Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/323830343a353030343a3a2f33322d3336203d3e20323638333634.roa
File:                     323830343a353030343a3a2f33322d3336203d3e20323638333634.roa (raw, json)
Hash identifier:          FGmxjjCziS0EJYDlpoO8QKiduiETs6TDykMd1gcmlT0=
Subject key identifier:   6A:AF:CC:E9:49:93:A6:1B:F7:E3:63:B9:E3:3D:33:E2:32:BB:DE:45
Certificate issuer:       /CN=B445A2940634EDC971D4185E883796F1FFA053D1
Certificate serial:       5347919A2CE5360B1B4C496FF66E58D40BDD20F2
Authority key identifier: B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/323830343a353030343a3a2f33322d3336203d3e20323638333634.roa
Signing time:             Thu 04 Apr 2024 13:20:10 +0000
ROA not before:           Thu 04 Apr 2024 13:15:10 +0000
ROA not after:            Thu 03 Apr 2025 13:20:10 +0000
asID:                     268364
IP address blocks:        2804:5004::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:47:91:9a:2c:e5:36:0b:1b:4c:49:6f:f6:6e:58:d4:0b:dd:20:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B445A2940634EDC971D4185E883796F1FFA053D1
        Validity
            Not Before: Apr  4 13:15:10 2024 GMT
            Not After : Apr  3 13:20:10 2025 GMT
        Subject: CN=6AAFCCE94993A61BF7E363B9E33D33E232BBDE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:57:fb:b1:03:4f:6a:e5:38:24:80:9f:8e:
                    31:8d:13:ca:46:be:15:b9:4b:31:53:af:b0:62:71:
                    dc:ec:6a:fa:de:2f:40:c1:77:88:95:4f:0c:97:d6:
                    de:99:ba:f1:c4:0c:e9:0b:21:94:99:e2:90:48:c8:
                    b1:c6:d0:ef:71:e8:09:91:32:1d:1b:f1:af:45:ce:
                    32:b3:aa:29:05:f3:fe:5a:35:6e:4f:2d:3a:99:2f:
                    7d:74:83:8d:fa:83:89:c8:aa:40:38:23:0f:d4:3c:
                    85:57:ea:57:e7:0c:83:fe:c3:5d:f3:8f:b9:ba:be:
                    11:26:7e:58:f1:b2:56:56:2d:03:7f:d2:46:a8:b9:
                    79:01:cb:f1:69:06:7d:d2:60:ce:d1:26:6e:d0:4f:
                    f2:4f:9e:2a:3e:00:11:73:37:9e:d8:f7:39:e0:34:
                    5d:9b:30:d0:5f:27:3d:5a:2e:07:01:09:69:50:c6:
                    0b:56:f5:ce:9f:8d:bc:f6:ca:03:fc:c8:16:8d:f8:
                    ce:86:15:34:2f:f2:3c:cf:49:7e:89:f4:e1:c4:81:
                    8c:c1:57:0e:61:f2:b1:49:41:c5:ed:7c:2f:5b:90:
                    45:99:c9:dd:52:f5:4d:3a:5d:af:b4:36:a8:4c:a6:
                    b1:88:96:8c:c1:89:21:e3:80:af:2a:a5:88:ff:12:
                    c0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AF:CC:E9:49:93:A6:1B:F7:E3:63:B9:E3:3D:33:E2:32:BB:DE:45
            X509v3 Authority Key Identifier:
                keyid:B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/B445A2940634EDC971D4185E883796F1FFA053D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/323830343a353030343a3a2f33322d3336203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5004::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:99:84:4e:37:14:ab:90:fe:fc:25:48:ca:68:c1:4c:e6:40:
         0d:53:58:de:46:ac:4e:8e:b6:a2:30:0a:08:be:f9:5f:0a:72:
         c7:6f:33:5e:05:15:17:27:b8:b7:4e:ee:9b:bf:69:f8:d6:4a:
         2f:1b:90:4b:95:ac:83:c8:3b:02:d1:c1:8e:90:2d:89:46:fe:
         94:6e:3f:c3:17:91:ee:dd:c0:21:a5:a1:51:6f:ab:4e:e0:41:
         a7:58:a5:4d:7d:c9:1a:33:c8:c9:05:be:9f:17:e0:98:3d:f2:
         01:cd:b1:ec:e8:90:71:4c:e9:cf:24:4d:be:a8:69:49:e6:d3:
         ea:74:6e:88:04:48:d5:91:b5:30:e1:3f:a4:7c:68:54:de:f3:
         e1:fc:6e:04:c7:33:03:9e:b6:fc:c7:33:02:52:57:3f:a3:3f:
         ff:10:db:21:f2:be:41:0e:83:f2:23:50:0e:bd:e5:de:26:3c:
         1c:48:fd:f8:a9:34:b8:8f:3e:d4:0e:8b:a9:64:91:66:63:20:
         69:31:4f:cc:6e:42:fc:b1:54:81:78:65:10:0e:0b:04:a8:bd:
         69:dd:8c:23:75:fd:9a:c0:89:df:4e:27:ba:64:ad:19:7c:14:
         f3:8a:1f:41:14:f5:a9:87:8e:42:4c:45:9d:a6:61:bb:db:f4:
         53:f9:2b:05
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUU0eRmizlNgsbTElv9m5Y1AvdIPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ0NUEyOTQwNjM0RURDOTcxRDQxODVFODgzNzk2RjFG
RkEwNTNEMTAeFw0yNDA0MDQxMzE1MTBaFw0yNTA0MDMxMzIwMTBaMDMxMTAvBgNV
BAMTKDZBQUZDQ0U5NDk5M0E2MUJGN0UzNjNCOUUzM0QzM0UyMzJCQkRFNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoQ1f7sQNPauU4JICfjjGNE8pG
vhW5SzFTr7BicdzsavreL0DBd4iVTwyX1t6ZuvHEDOkLIZSZ4pBIyLHG0O9x6AmR
Mh0b8a9FzjKzqikF8/5aNW5PLTqZL310g436g4nIqkA4Iw/UPIVX6lfnDIP+w13z
j7m6vhEmfljxslZWLQN/0kaouXkBy/FpBn3SYM7RJm7QT/JPnio+ABFzN57Y9zng
NF2bMNBfJz1aLgcBCWlQxgtW9c6fjbz2ygP8yBaN+M6GFTQv8jzPSX6J9OHEgYzB
Vw5h8rFJQcXtfC9bkEWZyd1S9U06Xa+0NqhMprGIlozBiSHjgK8qpYj/EsD3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUaq/M6UmTphv342O54z0z4jK73kUwHwYDVR0j
BBgwFoAUtEWilAY07clx1BheiDeW8f+gU9EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFoRTdpeHB1dEZOa3o3VGlrTmlMZXFuV2NTRW5pb0VpR0pTa3dIWTNa
QkwvMS9CNDQ1QTI5NDA2MzRFREM5NzFENDE4NUU4ODM3OTZGMUZGQTA1M0QxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NDVBMjk0MDYzNEVEQzk3
MUQ0MTg1RTg4Mzc5NkYxRkZBMDUzRDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxaEU3aXhwdXRGTmt6N1Rpa05pTGVxbldjU0VuaW9FaUdKU2t3SFkzWkJMLzEv
MzIzODMwMzQzYTM1MzAzMDM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM4
MzMzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARQBDANBgkqhkiG9w0BAQsFAAOCAQEAmJmETjcU
q5D+/CVIymjBTOZADVNY3kasTo62ojAKCL75Xwpyx28zXgUVFye4t07um79p+NZK
LxuQS5Wsg8g7AtHBjpAtiUb+lG4/wxeR7t3AIaWhUW+rTuBBp1ilTX3JGjPIyQW+
nxfgmD3yAc2x7OiQcUzpzyRNvqhpSebT6nRuiARI1ZG1MOE/pHxoVN7z4fxuBMcz
A562/MczAlJXP6M//xDbIfK+QQ6D8iNQDr3l3iY8HEj9+Kk0uI8+1A6LqWSRZmMg
aTFPzG5C/LFUgXhlEA4LBKi9ad2MI3X9msCJ304numStGXwU84ofQRT1qYeOQkxF
naZhu9v0U/krBQ==
-----END CERTIFICATE-----
Generated at Tue Jun 18 22:10:15 2024 by rpki-client on console-fra.rpki-client.org