Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/323830343a3837343a3a2f33322d3333203d3e20323632333733.roa
File:                     323830343a3837343a3a2f33322d3333203d3e20323632333733.roa (raw, json)
Hash identifier:          fALsWZ80T78NTFgJ0xIrhbepzIGWKyQbj81Mf4B8E6g=
Subject key identifier:   13:EF:D6:F3:4F:33:C5:3A:89:79:75:D0:08:7C:97:31:72:B5:93:70
Certificate issuer:       /CN=944E34DEA91B28826835424C55845E9BDF8C78BA
Certificate serial:       25A0757A2D067E2F70A5849C8476539B734CA601
Authority key identifier: 94:4E:34:DE:A9:1B:28:82:68:35:42:4C:55:84:5E:9B:DF:8C:78:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944E34DEA91B28826835424C55845E9BDF8C78BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/323830343a3837343a3a2f33322d3333203d3e20323632333733.roa
Signing time:             Thu 04 Apr 2024 02:59:51 +0000
ROA not before:           Thu 04 Apr 2024 02:54:51 +0000
ROA not after:            Thu 03 Apr 2025 02:59:51 +0000
asID:                     262373
IP address blocks:        2804:874::/32 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a0:75:7a:2d:06:7e:2f:70:a5:84:9c:84:76:53:9b:73:4c:a6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=944E34DEA91B28826835424C55845E9BDF8C78BA
        Validity
            Not Before: Apr  4 02:54:51 2024 GMT
            Not After : Apr  3 02:59:51 2025 GMT
        Subject: CN=13EFD6F34F33C53A897975D0087C973172B59370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:03:f0:08:f9:2e:0a:1a:83:c5:12:07:63:5c:
                    23:9f:a8:0a:1e:ed:ff:46:e1:80:62:a8:c0:52:40:
                    4f:2a:8e:1d:a5:22:1f:ac:ac:0c:52:a7:95:ad:07:
                    ff:0a:78:ec:6e:b8:f0:89:04:8e:ca:c0:4b:1c:ae:
                    e6:ad:50:a0:77:16:f9:2a:27:eb:d8:7d:dc:8a:19:
                    25:6a:8c:f4:11:8f:3f:fa:e6:08:17:69:2b:36:6e:
                    fc:b5:a6:9f:36:b0:74:fc:ac:4c:bd:ca:de:64:2b:
                    df:ed:d2:45:e0:90:c5:fa:fb:86:9a:7f:b8:67:cb:
                    1c:a3:29:70:5c:45:b6:9a:02:76:17:27:31:01:8e:
                    3d:2c:7f:4b:75:38:16:4f:96:d9:a7:5d:63:5f:ee:
                    79:1a:73:cd:32:ca:aa:80:45:e8:75:c6:86:eb:ea:
                    02:00:b0:53:ab:29:1d:32:d0:2e:ef:48:65:46:18:
                    4f:38:81:61:64:ad:ee:96:d6:82:ba:0f:a0:10:7a:
                    99:48:12:f3:ee:90:22:2b:df:0d:9c:fe:d3:1c:4b:
                    fc:66:b7:82:88:31:a3:6c:58:44:a7:e1:a0:f3:bf:
                    33:6f:73:f4:8f:1d:33:ad:92:61:93:e4:08:84:6d:
                    25:fd:03:59:d5:77:5b:19:6a:2b:b3:9e:54:e4:7a:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EF:D6:F3:4F:33:C5:3A:89:79:75:D0:08:7C:97:31:72:B5:93:70
            X509v3 Authority Key Identifier:
                keyid:94:4E:34:DE:A9:1B:28:82:68:35:42:4C:55:84:5E:9B:DF:8C:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/944E34DEA91B28826835424C55845E9BDF8C78BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944E34DEA91B28826835424C55845E9BDF8C78BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/323830343a3837343a3a2f33322d3333203d3e20323632333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:874::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:59:53:c1:13:10:94:c5:5c:87:55:b4:a5:9f:62:dd:a2:b6:
         2c:07:a7:cb:6e:14:96:96:80:df:76:90:20:ff:d3:e8:0f:55:
         ca:bf:0a:41:72:7e:a6:dc:85:59:1e:f9:40:4b:9f:2b:8d:64:
         2f:2e:90:df:e5:2d:67:1e:4c:1f:85:d3:ea:78:6b:e7:57:c1:
         b8:c7:ee:a6:30:f4:75:bd:f4:6f:78:90:e7:e5:39:86:05:ba:
         56:7a:64:81:eb:0f:ef:db:59:41:f9:b2:59:d6:9d:35:a5:7e:
         ee:f8:bb:b6:22:f0:e2:91:9b:45:8d:d6:51:65:70:1c:2e:80:
         ab:30:f0:3d:03:6b:d3:4b:21:56:9b:e1:0b:cd:6f:f9:a7:99:
         b0:31:ea:82:66:e1:08:f6:39:06:6c:95:bf:fe:16:e5:f9:b1:
         d7:c1:fe:51:90:3c:40:24:44:b7:93:73:95:75:7a:49:59:e6:
         37:27:69:1f:ec:c9:5c:91:4d:c3:c5:c1:d3:29:72:35:1e:74:
         cc:89:d0:3a:c9:2f:b6:cf:cb:f4:fa:21:5f:8e:53:c9:da:3b:
         5d:73:8d:22:09:75:20:4c:1a:12:06:4b:c1:c1:2d:77:b5:c7:
         93:2d:22:9d:83:cc:a6:f9:6a:a3:ff:f3:48:80:cf:38:3d:8e:
         af:ab:f3:df
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJaB1ei0Gfi9wpYSchHZTm3NMpgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ0RTM0REVBOTFCMjg4MjY4MzU0MjRDNTU4NDVFOUJE
RjhDNzhCQTAeFw0yNDA0MDQwMjU0NTFaFw0yNTA0MDMwMjU5NTFaMDMxMTAvBgNV
BAMTKDEzRUZENkYzNEYzM0M1M0E4OTc5NzVEMDA4N0M5NzMxNzJCNTkzNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsA/AI+S4KGoPFEgdjXCOfqAoe
7f9G4YBiqMBSQE8qjh2lIh+srAxSp5WtB/8KeOxuuPCJBI7KwEscruatUKB3Fvkq
J+vYfdyKGSVqjPQRjz/65ggXaSs2bvy1pp82sHT8rEy9yt5kK9/t0kXgkMX6+4aa
f7hnyxyjKXBcRbaaAnYXJzEBjj0sf0t1OBZPltmnXWNf7nkac80yyqqAReh1xobr
6gIAsFOrKR0y0C7vSGVGGE84gWFkre6W1oK6D6AQeplIEvPukCIr3w2c/tMcS/xm
t4KIMaNsWESn4aDzvzNvc/SPHTOtkmGT5AiEbSX9A1nVd1sZaiuznlTkei/VAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUE+/W808zxTqJeXXQCHyXMXK1k3AwHwYDVR0j
BBgwFoAUlE403qkbKIJoNUJMVYRem9+MeLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGlMekw0S2hkVnBERm9DSmV5clVuSnBLaDFmcTRBWTVFV2lzY2c4emp6
YXMvMS85NDRFMzRERUE5MUIyODgyNjgzNTQyNEM1NTg0NUU5QkRGOEM3OEJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0NEUzNERFQTkxQjI4ODI2
ODM1NDI0QzU1ODQ1RTlCREY4Qzc4QkEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hpTHpMNEtoZFZwREZvQ0pleXJVbkpwS2gxZnE0QVk1RVdpc2NnOHpqemFzLzEv
MzIzODMwMzQzYTM4MzczNDNhM2EyZjMzMzIyZDMzMzMyMDNkM2UyMDMyMzYzMjMz
MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECHQwDQYJKoZIhvcNAQELBQADggEBAFpZU8ETEJTF
XIdVtKWfYt2itiwHp8tuFJaWgN92kCD/0+gPVcq/CkFyfqbchVke+UBLnyuNZC8u
kN/lLWceTB+F0+p4a+dXwbjH7qYw9HW99G94kOflOYYFulZ6ZIHrD+/bWUH5slnW
nTWlfu74u7Yi8OKRm0WN1lFlcBwugKsw8D0Da9NLIVab4QvNb/mnmbAx6oJm4Qj2
OQZslb/+FuX5sdfB/lGQPEAkRLeTc5V1eklZ5jcnaR/syVyRTcPFwdMpcjUedMyJ
0DrJL7bPy/T6IV+OU8naO11zjSIJdSBMGhIGS8HBLXe1x5MtIp2DzKb5aqP/80iA
zzg9jq+r898=
-----END CERTIFICATE-----
Generated at Thu Sep 26 14:02:14 2024 by rpki-client on console-fra.rpki-client.org