Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a633030303a3a2f33342d3334203d3e20323639323239.roa
File:                     323830343a363135383a633030303a3a2f33342d3334203d3e20323639323239.roa (raw, json)
Hash identifier:          Scu6NdKLM4Nc2dJyQuSvk0A80dO5+3CU+GmJY/zeo0Y=
Subject key identifier:   60:7D:EC:7A:C9:F4:2E:6B:DB:78:F1:1E:3A:A4:BA:13:22:09:3B:EA
Certificate issuer:       /CN=99195B0BAD2907DB1435914B0988FE263B3B10AE
Certificate serial:       7168CF1605510BB218B130238B937B6EAD4503E4
Authority key identifier: 99:19:5B:0B:AD:29:07:DB:14:35:91:4B:09:88:FE:26:3B:3B:10:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99195B0BAD2907DB1435914B0988FE263B3B10AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a633030303a3a2f33342d3334203d3e20323639323239.roa
Signing time:             Sat 09 Nov 2024 00:30:04 +0000
ROA not before:           Sat 09 Nov 2024 00:25:04 +0000
ROA not after:            Sat 08 Nov 2025 00:30:04 +0000
asID:                     269229
IP address blocks:        2804:6158:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:68:cf:16:05:51:0b:b2:18:b1:30:23:8b:93:7b:6e:ad:45:03:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99195B0BAD2907DB1435914B0988FE263B3B10AE
        Validity
            Not Before: Nov  9 00:25:04 2024 GMT
            Not After : Nov  8 00:30:04 2025 GMT
        Subject: CN=607DEC7AC9F42E6BDB78F11E3AA4BA1322093BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d7:34:ab:7e:a6:54:67:c5:07:89:43:75:13:
                    f7:6e:15:ec:fd:af:67:da:e6:31:8c:8c:15:8a:1d:
                    ce:8f:9c:45:3d:de:22:62:27:8c:df:a8:33:c5:0f:
                    fd:a2:7b:36:ef:35:49:3c:0e:5f:52:9e:b0:8d:77:
                    62:e9:0b:91:15:70:44:ed:e6:53:50:56:82:1b:5f:
                    0e:c9:9b:79:65:85:0c:f2:79:0c:3f:f6:56:b2:4b:
                    9f:4d:da:c8:80:82:66:5d:84:27:85:d2:54:90:aa:
                    d8:eb:2b:52:0e:68:01:5f:c3:a4:01:5d:30:c9:38:
                    51:27:81:40:27:91:7b:67:96:91:b8:26:51:52:9f:
                    32:6e:ee:9d:4a:a6:74:45:89:3d:f1:77:ba:9c:11:
                    6a:11:ba:19:18:16:2a:65:8d:bd:b4:9c:d5:23:0e:
                    be:a3:31:a2:09:51:75:74:9d:b6:14:34:e3:69:c3:
                    01:ef:07:70:b8:fe:28:88:8a:b4:c6:37:4b:3e:78:
                    96:fe:fd:98:92:a0:18:c2:11:57:6f:e3:4b:35:82:
                    4a:27:9f:30:1b:2d:45:30:ea:b3:14:82:3a:e5:50:
                    ab:db:ee:10:2d:80:2b:f8:57:02:05:d1:a8:06:f7:
                    3d:e0:2d:75:75:d9:09:24:25:42:a4:b7:aa:d9:d5:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7D:EC:7A:C9:F4:2E:6B:DB:78:F1:1E:3A:A4:BA:13:22:09:3B:EA
            X509v3 Authority Key Identifier:
                keyid:99:19:5B:0B:AD:29:07:DB:14:35:91:4B:09:88:FE:26:3B:3B:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/99195B0BAD2907DB1435914B0988FE263B3B10AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99195B0BAD2907DB1435914B0988FE263B3B10AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a633030303a3a2f33342d3334203d3e20323639323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6158:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:b1:13:c2:4a:a5:ca:d5:8a:5f:bc:44:bb:84:3f:4a:f4:b8:
         e4:74:70:76:20:fa:bc:f1:51:20:bc:b0:6c:83:cb:4a:b8:c2:
         06:68:8d:e5:99:0e:9c:8e:dc:65:dd:9a:a9:50:6f:b7:e7:bd:
         a8:86:75:5d:bd:e3:8c:c3:bb:02:e7:6b:da:0d:00:d0:cb:47:
         c9:78:13:57:ec:29:c5:d3:b6:22:ad:a5:25:c1:7e:ae:ca:9f:
         7c:b1:d9:5b:c2:1e:de:2a:2b:af:25:9b:f3:cb:0c:2c:fe:ec:
         04:cc:20:f6:2a:1b:20:d4:da:31:dc:cf:02:0b:e2:76:71:4f:
         c1:ca:63:a5:4b:22:fa:77:3b:04:4d:63:00:ec:99:1d:3f:4b:
         d6:64:a4:fd:65:e7:57:c6:85:10:f6:24:34:af:82:6c:a1:48:
         16:8d:32:1a:6a:cf:64:dd:40:a4:23:0d:f5:a7:1b:fd:8b:a1:
         99:af:59:32:32:9b:98:d7:e3:7c:c9:d3:e9:f9:b9:7d:3e:7b:
         01:e4:a4:51:ba:61:ce:f0:34:95:eb:e4:ac:42:e5:cc:9f:f3:
         af:4b:1b:77:71:78:58:5b:e4:50:82:ee:9a:27:96:bd:d7:cd:
         e5:8a:b0:c8:5f:be:37:2e:f4:c3:0b:9a:17:45:3c:2e:0d:c9:
         e2:d3:99:3f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcWjPFgVRC7IYsTAji5N7bq1FA+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkxOTVCMEJBRDI5MDdEQjE0MzU5MTRCMDk4OEZFMjYz
QjNCMTBBRTAeFw0yNDExMDkwMDI1MDRaFw0yNTExMDgwMDMwMDRaMDMxMTAvBgNV
BAMTKDYwN0RFQzdBQzlGNDJFNkJEQjc4RjExRTNBQTRCQTEzMjIwOTNCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT1zSrfqZUZ8UHiUN1E/duFez9
r2fa5jGMjBWKHc6PnEU93iJiJ4zfqDPFD/2iezbvNUk8Dl9SnrCNd2LpC5EVcETt
5lNQVoIbXw7Jm3llhQzyeQw/9layS59N2siAgmZdhCeF0lSQqtjrK1IOaAFfw6QB
XTDJOFEngUAnkXtnlpG4JlFSnzJu7p1KpnRFiT3xd7qcEWoRuhkYFipljb20nNUj
Dr6jMaIJUXV0nbYUNONpwwHvB3C4/iiIirTGN0s+eJb+/ZiSoBjCEVdv40s1gkon
nzAbLUUw6rMUgjrlUKvb7hAtgCv4VwIF0agG9z3gLXV12QkkJUKkt6rZ1flPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUYH3sesn0LmvbePEeOqS6EyIJO+owHwYDVR0j
BBgwFoAUmRlbC60pB9sUNZFLCYj+Jjs7EK4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJCcVptYVlmWTFMUUoxZHVpVmI4NmNBdWtMZnAxMmJuYTZwOXpCemFQ
eVYvMC85OTE5NUIwQkFEMjkwN0RCMTQzNTkxNEIwOTg4RkUyNjNCM0IxMEFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MTk1QjBCQUQyOTA3REIx
NDM1OTE0QjA5ODhGRTI2M0IzQjEwQUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCQnFabWFZZlkxTFFKMWR1aVZiODZjQXVrTGZwMTJibmE2cDl6QnphUHlWLzAv
MzIzODMwMzQzYTM2MzEzNTM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTMyMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEYVjAMA0GCSqGSIb3DQEBCwUA
A4IBAQAlsRPCSqXK1YpfvES7hD9K9LjkdHB2IPq88VEgvLBsg8tKuMIGaI3lmQ6c
jtxl3ZqpUG+3572ohnVdveOMw7sC52vaDQDQy0fJeBNX7CnF07YiraUlwX6uyp98
sdlbwh7eKiuvJZvzywws/uwEzCD2Khsg1Nox3M8CC+J2cU/BymOlSyL6dzsETWMA
7JkdP0vWZKT9ZedXxoUQ9iQ0r4JsoUgWjTIaas9k3UCkIw31pxv9i6GZr1kyMpuY
1+N8ydPp+bl9PnsB5KRRumHO8DSV6+SsQuXMn/OvSxt3cXhYW+RQgu6aJ5a9183l
irDIX743LvTDC5oXRTwuDcni05k/
-----END CERTIFICATE-----
Generated at Sun Nov 24 14:06:42 2024 by rpki-client on console-ams.rpki-client.org