Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKQuEGpQY9nKCbbZeZR6gBWEeYrGRBwNpfQNuf2yfLsy/0/323830343a366339383a3a2f33322d3332203d3e20323730343739.roa
File:                     323830343a366339383a3a2f33322d3332203d3e20323730343739.roa (raw, json)
Hash identifier:          OgeciJ3nUsQN00PIcQBlHeYUS/ds/3DAbfyKgWsHodM=
Subject key identifier:   7B:B7:5F:48:96:94:63:DE:66:8F:AF:BC:06:D1:9D:8F:E3:2F:41:14
Certificate issuer:       /CN=16C0002F61605FD7A2C7CC20EA8476862FCF7A19
Certificate serial:       1199864F139BA397234079E5377F2F4C7955D538
Authority key identifier: 16:C0:00:2F:61:60:5F:D7:A2:C7:CC:20:EA:84:76:86:2F:CF:7A:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16C0002F61605FD7A2C7CC20EA8476862FCF7A19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKQuEGpQY9nKCbbZeZR6gBWEeYrGRBwNpfQNuf2yfLsy/0/323830343a366339383a3a2f33322d3332203d3e20323730343739.roa
Signing time:             Wed 03 Jul 2024 19:42:10 +0000
ROA not before:           Wed 03 Jul 2024 19:37:10 +0000
ROA not after:            Wed 02 Jul 2025 19:42:10 +0000
asID:                     270479
IP address blocks:        2804:6c98::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:99:86:4f:13:9b:a3:97:23:40:79:e5:37:7f:2f:4c:79:55:d5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16C0002F61605FD7A2C7CC20EA8476862FCF7A19
        Validity
            Not Before: Jul  3 19:37:10 2024 GMT
            Not After : Jul  2 19:42:10 2025 GMT
        Subject: CN=7BB75F48969463DE668FAFBC06D19D8FE32F4114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:00:a3:60:ba:83:4f:fd:c0:fd:77:0c:d0:
                    3e:10:4c:2e:5a:e1:2d:3b:82:97:17:eb:b4:e4:e3:
                    78:38:f3:d0:86:f9:33:51:46:47:05:26:16:79:8b:
                    16:e9:67:ce:35:e1:c3:f2:70:2a:cf:41:05:76:8c:
                    b1:10:87:0e:5d:41:4f:51:21:0e:b9:3f:97:a5:70:
                    f9:45:50:98:46:48:2b:55:b4:73:14:98:ea:dd:bd:
                    53:f2:bc:f9:07:33:74:9a:ed:62:08:ab:a0:e3:e9:
                    ba:1d:ee:87:2f:53:91:b7:ea:75:81:48:7e:10:7b:
                    b2:d8:8e:34:a7:a7:74:6c:9b:68:7e:e7:62:87:0b:
                    15:99:cc:ff:f8:12:ac:d0:9d:80:db:e5:2c:97:40:
                    79:47:3f:45:d1:6c:0c:84:cc:d9:0b:50:e3:43:d0:
                    1f:7f:9c:6e:e4:b5:b3:ed:7d:bb:74:ba:d0:39:1d:
                    ae:77:b0:b4:97:b0:bb:32:c0:1f:c2:17:f5:b8:f2:
                    d1:3d:2e:a7:b0:21:26:1a:19:9a:39:0f:a2:ca:c5:
                    ee:6d:10:84:22:5b:9a:f9:89:29:29:ae:78:c3:a0:
                    f4:36:5b:3e:69:33:3c:48:1a:38:34:41:3c:74:80:
                    ac:c2:10:51:46:dc:4b:76:5d:12:59:9e:dc:5f:2e:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B7:5F:48:96:94:63:DE:66:8F:AF:BC:06:D1:9D:8F:E3:2F:41:14
            X509v3 Authority Key Identifier:
                keyid:16:C0:00:2F:61:60:5F:D7:A2:C7:CC:20:EA:84:76:86:2F:CF:7A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKQuEGpQY9nKCbbZeZR6gBWEeYrGRBwNpfQNuf2yfLsy/0/16C0002F61605FD7A2C7CC20EA8476862FCF7A19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16C0002F61605FD7A2C7CC20EA8476862FCF7A19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKQuEGpQY9nKCbbZeZR6gBWEeYrGRBwNpfQNuf2yfLsy/0/323830343a366339383a3a2f33322d3332203d3e20323730343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c98::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:c3:09:c5:3e:fc:8f:f7:03:1b:8d:f4:c2:17:6b:8b:15:81:
         aa:b0:92:c8:55:93:f5:26:e1:5b:65:c4:af:e1:d5:41:e1:d3:
         bb:da:3d:f2:6f:ae:0d:3f:ad:da:b9:a8:56:f2:a1:61:51:a3:
         61:56:9c:27:c0:3f:b1:6e:36:9c:bf:04:e1:af:28:bf:f8:09:
         e0:db:a7:f5:7a:dc:71:10:ac:ac:3e:dd:cd:7c:81:59:e2:15:
         0b:0d:4b:be:5e:13:eb:03:76:a6:e7:8f:e8:85:be:b4:8c:cb:
         a5:d2:18:dd:a8:e4:ea:18:f6:05:8b:a9:44:97:96:d6:c4:85:
         ba:49:11:77:77:21:14:9a:62:db:68:3e:70:6b:70:1e:48:f3:
         d0:72:30:74:af:22:ea:f4:bd:01:39:c2:36:cd:01:73:d6:a3:
         b8:d6:be:28:e7:a6:4b:d8:34:ef:70:fd:e2:71:99:0b:94:50:
         00:5a:6b:18:23:d7:33:14:fd:d2:f5:68:ac:ca:58:83:b4:d8:
         1a:e4:aa:9a:5e:ea:2d:5e:26:44:a4:45:3b:e8:4e:91:a8:1d:
         c3:c7:7d:69:c5:28:ae:c9:71:e7:bb:8b:e1:25:7e:84:a8:74:
         6c:40:78:0b:64:96:00:4a:3f:53:b0:1f:dc:a5:0d:04:06:6c:
         32:08:55:70
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEZmGTxObo5cjQHnlN38vTHlV1TgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZDMDAwMkY2MTYwNUZEN0EyQzdDQzIwRUE4NDc2ODYy
RkNGN0ExOTAeFw0yNDA3MDMxOTM3MTBaFw0yNTA3MDIxOTQyMTBaMDMxMTAvBgNV
BAMTKDdCQjc1RjQ4OTY5NDYzREU2NjhGQUZCQzA2RDE5RDhGRTMyRjQxMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrgCjYLqDT/3A/XcM0D4QTC5a
4S07gpcX67Tk43g489CG+TNRRkcFJhZ5ixbpZ8414cPycCrPQQV2jLEQhw5dQU9R
IQ65P5elcPlFUJhGSCtVtHMUmOrdvVPyvPkHM3Sa7WIIq6Dj6bod7ocvU5G36nWB
SH4Qe7LYjjSnp3Rsm2h+52KHCxWZzP/4EqzQnYDb5SyXQHlHP0XRbAyEzNkLUOND
0B9/nG7ktbPtfbt0utA5Ha53sLSXsLsywB/CF/W48tE9LqewISYaGZo5D6LKxe5t
EIQiW5r5iSkprnjDoPQ2Wz5pMzxIGjg0QTx0gKzCEFFG3Et2XRJZntxfLjD7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUe7dfSJaUY95mj6+8BtGdj+MvQRQwHwYDVR0j
BBgwFoAUFsAAL2FgX9eix8wg6oR2hi/PehkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0tRdUVHcFFZOW5LQ2JiWmVaUjZnQldFZVlyR1JCd05wZlFOdWYyeWZM
c3kvMC8xNkMwMDAyRjYxNjA1RkQ3QTJDN0NDMjBFQTg0NzY4NjJGQ0Y3QTE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2QzAwMDJGNjE2MDVGRDdB
MkM3Q0MyMEVBODQ3Njg2MkZDRjdBMTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLUXVFR3BRWTluS0NiYlplWlI2Z0JXRWVZckdSQndOcGZRTnVmMnlmTHN5LzAv
MzIzODMwMzQzYTM2NjMzOTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzQzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARsmDANBgkqhkiG9w0BAQsFAAOCAQEAWcMJxT78
j/cDG430whdrixWBqrCSyFWT9SbhW2XEr+HVQeHTu9o98m+uDT+t2rmoVvKhYVGj
YVacJ8A/sW42nL8E4a8ov/gJ4Nun9XrccRCsrD7dzXyBWeIVCw1Lvl4T6wN2pueP
6IW+tIzLpdIY3ajk6hj2BYupRJeW1sSFukkRd3chFJpi22g+cGtwHkjz0HIwdK8i
6vS9ATnCNs0Bc9ajuNa+KOemS9g073D94nGZC5RQAFprGCPXMxT90vVorMpYg7TY
GuSqml7qLV4mRKRFO+hOkagdw8d9acUorslx57uL4SV+hKh0bEB4C2SWAEo/U7Af
3KUNBAZsMghVcA==
-----END CERTIFICATE-----
Generated at Tue Oct 22 08:44:35 2024 by rpki-client on console-ams.rpki-client.org