Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33322d313238203d3e20323636313635.roa
File:                     323830343a336262303a3a2f33322d313238203d3e20323636313635.roa (raw, json)
Hash identifier:          n+cEwrIpEjBLLna3NnB+cZN69ovaNx5Y/n0Hy11YpoY=
Subject key identifier:   D9:9E:EC:6F:0C:07:93:BC:74:AF:1D:9C:6D:F5:58:FA:38:3D:62:3C
Certificate issuer:       /CN=4F4F05BDB8BE98C86EC3BA2C107D382468673695
Certificate serial:       5413698CA48FBFD4AAEF0ACBA442ACD2602EEE00
Authority key identifier: 4F:4F:05:BD:B8:BE:98:C8:6E:C3:BA:2C:10:7D:38:24:68:67:36:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F4F05BDB8BE98C86EC3BA2C107D382468673695.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33322d313238203d3e20323636313635.roa
Signing time:             Fri 28 Jun 2024 04:32:17 +0000
ROA not before:           Fri 28 Jun 2024 04:27:17 +0000
ROA not after:            Fri 27 Jun 2025 04:32:17 +0000
asID:                     266165
IP address blocks:        2804:3bb0::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:13:69:8c:a4:8f:bf:d4:aa:ef:0a:cb:a4:42:ac:d2:60:2e:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F4F05BDB8BE98C86EC3BA2C107D382468673695
        Validity
            Not Before: Jun 28 04:27:17 2024 GMT
            Not After : Jun 27 04:32:17 2025 GMT
        Subject: CN=D99EEC6F0C0793BC74AF1D9C6DF558FA383D623C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0c:09:b0:66:92:b4:03:3e:49:87:82:14:32:
                    cb:1b:62:c8:dd:f6:b0:86:36:57:4d:c7:80:c8:0e:
                    73:4e:7e:99:42:87:51:0d:6a:df:26:69:34:c5:b2:
                    de:51:38:2a:49:ef:c1:06:9f:4e:de:29:7f:e9:7e:
                    3c:33:e9:13:14:16:d3:a7:01:65:5b:85:83:a1:ae:
                    d3:96:44:0c:0d:91:73:48:cc:8e:29:23:8a:6e:7b:
                    51:ff:34:4e:dc:81:a1:8d:1b:56:66:b2:12:1c:f0:
                    0c:ff:6a:b3:db:74:d7:c8:4d:0f:48:a9:94:55:ae:
                    0a:18:77:0d:f9:2f:57:68:11:df:ef:2f:01:ff:b5:
                    74:50:24:27:a5:ed:b6:c0:74:ff:07:a2:8e:59:c0:
                    ff:b3:e2:9b:58:c3:db:dd:00:d5:78:3b:3e:db:08:
                    f9:25:3b:9d:96:e4:c5:34:28:0b:c9:a0:86:9b:52:
                    7b:e9:0a:75:ee:1b:6c:cf:f5:b9:08:2d:12:ce:9c:
                    13:0f:35:16:18:58:c4:8d:62:30:aa:a0:1c:c0:0b:
                    27:8c:b1:cd:34:8c:56:f0:f2:61:40:1c:b5:7d:a0:
                    c7:ad:45:29:bd:f9:22:4a:be:9f:52:32:1c:10:f4:
                    a2:4d:71:8b:bb:21:b1:fc:53:8f:ae:5e:3a:83:6f:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9E:EC:6F:0C:07:93:BC:74:AF:1D:9C:6D:F5:58:FA:38:3D:62:3C
            X509v3 Authority Key Identifier:
                keyid:4F:4F:05:BD:B8:BE:98:C8:6E:C3:BA:2C:10:7D:38:24:68:67:36:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/4F4F05BDB8BE98C86EC3BA2C107D382468673695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F4F05BDB8BE98C86EC3BA2C107D382468673695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33322d313238203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:38:1e:d7:fd:3d:b4:03:2c:e0:a0:50:64:02:3d:bf:94:a6:
         ef:88:9a:90:2c:cb:be:80:49:62:15:df:a5:25:41:96:b8:08:
         e3:c1:03:5e:a1:fa:7b:c0:23:b4:b7:f5:5a:f7:33:bd:52:e9:
         4b:2f:b8:72:de:ac:ca:47:ce:ab:94:15:1a:d8:0e:19:82:48:
         0a:2a:5d:59:ea:01:26:86:76:d2:b7:91:f2:34:19:cd:08:dc:
         fc:96:79:61:77:1b:f7:90:05:d6:89:77:1c:49:5a:92:25:a5:
         7f:09:0e:ea:57:4d:c1:77:10:40:45:3e:f3:4b:c4:ba:14:6a:
         4e:d7:a4:d5:3a:60:b0:e4:d8:6d:84:8e:55:bb:29:a1:3e:63:
         80:7d:07:5d:c6:35:f7:f0:78:8f:5d:51:6f:3b:a3:25:6f:d6:
         72:e2:e6:6b:8b:9a:b3:ff:80:9d:df:b3:30:30:59:9f:30:e1:
         0c:17:1f:89:79:df:ee:48:84:b9:6c:57:2d:eb:40:d3:7b:18:
         d5:44:b7:62:03:86:26:b4:d4:51:1c:12:32:e4:9c:12:57:d6:
         f0:a9:c5:17:80:53:8f:a0:96:e4:a1:83:f0:2a:7d:f9:76:d9:
         a8:09:8f:9a:53:7a:60:16:f8:aa:51:88:2e:ab:ab:41:79:ff:
         43:a4:73:2c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUVBNpjKSPv9Sq7wrLpEKs0mAu7gAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY0RjA1QkRCOEJFOThDODZFQzNCQTJDMTA3RDM4MjQ2
ODY3MzY5NTAeFw0yNDA2MjgwNDI3MTdaFw0yNTA2MjcwNDMyMTdaMDMxMTAvBgNV
BAMTKEQ5OUVFQzZGMEMwNzkzQkM3NEFGMUQ5QzZERjU1OEZBMzgzRDYyM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1DAmwZpK0Az5Jh4IUMssbYsjd
9rCGNldNx4DIDnNOfplCh1ENat8maTTFst5ROCpJ78EGn07eKX/pfjwz6RMUFtOn
AWVbhYOhrtOWRAwNkXNIzI4pI4pue1H/NE7cgaGNG1ZmshIc8Az/arPbdNfITQ9I
qZRVrgoYdw35L1doEd/vLwH/tXRQJCel7bbAdP8Hoo5ZwP+z4ptYw9vdANV4Oz7b
CPklO52W5MU0KAvJoIabUnvpCnXuG2zP9bkILRLOnBMPNRYYWMSNYjCqoBzACyeM
sc00jFbw8mFAHLV9oMetRSm9+SJKvp9SMhwQ9KJNcYu7IbH8U4+uXjqDb9M3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU2Z7sbwwHk7x0rx2cbfVY+jg9YjwwHwYDVR0j
BBgwFoAUT08Fvbi+mMhuw7osEH04JGhnNpUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRoc1VnUkg4bW9jWERBNUJ3U0gyVFRwRHZzQmR3cVNUNDNCRUJKZ0Vx
ajIvMC80RjRGMDVCREI4QkU5OEM4NkVDM0JBMkMxMDdEMzgyNDY4NjczNjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGNEYwNUJEQjhCRTk4Qzg2
RUMzQkEyQzEwN0QzODI0Njg2NzM2OTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0aHNVZ1JIOG1vY1hEQTVCd1NIMlRUcER2c0Jkd3FTVDQzQkVCSmdFcWoyLzAv
MzIzODMwMzQzYTMzNjI2MjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDuwMA0GCSqGSIb3DQEBCwUAA4IBAQAzOB7X
/T20AyzgoFBkAj2/lKbviJqQLMu+gEliFd+lJUGWuAjjwQNeofp7wCO0t/Va9zO9
UulLL7hy3qzKR86rlBUa2A4ZgkgKKl1Z6gEmhnbSt5HyNBnNCNz8lnlhdxv3kAXW
iXccSVqSJaV/CQ7qV03BdxBART7zS8S6FGpO16TVOmCw5NhthI5VuymhPmOAfQdd
xjX38HiPXVFvO6Mlb9Zy4uZri5qz/4Cd37MwMFmfMOEMFx+Jed/uSIS5bFct60DT
exjVRLdiA4YmtNRRHBIy5JwSV9bwqcUXgFOPoJbkoYPwKn35dtmoCY+aU3pgFviq
UYguq6tBef9DpHMs
-----END CERTIFICATE-----
Generated at Fri Jul 12 13:01:33 2024 by rpki-client on console-fra.rpki-client.org