Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/323830343a333432383a3a2f33322d3332203d3e20323635343339.roa
File:                     323830343a333432383a3a2f33322d3332203d3e20323635343339.roa (raw, json)
Hash identifier:          9eQsS7vhkgJsftdhjkHTi//HObsHlbv40uzK+0hEgGc=
Subject key identifier:   2E:27:BD:38:A7:72:37:83:09:FA:88:67:67:78:63:0E:63:A7:E5:54
Certificate issuer:       /CN=DC624F8841FFED451F1A9D746E838491790743C0
Certificate serial:       3CB948CE1CDD371E00F64D1BB1866038877E46BF
Authority key identifier: DC:62:4F:88:41:FF:ED:45:1F:1A:9D:74:6E:83:84:91:79:07:43:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC624F8841FFED451F1A9D746E838491790743C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/323830343a333432383a3a2f33322d3332203d3e20323635343339.roa
Signing time:             Thu 04 Apr 2024 03:03:03 +0000
ROA not before:           Thu 04 Apr 2024 02:58:03 +0000
ROA not after:            Thu 03 Apr 2025 03:03:03 +0000
asID:                     265439
IP address blocks:        2804:3428::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b9:48:ce:1c:dd:37:1e:00:f6:4d:1b:b1:86:60:38:87:7e:46:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC624F8841FFED451F1A9D746E838491790743C0
        Validity
            Not Before: Apr  4 02:58:03 2024 GMT
            Not After : Apr  3 03:03:03 2025 GMT
        Subject: CN=2E27BD38A772378309FA88676778630E63A7E554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:a6:64:2d:2d:81:47:6a:61:38:7e:7b:1c:
                    26:5e:42:8b:da:2d:9f:ee:1c:a0:35:2f:33:d3:16:
                    dd:6d:2c:99:36:66:c4:91:53:3c:c0:01:8f:19:cf:
                    54:2b:06:fb:32:8a:a9:75:b8:a0:32:08:b3:af:03:
                    71:6d:4c:b0:de:fd:ae:11:4a:88:c1:03:28:82:3f:
                    33:4e:0f:cd:e6:3c:32:26:4f:f2:d6:0a:20:d0:67:
                    aa:92:dc:75:1c:16:a1:b4:d2:c3:16:7f:39:89:68:
                    c4:5a:28:b7:85:c0:2b:da:f3:0e:97:b9:c6:20:4f:
                    1d:4e:c2:a0:d7:d1:57:7a:43:2b:07:ca:85:f1:e9:
                    45:b6:08:b4:0e:d7:c0:f6:f8:0a:ee:bf:0f:59:13:
                    ee:ef:3c:85:74:b7:ad:37:ef:e2:ca:5e:e7:fd:b9:
                    63:d6:54:52:33:52:8f:23:85:62:c2:b1:b3:bf:e8:
                    54:f1:c3:cd:f0:2b:fa:20:fc:92:74:35:1e:3b:81:
                    9f:0d:78:62:31:56:d5:61:94:a3:20:16:e2:45:fa:
                    fc:26:fc:34:87:43:94:1e:95:8d:e7:ae:6c:fc:2c:
                    b3:52:c5:7a:3a:42:13:18:a5:51:71:0d:93:4e:4d:
                    d7:a0:42:8b:2e:7f:40:21:1f:b6:93:d0:6b:c7:6e:
                    92:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:27:BD:38:A7:72:37:83:09:FA:88:67:67:78:63:0E:63:A7:E5:54
            X509v3 Authority Key Identifier:
                keyid:DC:62:4F:88:41:FF:ED:45:1F:1A:9D:74:6E:83:84:91:79:07:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/DC624F8841FFED451F1A9D746E838491790743C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC624F8841FFED451F1A9D746E838491790743C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/323830343a333432383a3a2f33322d3332203d3e20323635343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3428::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:9c:6a:1c:2f:6e:27:f2:c4:2e:75:f9:f3:0f:bd:21:22:76:
         0f:9f:40:2c:7a:3a:0e:d0:03:83:94:62:58:22:ab:e5:bd:6c:
         e4:95:5c:c3:4d:8a:59:93:b9:ac:05:4d:d4:b9:3a:73:a2:ef:
         18:ee:54:ba:cf:ee:2e:25:6d:c0:14:c0:16:dd:76:61:1e:be:
         f0:f8:80:8f:d4:9a:e2:db:d8:a1:9d:0e:eb:97:f8:ba:33:f5:
         da:42:8c:f8:1a:79:c1:b4:69:05:37:87:f1:4b:14:3f:5c:fe:
         26:ce:13:c4:3f:85:c1:2f:04:91:a4:64:95:f4:9c:04:ca:61:
         88:5e:a5:ca:e3:3f:1a:b3:be:9d:ba:bc:93:d8:ae:05:f2:d4:
         27:59:ff:49:c1:97:29:42:a1:5c:26:d9:03:2b:ed:b7:cc:ab:
         d6:3a:a0:4e:dc:ff:41:d1:91:d3:72:ab:ed:00:ca:01:40:29:
         b1:52:ec:01:65:77:58:d2:cb:d6:2f:dc:d9:b2:9e:45:de:2a:
         3d:18:df:81:71:15:07:78:8a:5b:4a:61:99:fc:62:7c:6c:27:
         3f:cf:2d:55:ef:93:7a:06:83:94:7a:78:f4:7f:74:b1:4b:b6:
         39:5c:8a:9c:35:23:a8:1b:5a:46:65:f4:2c:f5:5d:5d:94:69:
         72:39:08:d3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPLlIzhzdNx4A9k0bsYZgOId+Rr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM2MjRGODg0MUZGRUQ0NTFGMUE5RDc0NkU4Mzg0OTE3
OTA3NDNDMDAeFw0yNDA0MDQwMjU4MDNaFw0yNTA0MDMwMzAzMDNaMDMxMTAvBgNV
BAMTKDJFMjdCRDM4QTc3MjM3ODMwOUZBODg2NzY3Nzg2MzBFNjNBN0U1NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKqZkLS2BR2phOH57HCZeQova
LZ/uHKA1LzPTFt1tLJk2ZsSRUzzAAY8Zz1QrBvsyiql1uKAyCLOvA3FtTLDe/a4R
SojBAyiCPzNOD83mPDImT/LWCiDQZ6qS3HUcFqG00sMWfzmJaMRaKLeFwCva8w6X
ucYgTx1OwqDX0Vd6QysHyoXx6UW2CLQO18D2+Aruvw9ZE+7vPIV0t6037+LKXuf9
uWPWVFIzUo8jhWLCsbO/6FTxw83wK/og/JJ0NR47gZ8NeGIxVtVhlKMgFuJF+vwm
/DSHQ5QelY3nrmz8LLNSxXo6QhMYpVFxDZNOTdegQosuf0AhH7aT0GvHbpJnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULie9OKdyN4MJ+ohnZ3hjDmOn5VQwHwYDVR0j
BBgwFoAU3GJPiEH/7UUfGp10boOEkXkHQ8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNiUG5VaXZIM0FwM1Q4VEVvaWRTUW1YdUxVTkZVUFdMUnBGaU02Q1FD
d1UvMS9EQzYyNEY4ODQxRkZFRDQ1MUYxQTlENzQ2RTgzODQ5MTc5MDc0M0MwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDNjI0Rjg4NDFGRkVENDUx
RjFBOUQ3NDZFODM4NDkxNzkwNzQzQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzYlBuVWl2SDNBcDNUOFRFb2lkU1FtWHVMVU5GVVBXTFJwRmlNNkNRQ3dVLzEv
MzIzODMwMzQzYTMzMzQzMjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzQzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ0KDANBgkqhkiG9w0BAQsFAAOCAQEAlJxqHC9u
J/LELnX58w+9ISJ2D59ALHo6DtADg5RiWCKr5b1s5JVcw02KWZO5rAVN1Lk6c6Lv
GO5Uus/uLiVtwBTAFt12YR6+8PiAj9Sa4tvYoZ0O65f4ujP12kKM+Bp5wbRpBTeH
8UsUP1z+Js4TxD+FwS8EkaRklfScBMphiF6lyuM/GrO+nbq8k9iuBfLUJ1n/ScGX
KUKhXCbZAyvtt8yr1jqgTtz/QdGR03Kr7QDKAUApsVLsAWV3WNLL1i/c2bKeRd4q
PRjfgXEVB3iKW0phmfxifGwnP88tVe+TegaDlHp49H90sUu2OVyKnDUjqBtaRmX0
LPVdXZRpcjkI0w==
-----END CERTIFICATE-----
Generated at Sat Aug 17 07:46:30 2024 by rpki-client on console-fra.rpki-client.org