Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/323830343a373263343a633030303a3a2f33342d3334203d3e20323730383734.roa
File:                     323830343a373263343a633030303a3a2f33342d3334203d3e20323730383734.roa (raw, json)
Hash identifier:          Z6ALn2Nk3STubO/TyYg+b3Ng5q2/coGI42/Hcv9smsM=
Subject key identifier:   3A:32:B1:31:C6:14:26:73:C8:9C:6E:27:6F:70:CD:90:C6:D6:F1:E3
Certificate issuer:       /CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
Certificate serial:       7FB8157304484E4C5B716560465B5F3F1ACA8DE6
Authority key identifier: 5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/323830343a373263343a633030303a3a2f33342d3334203d3e20323730383734.roa
Signing time:             Mon 13 May 2024 04:17:31 +0000
ROA not before:           Mon 13 May 2024 04:12:31 +0000
ROA not after:            Mon 12 May 2025 04:17:31 +0000
asID:                     270874
IP address blocks:        2804:72c4:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b8:15:73:04:48:4e:4c:5b:71:65:60:46:5b:5f:3f:1a:ca:8d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
        Validity
            Not Before: May 13 04:12:31 2024 GMT
            Not After : May 12 04:17:31 2025 GMT
        Subject: CN=3A32B131C6142673C89C6E276F70CD90C6D6F1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:37:19:a0:eb:cf:79:5c:6d:08:8d:3d:18:
                    a5:8c:12:5a:26:b9:93:b1:af:c2:66:ad:79:ff:6c:
                    f9:09:63:77:af:25:b8:1f:b8:1a:22:55:34:ed:13:
                    26:dc:d1:46:74:8f:28:b4:4d:27:9d:a1:b7:8b:6a:
                    a5:5c:cd:b5:8c:dd:7a:75:6c:5b:74:9e:53:4f:de:
                    83:ce:82:fc:5f:6c:1c:2c:bf:d9:be:05:e6:2d:4c:
                    1b:2e:30:57:f7:c5:a2:e4:31:e3:61:bc:52:0c:ed:
                    77:ec:b2:d7:30:4f:b4:b3:ac:08:95:29:3e:fd:f1:
                    d8:f5:47:78:b0:0e:77:4d:35:70:73:b0:37:ac:ab:
                    5e:86:95:64:fa:f9:f0:1c:d4:4d:c4:4e:3f:c8:4b:
                    c4:ae:82:83:ca:08:3d:a6:f4:73:ab:46:71:0d:1b:
                    30:eb:ee:b1:49:dd:ae:5d:35:dd:95:df:a1:53:c9:
                    2e:ad:e1:e8:30:c0:3b:29:a3:31:45:fd:12:9c:b9:
                    b9:9e:35:30:0a:3e:c7:68:53:43:aa:c2:62:90:9b:
                    68:ce:85:c0:b2:86:94:57:da:dd:63:8b:97:99:4f:
                    9e:2c:b7:44:10:d7:cb:fa:b4:34:74:31:36:05:06:
                    ac:81:b2:68:8a:94:0c:a2:d3:c9:10:5a:01:27:f3:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:32:B1:31:C6:14:26:73:C8:9C:6E:27:6F:70:CD:90:C6:D6:F1:E3
            X509v3 Authority Key Identifier:
                keyid:5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/5F384CAF597EE6AD61C526C86D22E586C1935FA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/323830343a373263343a633030303a3a2f33342d3334203d3e20323730383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72c4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         73:24:4f:bb:bc:4c:5e:3c:8e:01:a4:4b:aa:11:ae:41:2d:b6:
         f8:e3:c8:f7:67:13:f7:01:22:ff:36:c6:dc:d5:f0:e9:01:51:
         45:35:e5:30:dc:53:52:cf:2d:f9:c2:ee:75:d4:06:b7:c2:eb:
         45:82:44:37:16:51:cc:f5:52:27:16:5b:88:e6:35:28:cc:92:
         4f:79:30:25:c6:cb:f2:52:3a:e5:d6:0c:a3:2e:b2:86:ea:08:
         06:4f:85:86:35:3f:fb:15:ee:e5:77:6c:2f:bd:61:d1:c1:fc:
         f5:a9:d6:b3:1c:5d:6a:ef:09:60:f5:44:17:7a:1c:01:57:84:
         eb:4a:ae:09:8d:31:60:83:dc:c1:85:83:8f:69:e3:47:95:9e:
         12:ca:9c:a1:7c:ce:5c:fa:3c:cf:06:e1:84:6b:1c:f5:8c:f3:
         b8:67:08:cf:1b:d5:02:5f:4a:17:ea:f7:2a:83:18:a0:aa:4b:
         7e:23:fc:2f:05:92:b3:2b:e6:06:75:3f:26:0f:0e:a8:35:d2:
         2e:6f:b8:af:70:7f:a8:4c:5e:c0:e5:3f:47:4e:d4:9f:42:59:
         96:2d:c8:cc:a0:9f:83:85:5b:5b:ff:48:a0:9a:91:8f:81:04:
         cc:75:aa:62:d4:5f:94:ee:8e:3c:50:35:76:4f:ac:82:f8:95:
         d0:d3:61:81
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUf7gVcwRITkxbcWVgRltfPxrKjeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYzODRDQUY1OTdFRTZBRDYxQzUyNkM4NkQyMkU1ODZD
MTkzNUZBMDAeFw0yNDA1MTMwNDEyMzFaFw0yNTA1MTIwNDE3MzFaMDMxMTAvBgNV
BAMTKDNBMzJCMTMxQzYxNDI2NzNDODlDNkUyNzZGNzBDRDkwQzZENkYxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkXTcZoOvPeVxtCI09GKWMElom
uZOxr8JmrXn/bPkJY3evJbgfuBoiVTTtEybc0UZ0jyi0TSedobeLaqVczbWM3Xp1
bFt0nlNP3oPOgvxfbBwsv9m+BeYtTBsuMFf3xaLkMeNhvFIM7XfsstcwT7SzrAiV
KT798dj1R3iwDndNNXBzsDesq16GlWT6+fAc1E3ETj/IS8SugoPKCD2m9HOrRnEN
GzDr7rFJ3a5dNd2V36FTyS6t4egwwDspozFF/RKcubmeNTAKPsdoU0OqwmKQm2jO
hcCyhpRX2t1ji5eZT54st0QQ18v6tDR0MTYFBqyBsmiKlAyi08kQWgEn815dAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUOjKxMcYUJnPInG4nb3DNkMbW8eMwHwYDVR0j
BBgwFoAUXzhMr1l+5q1hxSbIbSLlhsGTX6AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkp2Z3o5S2ZvUVlRQWo1a0tnSk5xYjJ0VXVkNWF5QTRRcUFtU0d4ZXZV
ZHUvMC81RjM4NENBRjU5N0VFNkFENjFDNTI2Qzg2RDIyRTU4NkMxOTM1RkEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGMzg0Q0FGNTk3RUU2QUQ2
MUM1MjZDODZEMjJFNTg2QzE5MzVGQTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZKdmd6OUtmb1FZUUFqNWtLZ0pOcWIydFV1ZDVheUE0UXFBbVNHeGV2VWR1LzAv
MzIzODMwMzQzYTM3MzI2MzM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM4MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEcsTAMA0GCSqGSIb3DQEBCwUA
A4IBAQBzJE+7vExePI4BpEuqEa5BLbb448j3ZxP3ASL/Nsbc1fDpAVFFNeUw3FNS
zy35wu511Aa3wutFgkQ3FlHM9VInFluI5jUozJJPeTAlxsvyUjrl1gyjLrKG6ggG
T4WGNT/7Fe7ld2wvvWHRwfz1qdazHF1q7wlg9UQXehwBV4TrSq4JjTFgg9zBhYOP
aeNHlZ4SypyhfM5c+jzPBuGEaxz1jPO4ZwjPG9UCX0oX6vcqgxigqkt+I/wvBZKz
K+YGdT8mDw6oNdIub7ivcH+oTF7A5T9HTtSfQlmWLcjMoJ+DhVtb/0igmpGPgQTM
dapi1F+U7o48UDV2T6yC+JXQ02GB
-----END CERTIFICATE-----
Generated at Thu Jun 27 13:47:32 2024 by rpki-client on console-fra.rpki-client.org