Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/1/323830343a386261383a3a2f33322d3333203d3e20323733373437.roa
File:                     323830343a386261383a3a2f33322d3333203d3e20323733373437.roa (raw, json)
Hash identifier:          c9MuzN2/GpX6gSn8LwgHEEdiCqDc9/nfQcprTBXqE6A=
Subject key identifier:   5F:89:99:AC:8A:50:52:1C:FD:A6:E8:1A:7B:34:2A:3F:24:62:A7:78
Certificate issuer:       /CN=17FF2C3279CFDB882B49AE0322B0693D27A10A4A
Certificate serial:       56908C806A607D97808B39FD441F110BF8B5258B
Authority key identifier: 17:FF:2C:32:79:CF:DB:88:2B:49:AE:03:22:B0:69:3D:27:A1:0A:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17FF2C3279CFDB882B49AE0322B0693D27A10A4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/1/323830343a386261383a3a2f33322d3333203d3e20323733373437.roa
Signing time:             Thu 04 Apr 2024 02:00:30 +0000
ROA not before:           Thu 04 Apr 2024 01:55:30 +0000
ROA not after:            Thu 03 Apr 2025 02:00:30 +0000
asID:                     273747
IP address blocks:        2804:8ba8::/32 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:90:8c:80:6a:60:7d:97:80:8b:39:fd:44:1f:11:0b:f8:b5:25:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17FF2C3279CFDB882B49AE0322B0693D27A10A4A
        Validity
            Not Before: Apr  4 01:55:30 2024 GMT
            Not After : Apr  3 02:00:30 2025 GMT
        Subject: CN=5F8999AC8A50521CFDA6E81A7B342A3F2462A778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:3a:54:a7:46:60:bd:00:6d:ba:1f:2e:8d:
                    42:1e:32:e3:60:85:0e:d0:9f:c3:5f:1b:0f:6c:07:
                    03:8c:8c:1c:e5:6a:e2:90:19:1e:ec:c9:1f:25:2f:
                    ec:24:06:a0:c3:8d:4a:7b:6d:ac:3b:d0:9e:1b:87:
                    8e:a6:6e:15:f7:a3:97:18:77:03:57:cb:1a:7d:b0:
                    57:63:0e:17:f0:18:df:80:34:30:0d:a4:97:53:6b:
                    6f:5e:e4:09:cb:68:ef:6e:79:7e:50:2c:18:1f:37:
                    80:bf:49:38:28:64:35:01:62:3d:b3:57:f2:92:dc:
                    1e:d7:f2:f7:d5:3e:7d:fe:84:39:80:54:26:b1:9c:
                    19:86:c6:37:63:e7:37:c1:d7:05:d1:1d:e2:2c:5d:
                    fc:66:a9:a2:ff:83:c7:0e:83:5f:7e:f3:91:c0:96:
                    2c:c0:e3:75:db:61:06:30:d9:e1:22:b4:3d:bc:b1:
                    b9:03:11:08:86:5d:bc:1c:e9:00:6d:ea:2f:50:d5:
                    6a:a6:11:5f:2f:00:38:c0:ba:2b:0b:68:cd:07:4a:
                    04:c7:c5:ae:37:48:5c:98:d8:f4:83:5e:88:ff:c3:
                    72:6d:a5:dc:24:b4:ec:f4:22:e6:f2:71:b6:ef:c6:
                    42:ea:10:2f:dd:f4:6d:e5:92:5f:21:96:55:0e:e9:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:89:99:AC:8A:50:52:1C:FD:A6:E8:1A:7B:34:2A:3F:24:62:A7:78
            X509v3 Authority Key Identifier:
                keyid:17:FF:2C:32:79:CF:DB:88:2B:49:AE:03:22:B0:69:3D:27:A1:0A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/1/17FF2C3279CFDB882B49AE0322B0693D27A10A4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17FF2C3279CFDB882B49AE0322B0693D27A10A4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/1/323830343a386261383a3a2f33322d3333203d3e20323733373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ba8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:ae:83:28:4d:7e:49:8c:79:64:f5:20:d5:b5:89:18:f4:b7:
         2b:bf:59:e8:90:79:16:fc:42:cb:63:2b:4f:18:56:32:9a:35:
         f6:9c:23:0a:d2:6d:e0:12:b2:db:24:f4:da:dc:c7:31:c7:ea:
         36:ce:05:b6:73:69:8e:6b:cf:8f:c4:eb:7b:c4:6b:b4:6c:60:
         3a:81:42:08:b7:fb:0c:a9:85:ba:f6:52:28:50:98:a7:29:05:
         79:77:01:e2:aa:e3:f3:dd:60:a1:0c:9a:3f:c4:92:f2:f0:87:
         49:42:08:c9:f5:c1:c5:fc:92:fb:fc:93:cf:87:a4:16:1d:ea:
         50:5f:e4:48:e0:c6:78:37:3b:d7:e3:78:e0:44:6d:da:1e:7b:
         7f:5b:a1:4d:28:86:cc:4d:da:c1:d5:6c:9a:32:bb:cb:87:81:
         a1:34:a1:51:7d:7c:10:50:ad:4a:e7:f6:e8:d0:70:4b:7f:34:
         a7:04:35:7d:33:4f:fa:90:06:82:d8:69:9d:9f:ad:1e:17:6c:
         32:68:c9:b9:74:e9:74:04:d7:3c:b5:04:09:6f:03:ab:ae:b4:
         3d:51:7b:48:87:e0:18:99:11:1f:51:ee:0f:ab:6f:9d:b4:18:
         cf:df:77:57:b1:7d:58:cb:84:1e:79:e6:f6:1e:5e:f2:be:f5:
         cd:5f:94:d0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVpCMgGpgfZeAizn9RB8RC/i1JYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdGRjJDMzI3OUNGREI4ODJCNDlBRTAzMjJCMDY5M0Qy
N0ExMEE0QTAeFw0yNDA0MDQwMTU1MzBaFw0yNTA0MDMwMjAwMzBaMDMxMTAvBgNV
BAMTKDVGODk5OUFDOEE1MDUyMUNGREE2RTgxQTdCMzQyQTNGMjQ2MkE3NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHjpUp0ZgvQBtuh8ujUIeMuNg
hQ7Qn8NfGw9sBwOMjBzlauKQGR7syR8lL+wkBqDDjUp7baw70J4bh46mbhX3o5cY
dwNXyxp9sFdjDhfwGN+ANDANpJdTa29e5AnLaO9ueX5QLBgfN4C/STgoZDUBYj2z
V/KS3B7X8vfVPn3+hDmAVCaxnBmGxjdj5zfB1wXRHeIsXfxmqaL/g8cOg19+85HA
lizA43XbYQYw2eEitD28sbkDEQiGXbwc6QBt6i9Q1WqmEV8vADjAuisLaM0HSgTH
xa43SFyY2PSDXoj/w3JtpdwktOz0IubycbbvxkLqEC/d9G3lkl8hllUO6Y83AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUX4mZrIpQUhz9pugaezQqPyRip3gwHwYDVR0j
BBgwFoAUF/8sMnnP24grSa4DIrBpPSehCkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFN1emphbkVFOXpuZGtiWktEYjRLM3RmR21WYzNzVnhOOWVEa2tUc1Bx
TkwvMS8xN0ZGMkMzMjc5Q0ZEQjg4MkI0OUFFMDMyMkIwNjkzRDI3QTEwQTRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3RkYyQzMyNzlDRkRCODgy
QjQ5QUUwMzIyQjA2OTNEMjdBMTBBNEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hTdXpqYW5FRTl6bmRrYlpLRGI0SzN0ZkdtVmMzc1Z4TjllRGtrVHNQcU5MLzEv
MzIzODMwMzQzYTM4NjI2MTM4M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNzMz
MzczNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASLqDANBgkqhkiG9w0BAQsFAAOCAQEApK6DKE1+
SYx5ZPUg1bWJGPS3K79Z6JB5FvxCy2MrTxhWMpo19pwjCtJt4BKy2yT02tzHMcfq
Ns4FtnNpjmvPj8Tre8RrtGxgOoFCCLf7DKmFuvZSKFCYpykFeXcB4qrj891goQya
P8SS8vCHSUIIyfXBxfyS+/yTz4ekFh3qUF/kSODGeDc71+N44ERt2h57f1uhTSiG
zE3awdVsmjK7y4eBoTShUX18EFCtSuf26NBwS380pwQ1fTNP+pAGgthpnZ+tHhds
MmjJuXTpdATXPLUECW8Dq660PVF7SIfgGJkRH1HuD6tvnbQYz993V7F9WMuEHnnm
9h5e8r71zV+U0A==
-----END CERTIFICATE-----
Generated at Sat Jun 15 04:19:39 2024 by rpki-client on console-ams.rpki-client.org