Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653630303a3a2f34302d3430203d3e20323633363132.roa
File:                     323830343a6666633a653630303a3a2f34302d3430203d3e20323633363132.roa (raw, json)
Hash identifier:          tWA4J9np1EYsMxHHtIPO+OMtm8hSEhXQlyR91jxrYR0=
Subject key identifier:   EC:5B:D8:CF:F5:7C:88:6B:E7:7D:18:46:72:A9:25:82:8B:EE:96:5D
Certificate issuer:       /CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
Certificate serial:       348BD273BD6CD4C66DF27ACA1012AA6EF9ADB67C
Authority key identifier: 4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653630303a3a2f34302d3430203d3e20323633363132.roa
Signing time:             Mon 01 Jan 2024 11:29:47 +0000
ROA not before:           Mon 01 Jan 2024 11:24:47 +0000
ROA not after:            Mon 30 Dec 2024 11:29:47 +0000
asID:                     263612
IP address blocks:        2804:ffc:e600::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8b:d2:73:bd:6c:d4:c6:6d:f2:7a:ca:10:12:aa:6e:f9:ad:b6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
        Validity
            Not Before: Jan  1 11:24:47 2024 GMT
            Not After : Dec 30 11:29:47 2024 GMT
        Subject: CN=EC5BD8CFF57C886BE77D184672A925828BEE965D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:76:f9:18:bb:c5:e0:ed:74:cf:94:bb:2c:
                    d5:6d:9e:8e:9f:cc:86:e3:33:6c:3e:34:b8:3d:97:
                    16:74:46:af:09:58:de:b1:ee:61:6a:8e:6c:47:39:
                    1f:28:37:cd:76:86:25:93:70:29:72:13:d3:77:2d:
                    d4:b0:ba:a3:5f:09:94:9c:26:6e:8f:56:14:60:e7:
                    ea:d8:e1:0b:64:e7:67:76:9d:77:bf:7c:8d:7e:ac:
                    fc:c0:98:0e:b6:d3:66:fd:1c:d6:4e:27:2b:20:a8:
                    fe:66:0f:38:c6:e1:fc:4c:7a:f8:62:ed:31:c6:2e:
                    6d:a0:74:50:2b:16:a4:9c:69:4f:ba:3f:ed:d2:21:
                    5a:39:70:5f:71:bc:6e:83:26:c7:82:7d:a2:89:e2:
                    36:b9:fd:43:93:fb:82:5c:ed:b8:42:a4:20:58:04:
                    17:64:63:d6:2c:74:cf:1d:4b:69:a5:b9:b1:29:b1:
                    28:43:78:74:46:c0:dc:81:f0:6e:8e:43:33:e1:5c:
                    e0:7c:4c:97:f0:e3:ba:d1:be:4e:31:06:4c:06:36:
                    37:15:91:c1:f3:ce:ae:a1:54:87:06:96:2f:60:8d:
                    c2:d7:c3:91:fc:61:c9:62:a5:ed:a8:0c:58:92:31:
                    b4:44:59:45:53:df:6d:9b:5f:9a:8a:77:1b:fe:4f:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5B:D8:CF:F5:7C:88:6B:E7:7D:18:46:72:A9:25:82:8B:EE:96:5D
            X509v3 Authority Key Identifier:
                keyid:4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653630303a3a2f34302d3430203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e600::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:7b:22:e5:aa:ad:ad:a2:63:6a:92:f6:55:11:e1:03:a3:68:
         20:27:ba:91:1d:72:8a:93:fd:0d:25:82:68:fd:53:ee:c9:ee:
         c0:1f:cb:08:49:2a:c6:a9:1a:b3:22:ee:b9:d8:c4:60:f0:89:
         fb:28:66:d4:04:e4:3a:99:d1:f8:ad:00:82:b5:1e:22:7a:8c:
         9e:0a:4c:b6:36:9c:c9:67:9b:c3:7f:4c:d6:45:54:71:0e:cf:
         b4:73:e9:97:6b:d7:e8:3b:06:94:0f:76:cf:c7:e8:14:2f:d5:
         e6:11:bc:c0:2e:49:7a:c9:72:f6:a6:14:fe:5e:cf:16:9f:0b:
         04:e3:a5:fb:6a:df:b4:06:47:74:e3:28:b3:81:8a:d8:ac:23:
         72:de:28:c5:44:28:00:1f:e8:bd:9d:56:80:23:0d:10:e0:26:
         76:26:ee:a2:90:a2:d3:42:66:ae:29:0f:b7:1e:68:87:61:d2:
         a8:80:27:b8:33:37:2b:49:23:f6:74:8f:24:da:9a:b6:75:40:
         4e:4a:03:c0:c2:fc:4f:e2:6a:92:d7:fb:10:56:4b:8a:08:46:
         b2:21:c4:24:86:cc:ce:b4:1c:79:2d:7c:e7:3f:d1:22:71:38:
         a2:1e:b7:85:a5:92:0f:76:1f:1a:31:37:1f:16:c1:05:dd:fb:
         f3:ef:37:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNIvSc71s1MZt8nrKEBKqbvmttnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJBNTkwQUI0OTMyNENBNTFFNzI3NEJBOTVDNzkyQTk5
RTZFNTREQTAeFw0yNDAxMDExMTI0NDdaFw0yNDEyMzAxMTI5NDdaMDMxMTAvBgNV
BAMTKEVDNUJEOENGRjU3Qzg4NkJFNzdEMTg0NjcyQTkyNTgyOEJFRTk2NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3lnb5GLvF4O10z5S7LNVtno6f
zIbjM2w+NLg9lxZ0Rq8JWN6x7mFqjmxHOR8oN812hiWTcClyE9N3LdSwuqNfCZSc
Jm6PVhRg5+rY4Qtk52d2nXe/fI1+rPzAmA6202b9HNZOJysgqP5mDzjG4fxMevhi
7THGLm2gdFArFqScaU+6P+3SIVo5cF9xvG6DJseCfaKJ4ja5/UOT+4Jc7bhCpCBY
BBdkY9YsdM8dS2mlubEpsShDeHRGwNyB8G6OQzPhXOB8TJfw47rRvk4xBkwGNjcV
kcHzzq6hVIcGli9gjcLXw5H8Yclipe2oDFiSMbREWUVT322bX5qKdxv+T83fAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7FvYz/V8iGvnfRhGcqklgovull0wHwYDVR0j
BBgwFoAUS6WQq0kyTKUecnS6lceSqZ5uVNowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF4ZWFYd3htdlRkckJ3MkZVaDI1TTc5OEdTMkdzRVY2Z1JIYzZRZDI0
WEMvMC80QkE1OTBBQjQ5MzI0Q0E1MUU3Mjc0QkE5NUM3OTJBOTlFNkU1NERBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCQTU5MEFCNDkzMjRDQTUx
RTcyNzRCQTk1Qzc5MkE5OUU2RTU0REEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxeGVhWHd4bXZUZHJCdzJGVWgyNU03OThHUzJHc0VWNmdSSGM2UWQyNFhDLzAv
MzIzODMwMzQzYTY2NjY2MzNhNjUzNjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzMzNjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBA/85jANBgkqhkiG9w0BAQsFAAOC
AQEASXsi5aqtraJjapL2VRHhA6NoICe6kR1yipP9DSWCaP1T7snuwB/LCEkqxqka
syLuudjEYPCJ+yhm1ATkOpnR+K0AgrUeInqMngpMtjacyWebw39M1kVUcQ7PtHPp
l2vX6DsGlA92z8foFC/V5hG8wC5Jesly9qYU/l7PFp8LBOOl+2rftAZHdOMos4GK
2Kwjct4oxUQoAB/ovZ1WgCMNEOAmdibuopCi00JmrikPtx5oh2HSqIAnuDM3K0kj
9nSPJNqatnVATkoDwML8T+Jqktf7EFZLighGsiHEJIbMzrQceS185z/RInE4oh63
haWSD3YfGjE3HxbBBd378+83RA==
-----END CERTIFICATE-----
Generated at Thu Mar 28 19:00:50 2024 by rpki-client on console-fra.rpki-client.org