Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa
File:                     323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa (raw, json)
Hash identifier:          xQYPihfvnUAtLnG2jE+AFk4u+0PpEA97lCTr0nYEM9g=
Subject key identifier:   9B:C4:1D:E4:5C:52:FC:7E:90:0E:68:B8:76:F7:A7:29:0B:38:35:31
Certificate issuer:       /CN=0EEE5B3317779C65050CA66FEB8B4806D25713DF
Certificate serial:       20C5CE6C9BC81874B264DE8EA5293C2693EF6A1C
Authority key identifier: 0E:EE:5B:33:17:77:9C:65:05:0C:A6:6F:EB:8B:48:06:D2:57:13:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa
Signing time:             Thu 04 Apr 2024 11:35:01 +0000
ROA not before:           Thu 04 Apr 2024 11:30:01 +0000
ROA not after:            Thu 03 Apr 2025 11:35:01 +0000
asID:                     263887
IP address blocks:        2804:2740:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c5:ce:6c:9b:c8:18:74:b2:64:de:8e:a5:29:3c:26:93:ef:6a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EEE5B3317779C65050CA66FEB8B4806D25713DF
        Validity
            Not Before: Apr  4 11:30:01 2024 GMT
            Not After : Apr  3 11:35:01 2025 GMT
        Subject: CN=9BC41DE45C52FC7E900E68B876F7A7290B383531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:ab:bb:62:83:50:3b:d9:6a:57:76:8b:53:
                    17:74:3e:63:db:86:1c:77:ca:70:73:3a:eb:71:a4:
                    4f:68:ab:dd:4c:f3:13:49:8a:b5:01:35:c5:19:1b:
                    d4:95:81:ac:b8:a8:0a:55:60:94:9a:17:f6:80:0d:
                    b1:56:2b:6b:bc:ac:58:0a:7e:b7:09:a3:48:cf:e4:
                    eb:15:a2:dc:26:43:dd:21:92:b2:04:f0:ef:76:27:
                    6b:a3:ce:55:14:40:ed:41:37:70:0c:20:a1:64:80:
                    67:5f:3d:be:1f:6e:67:a0:85:08:0e:07:3e:c5:9d:
                    e8:30:e4:44:f7:4b:75:05:32:a6:0e:e8:99:04:6e:
                    43:b3:f0:2c:81:2d:51:60:91:4d:f5:5e:36:0b:8b:
                    41:e9:2e:62:89:e7:11:d0:63:a7:cd:c9:aa:f4:5a:
                    60:75:e2:67:a3:9e:bb:2d:a1:8f:3f:99:8f:46:25:
                    36:89:ca:63:d7:bf:91:ca:10:c8:a8:2a:10:6a:8c:
                    dd:6f:9a:45:3d:cf:80:c2:9f:08:29:cf:db:3a:6d:
                    ac:ca:a9:61:37:96:ae:e0:8f:ad:c4:ca:18:11:ef:
                    bd:1e:0c:3a:57:ae:0a:a0:bb:6e:3f:4c:15:74:f6:
                    19:9e:76:6f:4d:6e:16:3f:ff:14:e9:2d:98:8a:c3:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C4:1D:E4:5C:52:FC:7E:90:0E:68:B8:76:F7:A7:29:0B:38:35:31
            X509v3 Authority Key Identifier:
                keyid:0E:EE:5B:33:17:77:9C:65:05:0C:A6:6F:EB:8B:48:06:D2:57:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2740:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:f0:9c:41:6d:fe:f9:56:c0:51:b2:be:bc:d1:f2:ba:c0:c7:
         ae:a0:b5:e4:d1:d0:d4:b9:7b:7f:f6:06:ac:4b:de:a8:d9:44:
         b1:50:71:66:49:c8:12:d0:db:37:94:07:12:76:35:19:ed:2d:
         b5:46:b2:7b:24:23:1e:ed:aa:9e:c3:4d:95:a7:f7:07:cc:86:
         e1:b9:7a:d4:57:e3:5e:0d:0a:40:f8:fb:f9:78:31:23:48:52:
         8a:9a:40:80:36:c0:2d:8f:10:34:c2:cc:33:2a:a5:6f:cc:5d:
         39:6b:61:9b:91:7f:2d:6b:2b:64:4a:3f:36:a1:a7:35:25:a9:
         f5:3a:14:64:78:cd:5d:d4:56:c6:ab:c4:71:54:bb:0e:5d:db:
         77:c5:cf:9b:da:a8:79:b0:36:ff:d6:29:c4:0c:a0:f9:73:5f:
         13:16:b1:75:c7:cf:6a:ac:30:ee:1d:9c:f8:cc:6e:fa:f3:db:
         e8:55:4d:57:b4:2f:b0:9a:f4:e6:9d:5a:61:72:e9:9b:22:d9:
         2d:20:d7:0a:1f:54:42:e5:cb:be:24:a8:d0:c7:dc:29:7b:bb:
         91:ee:4d:20:ab:c8:c3:16:2a:c3:a7:54:11:e2:a1:62:aa:f8:
         23:d5:d4:da:77:a0:a1:6d:da:77:d7:93:a9:28:7f:79:c0:3b:
         47:a1:23:00
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUIMXObJvIGHSyZN6OpSk8JpPvahwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEVFRTVCMzMxNzc3OUM2NTA1MENBNjZGRUI4QjQ4MDZE
MjU3MTNERjAeFw0yNDA0MDQxMTMwMDFaFw0yNTA0MDMxMTM1MDFaMDMxMTAvBgNV
BAMTKDlCQzQxREU0NUM1MkZDN0U5MDBFNjhCODc2RjdBNzI5MEIzODM1MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hau7YoNQO9lqV3aLUxd0PmPb
hhx3ynBzOutxpE9oq91M8xNJirUBNcUZG9SVgay4qApVYJSaF/aADbFWK2u8rFgK
frcJo0jP5OsVotwmQ90hkrIE8O92J2ujzlUUQO1BN3AMIKFkgGdfPb4fbmeghQgO
Bz7Fnegw5ET3S3UFMqYO6JkEbkOz8CyBLVFgkU31XjYLi0HpLmKJ5xHQY6fNyar0
WmB14mejnrstoY8/mY9GJTaJymPXv5HKEMioKhBqjN1vmkU9z4DCnwgpz9s6bazK
qWE3lq7gj63EyhgR770eDDpXrgqgu24/TBV09hmedm9NbhY//xTpLZiKw/+9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUm8Qd5FxS/H6QDmi4dvenKQs4NTEwHwYDVR0j
BBgwFoAUDu5bMxd3nGUFDKZv64tIBtJXE98wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlFLU3Rta1NFTUZzZGdiTFlIeHNWSkVhRmtmb1pFVkxSeTQ5eDNHb3dE
SDIvMS8wRUVFNUIzMzE3Nzc5QzY1MDUwQ0E2NkZFQjhCNDgwNkQyNTcxM0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFRUU1QjMzMTc3NzlDNjUw
NTBDQTY2RkVCOEI0ODA2RDI1NzEzREYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZRS1N0bWtTRU1Gc2RnYkxZSHhzVkpFYUZrZm9aRVZMUnk0OXgzR293REgyLzEv
MzIzODMwMzQzYTMyMzczNDMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzMzM4MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEJ0CAMA0GCSqGSIb3DQEBCwUA
A4IBAQBn8JxBbf75VsBRsr680fK6wMeuoLXk0dDUuXt/9gasS96o2USxUHFmScgS
0Ns3lAcSdjUZ7S21RrJ7JCMe7aqew02Vp/cHzIbhuXrUV+NeDQpA+Pv5eDEjSFKK
mkCANsAtjxA0wswzKqVvzF05a2GbkX8taytkSj82oac1Jan1OhRkeM1d1FbGq8Rx
VLsOXdt3xc+b2qh5sDb/1inEDKD5c18TFrF1x89qrDDuHZz4zG7689voVU1XtC+w
mvTmnVphcumbItktINcKH1RC5cu+JKjQx9wpe7uR7k0gq8jDFirDp1QR4qFiqvgj
1dTad6Chbdp315OpKH95wDtHoSMA
-----END CERTIFICATE-----
Generated at Thu Aug 8 20:08:09 2024 by rpki-client on console-ams.rpki-client.org