:77:
                    4f:6a:71:15:fb:35:9f:a2:ea:18:74:44:99:6b:0c:
                    d9:7e:15:4b:3d:5d:61:05:10:01:40:a1:90:66:b9:
                    8b:80:19:e7:c3:b1:08:9c:5d:8f:fb:38:05:08:3e:
                    4d:a4:73:51:21:ad:26:6a:23:b9:04:2f:9a:fb:b9:
                    1e:0c:42:5c:ee:23:43:69:e6:eb:6c:f0:d4:94:c0:
                    8d:01:17:1c:76:0f:29:c3:17:43:ef:5b:3b:13:90:
                    08:4c:8a:49:ac:52:20:a4:ae:56:d2:32:0d:99:64:
                    4a:c9:fe:be:7b:2d:59:27:43:64:7a:c0:e5:af:6f:
                    85:b3:c5:4c:18:4f:fe:ad:c4:b5:96:bf:37:25:2d:
                    72:ce:2e:18:cb:ac:1a:4e:88:fa:ef:86:89:0b:b6:
                    26:d4:44:ed:1e:6c:e5:98:a7:5a:9c:68:2d:60:6d:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9F:C6:37:AF:2F:F6:63:83:D6:4F:2C:7C:E3:99:5D:FD:FE:D8:1C
            X509v3 Authority Key Identifier:
                keyid:7F:17:5C:48:BF:0E:2B:F9:2E:CE:B4:5C:8E:8D:5A:B9:31:AA:29:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/1/7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/1/323830343a3565383a3a2f33322d3332203d3e20323632353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:46:31:5e:47:49:b8:a5:41:a3:66:55:dc:e4:7f:b0:e5:2f:
         a0:62:c5:ce:bb:a5:c5:85:58:13:64:18:d3:9e:24:59:d1:b7:
         92:32:94:fb:1e:0b:f6:77:4e:db:9f:2b:55:b7:4d:d1:37:13:
         3b:76:3b:d4:a0:da:68:08:6b:8c:27:a3:fa:f5:b8:80:46:8d:
         78:7d:e1:59:41:44:e9:9c:29:e4:fd:e2:22:68:2b:23:f6:ce:
         5a:55:fa:bb:62:20:00:27:dd:ad:bb:07:d6:6b:bb:d7:fc:1d:
         b0:1f:83:da:a5:fd:d3:3d:87:cc:02:bd:a8:fb:73:fa:73:3f:
         c5:44:0f:00:3e:84:da:91:04:71:1b:89:dc:c0:08:07:88:38:
         e7:08:2c:95:65:42:56:9d:18:09:4d:7c:76:79:a0:3c:ab:57:
         36:6b:ae:42:59:0b:6e:f2:e0:2e:44:fb:36:f2:f4:68:14:3a:
         3c:b6:64:71:68:f0:ab:36:97:65:b3:d4:50:3e:f5:3d:92:6f:
         a0:81:92:13:f2:c4:56:2c:1f:ff:77:0d:b2:38:4e:32:d2:a9:
         83:d6:79:ad:29:45:e8:d9:52:18:51:92:9f:d7:5e:3d:49:91:
         1c:3c:2b:5b:03:90:ae:7f:b0:4e:61:91:57:e7:ec:c6:a2:3a:
         c4:0e:1f:c5
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUb8ypaK9gVU8scnZ2gc7kGFwAT2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YxNzVDNDhCRjBFMkJGOTJFQ0VCNDVDOEU4RDVBQjkz
MUFBMjlGNDAeFw0yNDA0MDQwMDE5NTNaFw0yNTA0MDMwMDI0NTNaMDMxMTAvBgNV
BAMTKEU0OUZDNjM3QUYyRkY2NjM4M0Q2NEYyQzdDRTM5OTVERkRGRUQ4MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+hABMqLtEJcc7/kOTgOfqVew
HO8D4sy+seGyoWM0sxhjR6Q5zVR8mjh+qL2lvCJ+Uij0Xab38bhGcp+0mqXP7eDQ
LK3pUji6qDy5Sfjx86xywIaPSsTud09qcRX7NZ+i6hh0RJlrDNl+FUs9XWEFEAFA
oZBmuYuAGefDsQicXY/7OAUIPk2kc1EhrSZqI7kEL5r7uR4MQlzuI0Np5uts8NSU
wI0BFxx2DynDF0PvWzsTkAhMikmsUiCkrlbSMg2ZZErJ/r57LVknQ2R6wOWvb4Wz
xUwYT/6txLWWvzclLXLOLhjLrBpOiPrvhokLtibURO0ebOWYp1qcaC1gbSdHAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU5J/GN68v9mOD1k8sfOOZXf3+2BwwHwYDVR0j
BBgwFoAUfxdcSL8OK/kuzrRcjo1auTGqKfQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVJmQ2lTYlBFVXJnNHljTUQzTFk4VGF0TDFDZDk3Z1MxWUtKMlJXZURk
UDgvMS83RjE3NUM0OEJGMEUyQkY5MkVDRUI0NUM4RThENUFCOTMxQUEyOUY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGMTc1QzQ4QkYwRTJCRjky
RUNFQjQ1QzhFOEQ1QUI5MzFBQTI5RjQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VSZkNpU2JQRVVyZzR5Y01EM0xZOFRhdEwxQ2Q5N2dTMVlLSjJSV2VEZFA4LzEv
MzIzODMwMzQzYTM1NjUzODNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM1
MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBegwDQYJKoZIhvcNAQELBQADggEBACRGMV5HSbil
QaNmVdzkf7DlL6Bixc67pcWFWBNkGNOeJFnRt5IylPseC/Z3TtufK1W3TdE3Ezt2
O9Sg2mgIa4wno/r1uIBGjXh94VlBROmcKeT94iJoKyP2zlpV+rtiIAAn3a27B9Zr
u9f8HbAfg9ql/dM9h8wCvaj7c/pzP8VEDwA+hNqRBHEbidzACAeIOOcILJVlQlad
GAlNfHZ5oDyrVzZrrkJZC27y4C5E+zby9GgUOjy2ZHFo8Ks2l2Wz1FA+9T2Sb6CB
khPyxFYsH/93DbI4TjLSqYPWea0pRejZUhhRkp/XXj1JkRw8K1sDkK5/sE5hkVfn
7MaiOsQOH8U=
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:21:49 2024 by rpki-client on console-fra.rpki-client.org