Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653330303a3a2f34302d3430203d3e20323633363132.roa
File:                     323830343a6666633a653330303a3a2f34302d3430203d3e20323633363132.roa (raw, json)
Hash identifier:          zVfM/iDmK3EKfRmklj2DkttxrKXJClIRjtnW1HveXmk=
Subject key identifier:   83:12:B4:C2:34:91:8D:CC:3F:4E:F1:38:59:6A:2D:D0:5E:AD:76:04
Certificate issuer:       /CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
Certificate serial:       579AAAC7FA0FF7E8DB51E34B0B73B546461E364E
Authority key identifier: 4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653330303a3a2f34302d3430203d3e20323633363132.roa
Signing time:             Mon 01 Jan 2024 11:29:47 +0000
ROA not before:           Mon 01 Jan 2024 11:24:47 +0000
ROA not after:            Mon 30 Dec 2024 11:29:47 +0000
asID:                     263612
IP address blocks:        2804:ffc:e300::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9a:aa:c7:fa:0f:f7:e8:db:51:e3:4b:0b:73:b5:46:46:1e:36:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
        Validity
            Not Before: Jan  1 11:24:47 2024 GMT
            Not After : Dec 30 11:29:47 2024 GMT
        Subject: CN=8312B4C234918DCC3F4EF138596A2DD05EAD7604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:45:de:ea:b8:c3:65:b8:e7:78:4a:ad:9e:aa:
                    af:e4:0f:23:c6:3f:ff:4d:5f:7d:ff:16:8d:ac:dc:
                    c5:be:bb:05:b1:8c:e9:c7:f6:26:58:bc:28:c8:4d:
                    4b:48:4c:2f:60:71:15:c3:b8:3f:e3:41:4d:80:d6:
                    59:c3:a8:c8:e0:fc:5f:e4:b4:f3:f3:eb:f6:84:df:
                    de:8a:b5:1d:0a:25:5b:32:36:50:fe:3c:7b:45:8c:
                    ee:37:08:0a:c1:cf:40:17:d9:22:e0:05:cc:f5:2d:
                    3c:0b:c2:f1:9d:16:6f:f6:d3:6c:a9:c7:49:13:df:
                    25:d5:2e:2e:33:54:0d:57:b6:2c:b2:f8:fe:b5:ef:
                    99:67:13:f8:04:35:25:79:43:b2:b5:aa:05:bf:ee:
                    71:15:7a:22:d2:05:fb:f6:41:75:9b:6e:76:b5:5e:
                    15:53:c7:f4:49:8f:cb:28:d1:4d:95:ff:63:2d:03:
                    37:d5:f2:c0:a7:1a:2e:e5:28:af:75:b1:cb:bc:58:
                    4d:bb:bb:d9:4b:82:29:cc:1c:3b:85:d5:d4:08:0f:
                    2e:55:69:c8:ae:5c:b4:31:2c:5f:9e:b4:8e:66:70:
                    4d:80:a2:98:6b:60:fc:be:fa:74:24:99:3d:97:0f:
                    b1:64:4f:75:a7:72:c6:9a:90:50:b6:fb:c0:ba:7b:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:12:B4:C2:34:91:8D:CC:3F:4E:F1:38:59:6A:2D:D0:5E:AD:76:04
            X509v3 Authority Key Identifier:
                keyid:4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653330303a3a2f34302d3430203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e300::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:a2:ab:bd:31:1b:6f:d6:17:fa:5e:19:9c:d8:0b:1d:fc:47:
         f7:86:91:e8:ef:1b:ab:d8:2e:e4:33:d1:4f:b8:42:19:2e:02:
         65:9b:64:6c:21:1a:b5:73:bc:00:6e:b0:c0:2a:2e:e8:7a:ce:
         96:74:b3:61:7f:74:79:0f:d7:b1:ec:94:28:64:a3:0a:84:09:
         89:49:7f:b8:d3:f1:c2:87:ac:53:3a:fe:6f:26:73:65:06:d9:
         68:70:50:2f:28:a0:2c:57:fd:cc:25:95:1b:f1:d7:f2:74:de:
         bb:8e:36:b1:91:8b:9c:57:91:6e:2d:73:fa:75:fd:82:ca:76:
         61:dc:dc:37:07:e9:11:89:0b:f2:6e:ec:df:37:24:13:8e:17:
         af:e2:1e:95:54:84:f3:53:14:c9:e6:0a:28:01:31:0c:b9:7b:
         a5:a6:fa:24:25:88:6c:fe:ec:77:c5:98:e5:3b:e5:66:01:de:
         43:bd:72:87:c4:01:f5:a5:65:54:7b:42:d8:9f:4d:60:d5:9f:
         17:96:ca:68:50:4f:ef:f3:e2:a0:fd:2c:e5:36:5c:e6:d2:be:
         e7:a4:d1:54:b8:8c:dc:e7:0c:22:7e:0a:8f:44:27:25:ad:b4:
         68:43:ee:81:c5:11:fa:d2:15:37:1c:94:a5:86:7d:4d:94:b4:
         36:1f:6d:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUV5qqx/oP9+jbUeNLC3O1RkYeNk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJBNTkwQUI0OTMyNENBNTFFNzI3NEJBOTVDNzkyQTk5
RTZFNTREQTAeFw0yNDAxMDExMTI0NDdaFw0yNDEyMzAxMTI5NDdaMDMxMTAvBgNV
BAMTKDgzMTJCNEMyMzQ5MThEQ0MzRjRFRjEzODU5NkEyREQwNUVBRDc2MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgRd7quMNluOd4Sq2eqq/kDyPG
P/9NX33/Fo2s3MW+uwWxjOnH9iZYvCjITUtITC9gcRXDuD/jQU2A1lnDqMjg/F/k
tPPz6/aE396KtR0KJVsyNlD+PHtFjO43CArBz0AX2SLgBcz1LTwLwvGdFm/202yp
x0kT3yXVLi4zVA1Xtiyy+P6175lnE/gENSV5Q7K1qgW/7nEVeiLSBfv2QXWbbna1
XhVTx/RJj8so0U2V/2MtAzfV8sCnGi7lKK91scu8WE27u9lLginMHDuF1dQIDy5V
aciuXLQxLF+etI5mcE2AophrYPy++nQkmT2XD7FkT3WncsaakFC2+8C6e7cdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgxK0wjSRjcw/TvE4WWot0F6tdgQwHwYDVR0j
BBgwFoAUS6WQq0kyTKUecnS6lceSqZ5uVNowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF4ZWFYd3htdlRkckJ3MkZVaDI1TTc5OEdTMkdzRVY2Z1JIYzZRZDI0
WEMvMC80QkE1OTBBQjQ5MzI0Q0E1MUU3Mjc0QkE5NUM3OTJBOTlFNkU1NERBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCQTU5MEFCNDkzMjRDQTUx
RTcyNzRCQTk1Qzc5MkE5OUU2RTU0REEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxeGVhWHd4bXZUZHJCdzJGVWgyNU03OThHUzJHc0VWNmdSSGM2UWQyNFhDLzAv
MzIzODMwMzQzYTY2NjY2MzNhNjUzMzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzMzNjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBA/84zANBgkqhkiG9w0BAQsFAAOC
AQEAAaKrvTEbb9YX+l4ZnNgLHfxH94aR6O8bq9gu5DPRT7hCGS4CZZtkbCEatXO8
AG6wwCou6HrOlnSzYX90eQ/XseyUKGSjCoQJiUl/uNPxwoesUzr+byZzZQbZaHBQ
LyigLFf9zCWVG/HX8nTeu442sZGLnFeRbi1z+nX9gsp2YdzcNwfpEYkL8m7s3zck
E44Xr+IelVSE81MUyeYKKAExDLl7pab6JCWIbP7sd8WY5TvlZgHeQ71yh8QB9aVl
VHtC2J9NYNWfF5bKaFBP7/PioP0s5TZc5tK+56TRVLiM3OcMIn4Kj0QnJa20aEPu
gcUR+tIVNxyUpYZ9TZS0Nh9t8g==
-----END CERTIFICATE-----
Generated at Thu Mar 28 19:00:50 2024 by rpki-client on console-fra.rpki-client.org