Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/323830343a326262383a3a2f33322d313238203d3e20323635313731.roa
File:                     323830343a326262383a3a2f33322d313238203d3e20323635313731.roa (raw, json)
Hash identifier:          y5OsaQdl1jKoI11prVtQwEzG/XIeMrxmHkVPilf6Ajc=
Subject key identifier:   00:FB:76:DB:85:98:10:A8:DF:5C:DC:EF:A1:1E:FF:C9:FA:97:AF:77
Certificate issuer:       /CN=294E43ABE5D56723EB3F797DAEEEBE78EC276DE8
Certificate serial:       17340B7C1DF37C1CCC8507E2166BC7E1A1627168
Authority key identifier: 29:4E:43:AB:E5:D5:67:23:EB:3F:79:7D:AE:EE:BE:78:EC:27:6D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/323830343a326262383a3a2f33322d313238203d3e20323635313731.roa
Signing time:             Wed 21 Aug 2024 15:00:59 +0000
ROA not before:           Wed 21 Aug 2024 14:55:59 +0000
ROA not after:            Wed 20 Aug 2025 15:00:59 +0000
asID:                     265171
IP address blocks:        2804:2bb8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:34:0b:7c:1d:f3:7c:1c:cc:85:07:e2:16:6b:c7:e1:a1:62:71:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294E43ABE5D56723EB3F797DAEEEBE78EC276DE8
        Validity
            Not Before: Aug 21 14:55:59 2024 GMT
            Not After : Aug 20 15:00:59 2025 GMT
        Subject: CN=00FB76DB859810A8DF5CDCEFA11EFFC9FA97AF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:ab:78:ae:e2:8a:38:c1:41:ad:79:77:a2:
                    8d:6a:2a:08:98:fe:fe:c8:0c:84:a2:64:27:fb:4a:
                    da:b9:97:00:d8:04:5a:7d:70:c0:6e:ca:b6:2b:ba:
                    83:39:26:5e:13:91:0b:69:de:cb:d3:1a:46:1b:52:
                    bf:b8:a2:c6:cd:8a:68:7b:c2:34:7f:6f:dd:5e:e7:
                    a2:de:a6:47:1e:72:19:75:88:ca:70:08:0e:e2:d0:
                    f2:70:23:f5:7d:c3:68:c8:08:a0:47:f7:b6:a6:6a:
                    7e:b8:bf:02:1a:06:3c:19:d6:de:28:c0:3f:25:3a:
                    51:d4:56:1f:07:94:c9:80:25:83:50:1b:7f:c4:b4:
                    fa:a4:6c:14:37:d6:a6:a9:d1:29:f8:eb:c7:6e:a3:
                    82:67:05:0f:6f:fa:53:4b:5f:a7:8a:f2:fc:5d:72:
                    3e:38:e6:6a:f3:74:52:d0:b4:48:e4:c7:3e:b0:85:
                    b8:dd:01:11:1a:22:6c:ec:5d:d4:7d:77:23:01:70:
                    87:f5:2a:54:27:2f:03:ae:8e:cb:f6:51:37:cd:1c:
                    20:eb:74:20:b5:f5:72:67:18:22:aa:56:26:7d:ad:
                    52:f5:d5:88:47:15:50:63:46:38:cb:51:21:d0:00:
                    8d:a6:39:08:56:89:98:1b:4b:51:43:3e:20:fd:af:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FB:76:DB:85:98:10:A8:DF:5C:DC:EF:A1:1E:FF:C9:FA:97:AF:77
            X509v3 Authority Key Identifier:
                keyid:29:4E:43:AB:E5:D5:67:23:EB:3F:79:7D:AE:EE:BE:78:EC:27:6D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/323830343a326262383a3a2f33322d313238203d3e20323635313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:1f:7a:78:73:d0:39:00:4e:db:52:25:b4:ea:6b:87:b2:67:
         4d:00:55:03:5f:ff:04:07:2e:a1:6b:de:35:6e:11:ee:7d:9f:
         67:e7:f9:11:aa:73:ac:ec:2d:02:bb:df:29:8d:ef:81:fe:2d:
         95:37:ea:ab:21:28:97:df:ae:7e:06:a0:e1:96:a5:1b:4e:89:
         82:20:f9:5a:d2:17:a6:be:9b:a4:ab:fa:44:9e:f2:7f:2d:57:
         8b:aa:ed:7a:d9:6e:0f:e5:2b:15:ed:c9:95:30:37:52:af:3e:
         03:56:c5:f6:13:06:2f:30:8c:6c:29:54:de:2d:eb:e1:62:89:
         cd:8e:4e:f7:d0:b3:30:3d:6f:2c:73:a9:72:9d:8b:63:0f:78:
         67:1d:cc:50:aa:4d:f9:25:97:68:06:14:d5:19:9d:61:60:7d:
         bb:16:5a:08:f9:7c:f0:16:26:d0:cd:eb:4b:1e:87:b5:ad:dc:
         43:0f:62:81:f8:80:e2:20:c0:4c:a4:15:6d:e3:90:31:85:25:
         3c:bc:0b:f5:84:41:37:aa:e4:c9:3b:c7:6b:6e:15:8c:c0:76:
         2b:48:25:57:1b:cc:28:fd:0d:a6:63:b5:ba:dd:63:4d:9f:0e:
         1c:db:18:95:94:97:02:9d:47:83:2e:44:74:9d:44:90:7b:fd:
         e9:a5:d9:8b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUFzQLfB3zfBzMhQfiFmvH4aFicWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0RTQzQUJFNUQ1NjcyM0VCM0Y3OTdEQUVFRUJFNzhF
QzI3NkRFODAeFw0yNDA4MjExNDU1NTlaFw0yNTA4MjAxNTAwNTlaMDMxMTAvBgNV
BAMTKDAwRkI3NkRCODU5ODEwQThERjVDRENFRkExMUVGRkM5RkE5N0FGNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxu6t4ruKKOMFBrXl3oo1qKgiY
/v7IDISiZCf7Stq5lwDYBFp9cMBuyrYruoM5Jl4TkQtp3svTGkYbUr+4osbNimh7
wjR/b91e56Lepkcechl1iMpwCA7i0PJwI/V9w2jICKBH97aman64vwIaBjwZ1t4o
wD8lOlHUVh8HlMmAJYNQG3/EtPqkbBQ31qap0Sn468duo4JnBQ9v+lNLX6eK8vxd
cj445mrzdFLQtEjkxz6whbjdAREaImzsXdR9dyMBcIf1KlQnLwOujsv2UTfNHCDr
dCC19XJnGCKqViZ9rVL11YhHFVBjRjjLUSHQAI2mOQhWiZgbS1FDPiD9r6rHAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUAPt224WYEKjfXNzvoR7/yfqXr3cwHwYDVR0j
BBgwFoAUKU5Dq+XVZyPrP3l9ru6+eOwnbegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjQ1Zjdoa0pQWXhHdmlROUQxcmR6NXhUeWtkVTZlQktzTW1Kbmpad1h1
dE4vMC8yOTRFNDNBQkU1RDU2NzIzRUIzRjc5N0RBRUVFQkU3OEVDMjc2REU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NEU0M0FCRTVENTY3MjNF
QjNGNzk3REFFRUVCRTc4RUMyNzZERTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0NWY3aGtKUFl4R3ZpUTlEMXJkejV4VHlrZFU2ZUJLc01tSm5qWndYdXROLzAv
MzIzODMwMzQzYTMyNjI2MjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzMTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCu4MA0GCSqGSIb3DQEBCwUAA4IBAQBZH3p4
c9A5AE7bUiW06muHsmdNAFUDX/8EBy6ha941bhHufZ9n5/kRqnOs7C0Cu98pje+B
/i2VN+qrISiX365+BqDhlqUbTomCIPla0hemvpukq/pEnvJ/LVeLqu162W4P5SsV
7cmVMDdSrz4DVsX2EwYvMIxsKVTeLevhYonNjk730LMwPW8sc6lynYtjD3hnHcxQ
qk35JZdoBhTVGZ1hYH27FloI+XzwFibQzetLHoe1rdxDD2KB+IDiIMBMpBVt45Ax
hSU8vAv1hEE3quTJO8drbhWMwHYrSCVXG8wo/Q2mY7W63WNNnw4c2xiVlJcCnUeD
LkR0nUSQe/3ppdmL
-----END CERTIFICATE-----
Generated at Wed Sep 25 11:48:47 2024 by rpki-client on console-fra.rpki-client.org