Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a343030303a3a2f33342d3334203d3e20323639353038.roa
File:                     323830343a363562303a343030303a3a2f33342d3334203d3e20323639353038.roa (raw, json)
Hash identifier:          U2RDLiAa1ly6OXtFDsaYIoMAGzBpsCMWxUv7pOq/ZqQ=
Subject key identifier:   AC:10:53:6D:F4:58:9A:91:80:83:C5:08:CF:49:B7:89:F1:FE:A1:81
Certificate issuer:       /CN=B4A507A3449B35297C2E0851F09576570269B539
Certificate serial:       66D906EAD028A840CAA78019CA797E2E1E4ABFFE
Authority key identifier: B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a343030303a3a2f33342d3334203d3e20323639353038.roa
Signing time:             Mon 27 May 2024 21:13:12 +0000
ROA not before:           Mon 27 May 2024 21:08:12 +0000
ROA not after:            Mon 26 May 2025 21:13:12 +0000
asID:                     269508
IP address blocks:        2804:65b0:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d9:06:ea:d0:28:a8:40:ca:a7:80:19:ca:79:7e:2e:1e:4a:bf:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A507A3449B35297C2E0851F09576570269B539
        Validity
            Not Before: May 27 21:08:12 2024 GMT
            Not After : May 26 21:13:12 2025 GMT
        Subject: CN=AC10536DF4589A918083C508CF49B789F1FEA181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:b3:b9:b0:80:c7:80:b5:bd:af:2d:57:76:
                    89:5b:99:5c:a7:59:66:58:41:fb:1e:84:e4:3d:e3:
                    e7:5c:9d:0c:4c:69:27:a2:ec:e9:8d:e6:d1:5d:e7:
                    26:5d:8f:96:26:99:2b:90:72:eb:6c:94:11:bd:40:
                    b0:78:2b:48:ae:7f:f8:7d:7b:89:c3:4e:96:f0:a0:
                    7f:90:79:35:71:7e:7f:29:86:e4:f6:4b:f1:1a:e2:
                    3f:e9:41:9c:42:43:f3:73:ba:b4:c7:0f:94:60:1b:
                    c7:0c:fa:7b:c5:37:04:16:6d:d5:9b:5b:04:ab:3a:
                    7c:30:04:bc:8a:0a:ad:6b:af:d5:21:3d:25:3a:6b:
                    46:2b:73:e4:7c:b0:8f:71:ad:5a:f8:33:99:67:69:
                    dd:ea:07:0b:6e:6e:50:50:2e:3f:05:a8:d6:e8:fa:
                    4d:a2:89:2e:52:0c:90:c2:96:c8:c6:fd:d9:51:a9:
                    41:aa:06:50:91:95:00:d0:26:e4:07:d6:ab:ec:f5:
                    81:d2:9c:80:55:9f:64:2d:e0:ee:ec:be:df:82:4a:
                    52:d9:93:8f:f1:d3:b3:62:70:33:27:6c:de:c0:8c:
                    4c:7b:1d:19:d9:27:f3:88:2c:0f:00:ff:8f:04:ef:
                    55:90:cd:f1:4d:9a:93:a3:3d:4e:07:bc:f9:36:4f:
                    67:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:10:53:6D:F4:58:9A:91:80:83:C5:08:CF:49:B7:89:F1:FE:A1:81
            X509v3 Authority Key Identifier:
                keyid:B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a343030303a3a2f33342d3334203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65b0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         48:58:f9:95:cb:ef:f5:86:87:79:b3:79:45:ac:ec:23:e1:35:
         03:37:36:cb:ac:2d:1d:e0:25:40:01:0d:2e:a6:a1:a9:da:75:
         18:74:6f:f8:5a:bb:e3:1c:61:ce:44:e5:45:52:cc:e2:6b:70:
         1d:18:20:09:97:07:e9:93:7c:a7:39:80:1a:07:f3:76:a0:3b:
         eb:99:b8:55:59:a4:a4:77:2a:e5:ab:cd:d2:0c:de:93:ed:eb:
         dd:2e:66:f7:72:78:94:a4:96:cc:4f:8b:16:aa:75:48:17:6a:
         fb:86:d9:61:86:06:95:56:21:d7:ac:da:b0:6e:d1:b8:65:d2:
         e8:91:8d:3c:53:a7:8f:2e:be:16:0c:45:14:e5:8f:60:39:10:
         8b:12:77:50:78:c2:fc:0b:e4:74:8b:9c:8f:a0:ee:cb:52:5b:
         95:f2:1d:a2:d9:69:ed:d1:d4:6a:7f:3e:98:cb:71:ac:cf:b3:
         cd:82:2c:2e:ab:98:04:95:03:72:18:90:b6:00:9a:ed:2e:c7:
         64:48:d6:33:df:37:c7:34:40:ab:d3:53:28:2e:35:6c:9d:55:
         4e:bc:bd:83:dd:e9:18:6e:6c:44:b7:bd:a7:68:76:4f:1c:4e:
         01:ab:bb:e4:df:74:31:76:02:a8:d2:b1:c9:d3:5e:39:cc:fb:
         cd:54:24:4c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZtkG6tAoqEDKp4AZynl+Lh5Kv/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRBNTA3QTM0NDlCMzUyOTdDMkUwODUxRjA5NTc2NTcw
MjY5QjUzOTAeFw0yNDA1MjcyMTA4MTJaFw0yNTA1MjYyMTEzMTJaMDMxMTAvBgNV
BAMTKEFDMTA1MzZERjQ1ODlBOTE4MDgzQzUwOENGNDlCNzg5RjFGRUExODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtobO5sIDHgLW9ry1XdolbmVyn
WWZYQfsehOQ94+dcnQxMaSei7OmN5tFd5yZdj5YmmSuQcutslBG9QLB4K0iuf/h9
e4nDTpbwoH+QeTVxfn8phuT2S/Ea4j/pQZxCQ/NzurTHD5RgG8cM+nvFNwQWbdWb
WwSrOnwwBLyKCq1rr9UhPSU6a0Yrc+R8sI9xrVr4M5lnad3qBwtublBQLj8FqNbo
+k2iiS5SDJDClsjG/dlRqUGqBlCRlQDQJuQH1qvs9YHSnIBVn2Qt4O7svt+CSlLZ
k4/x07NicDMnbN7AjEx7HRnZJ/OILA8A/48E71WQzfFNmpOjPU4HvPk2T2fdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUrBBTbfRYmpGAg8UIz0m3ifH+oYEwHwYDVR0j
BBgwFoAUtKUHo0SbNSl8LghR8JV2VwJptTkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkU1elFVTWp1dzVXTFg3NUZLVGZOcTloOGtxZlpyNXo3RVFtZTdtYTg5
RGMvMC9CNEE1MDdBMzQ0OUIzNTI5N0MyRTA4NTFGMDk1NzY1NzAyNjlCNTM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0QTUwN0EzNDQ5QjM1Mjk3
QzJFMDg1MUYwOTU3NjU3MDI2OUI1MzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZFNXpRVU1qdXc1V0xYNzVGS1RmTnE5aDhrcWZacjV6N0VRbWU3bWE4OURjLzAv
MzIzODMwMzQzYTM2MzU2MjMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZbBAMA0GCSqGSIb3DQEBCwUA
A4IBAQBIWPmVy+/1hod5s3lFrOwj4TUDNzbLrC0d4CVAAQ0upqGp2nUYdG/4Wrvj
HGHOROVFUszia3AdGCAJlwfpk3ynOYAaB/N2oDvrmbhVWaSkdyrlq83SDN6T7evd
Lmb3cniUpJbMT4sWqnVIF2r7htlhhgaVViHXrNqwbtG4ZdLokY08U6ePLr4WDEUU
5Y9gORCLEndQeML8C+R0i5yPoO7LUluV8h2i2Wnt0dRqfz6Yy3Gsz7PNgiwuq5gE
lQNyGJC2AJrtLsdkSNYz3zfHNECr01MoLjVsnVVOvL2D3ekYbmxEt72naHZPHE4B
q7vk33QxdgKo0rHJ0145zPvNVCRM
-----END CERTIFICATE-----
Generated at Sat Jul 6 05:50:04 2024 by rpki-client on console-ams.rpki-client.org