Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33322d3332203d3e20323733353634.roa
File:                     323830343a393061303a3a2f33322d3332203d3e20323733353634.roa (raw, json)
Hash identifier:          oU9gVF2T/HpjLuSLz+r3YrCZpcaHfmqQTqtlqZD9qJo=
Subject key identifier:   D5:56:A5:F0:66:B7:D5:0C:38:81:3F:61:37:D0:0F:72:AA:2E:6B:47
Certificate issuer:       /CN=E83AF5C7350BD692E3E61361477A0CC0AB715136
Certificate serial:       67300EC95B12AF6A4ADE2FCFE47E3D6F1ABE4BC9
Authority key identifier: E8:3A:F5:C7:35:0B:D6:92:E3:E6:13:61:47:7A:0C:C0:AB:71:51:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E83AF5C7350BD692E3E61361477A0CC0AB715136.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33322d3332203d3e20323733353634.roa
Signing time:             Wed 16 Oct 2024 14:57:19 +0000
ROA not before:           Wed 16 Oct 2024 14:52:19 +0000
ROA not after:            Wed 15 Oct 2025 14:57:19 +0000
asID:                     273564
IP address blocks:        2804:90a0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:30:0e:c9:5b:12:af:6a:4a:de:2f:cf:e4:7e:3d:6f:1a:be:4b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83AF5C7350BD692E3E61361477A0CC0AB715136
        Validity
            Not Before: Oct 16 14:52:19 2024 GMT
            Not After : Oct 15 14:57:19 2025 GMT
        Subject: CN=D556A5F066B7D50C38813F6137D00F72AA2E6B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:69:c6:e1:e8:ee:00:e3:2f:68:2b:33:96:
                    5f:dd:52:87:5c:2f:e8:18:15:ea:5b:a6:e7:de:2f:
                    79:64:e3:87:ab:44:1d:4f:c8:55:7d:2b:38:4f:33:
                    17:0b:a0:9a:81:a1:fb:bf:af:ff:99:51:aa:85:30:
                    b4:6f:fd:e2:d8:11:e8:05:da:ed:e5:38:aa:55:5d:
                    7a:d3:8b:4d:d8:7f:0b:65:e2:08:09:b6:a6:5d:81:
                    b3:b3:93:57:96:48:66:aa:4a:76:4f:62:08:c6:c3:
                    70:99:2e:84:52:b5:cc:44:46:b5:66:2f:07:b3:38:
                    bc:f8:dc:0c:b9:ca:af:cd:0f:7a:a2:56:8f:dd:11:
                    83:74:92:61:f4:1e:1b:63:9b:82:19:20:df:18:11:
                    ec:4e:af:e6:be:8a:ef:f9:22:ab:ea:bd:39:ee:66:
                    d1:fc:73:15:20:78:a4:a3:d2:02:ae:b6:37:e1:2c:
                    dc:6f:a7:f8:df:29:ff:e6:30:65:d1:78:3b:7c:41:
                    b0:32:42:10:b7:aa:bb:8d:06:97:11:16:76:f1:39:
                    70:9a:8e:d6:a7:60:03:ac:ba:73:40:a0:c3:12:0a:
                    57:9b:3d:c7:e7:a2:d7:9c:32:c6:43:26:5f:8e:9f:
                    b4:c1:57:f9:82:48:43:07:fb:26:2e:93:0b:60:43:
                    73:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:56:A5:F0:66:B7:D5:0C:38:81:3F:61:37:D0:0F:72:AA:2E:6B:47
            X509v3 Authority Key Identifier:
                keyid:E8:3A:F5:C7:35:0B:D6:92:E3:E6:13:61:47:7A:0C:C0:AB:71:51:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/E83AF5C7350BD692E3E61361477A0CC0AB715136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E83AF5C7350BD692E3E61361477A0CC0AB715136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33322d3332203d3e20323733353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:58:7b:d2:42:f8:66:c9:e8:a2:51:40:6d:c4:32:89:7a:54:
         cf:6a:84:5b:c8:ce:ac:21:7b:01:a9:ea:ff:cc:36:b0:e2:a0:
         fd:ca:4f:3d:6a:23:39:a2:55:c7:25:91:36:46:59:41:4d:20:
         15:38:aa:ad:0d:27:83:75:ff:b6:1f:11:66:f0:ed:3e:f8:bf:
         86:63:5f:51:a5:58:08:8d:bc:04:34:f8:58:d4:dc:93:a2:3c:
         1b:f1:dd:41:47:b9:86:d6:69:e4:8b:52:9a:63:e4:8b:33:c4:
         f5:1a:56:af:75:f1:1d:b9:d4:d5:7f:0f:63:11:0b:87:eb:11:
         e0:2a:3b:be:2e:e4:ad:75:bc:0b:2b:2e:6d:c7:94:fc:34:a8:
         c4:33:81:b5:61:c3:59:ae:a9:ac:53:28:64:9f:67:04:bf:e6:
         e6:c4:c4:95:6e:5b:5d:40:d7:e1:cb:d6:4a:c6:75:ac:6b:ca:
         a2:9b:91:82:09:44:ec:b8:ae:7a:9d:91:6a:d5:4e:88:e8:5a:
         1f:68:05:1b:12:92:be:35:b2:cf:0f:ff:a0:b2:f0:36:90:1c:
         01:68:1f:0d:b4:98:ab:73:f7:9b:ab:27:c2:28:74:3d:fc:7e:
         22:bc:60:d9:45:36:dc:78:f3:9b:fb:21:f7:8a:f6:1c:9c:61:
         d4:c5:fc:76
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZzAOyVsSr2pK3i/P5H49bxq+S8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgzQUY1QzczNTBCRDY5MkUzRTYxMzYxNDc3QTBDQzBB
QjcxNTEzNjAeFw0yNDEwMTYxNDUyMTlaFw0yNTEwMTUxNDU3MTlaMDMxMTAvBgNV
BAMTKEQ1NTZBNUYwNjZCN0Q1MEMzODgxM0Y2MTM3RDAwRjcyQUEyRTZCNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfWnG4ejuAOMvaCszll/dUodc
L+gYFepbpufeL3lk44erRB1PyFV9KzhPMxcLoJqBofu/r/+ZUaqFMLRv/eLYEegF
2u3lOKpVXXrTi03Yfwtl4ggJtqZdgbOzk1eWSGaqSnZPYgjGw3CZLoRStcxERrVm
LwezOLz43Ay5yq/ND3qiVo/dEYN0kmH0Hhtjm4IZIN8YEexOr+a+iu/5IqvqvTnu
ZtH8cxUgeKSj0gKutjfhLNxvp/jfKf/mMGXReDt8QbAyQhC3qruNBpcRFnbxOXCa
jtanYAOsunNAoMMSClebPcfnotecMsZDJl+On7TBV/mCSEMH+yYukwtgQ3MhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1Val8Ga31Qw4gT9hN9APcqoua0cwHwYDVR0j
BBgwFoAU6Dr1xzUL1pLj5hNhR3oMwKtxUTYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFJCVUI0NXIzQnZOY0RBQ0JTYlBhVlk1M2VQOEpGMzc5NXcxWXAzam4x
cGcvMC9FODNBRjVDNzM1MEJENjkyRTNFNjEzNjE0NzdBMENDMEFCNzE1MTM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4M0FGNUM3MzUwQkQ2OTJF
M0U2MTM2MTQ3N0EwQ0MwQUI3MTUxMzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hSQlVCNDVyM0J2TmNEQUNCU2JQYVZZNTNlUDhKRjM3OTV3MVlwM2puMXBnLzAv
MzIzODMwMzQzYTM5MzA2MTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzUzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASQoDANBgkqhkiG9w0BAQsFAAOCAQEAtlh70kL4
ZsnoolFAbcQyiXpUz2qEW8jOrCF7Aanq/8w2sOKg/cpPPWojOaJVxyWRNkZZQU0g
FTiqrQ0ng3X/th8RZvDtPvi/hmNfUaVYCI28BDT4WNTck6I8G/HdQUe5htZp5ItS
mmPkizPE9RpWr3XxHbnU1X8PYxELh+sR4Co7vi7krXW8CysubceU/DSoxDOBtWHD
Wa6prFMoZJ9nBL/m5sTElW5bXUDX4cvWSsZ1rGvKopuRgglE7Liuep2RatVOiOha
H2gFGxKSvjWyzw//oLLwNpAcAWgfDbSYq3P3m6snwih0Pfx+Irxg2UU23Hjzm/sh
94r2HJxh1MX8dg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:17:25 2024 by rpki-client on console-ams.rpki-client.org