Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          meo4U1ZbWiIi78LmdjGhJdHVq41EgvLKnTqOHdnpZAw=
Subject key identifier:   6C:7F:EB:EB:2E:B5:4B:D7:FF:AE:A9:45:34:9B:EF:1C:58:A7:69:F8
Certificate issuer:       /CN=976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5
Certificate serial:       4A71A23FCF753EB58A0D9BA5559C807B7ACA0071
Authority key identifier: 97:6D:8A:1B:E7:F7:63:99:85:F6:A8:FA:E6:D3:E9:38:76:46:F1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Tue 29 Oct 2024 15:26:23 +0000
ROA not before:           Tue 29 Oct 2024 15:21:23 +0000
ROA not after:            Tue 28 Oct 2025 15:26:23 +0000
asID:                     273728
IP address blocks:        2804:8b5c:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:71:a2:3f:cf:75:3e:b5:8a:0d:9b:a5:55:9c:80:7b:7a:ca:00:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5
        Validity
            Not Before: Oct 29 15:21:23 2024 GMT
            Not After : Oct 28 15:26:23 2025 GMT
        Subject: CN=6C7FEBEB2EB54BD7FFAEA945349BEF1C58A769F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9a:4c:2f:d8:84:c8:f5:ed:89:21:ef:7c:2f:
                    df:cb:42:cd:71:53:1a:31:34:4b:96:1e:1b:2b:dc:
                    ad:30:38:8d:63:93:58:6d:2f:73:84:2b:5a:77:80:
                    24:d8:ed:74:b5:be:0f:33:d8:1c:0b:57:34:2d:b2:
                    c3:57:2b:bc:89:dd:a0:32:9f:5f:af:5b:3a:cc:5f:
                    2a:a3:06:a6:e5:52:da:e2:af:a1:32:72:71:ff:be:
                    a8:54:9d:08:b7:90:db:23:86:8b:8e:3c:61:d0:03:
                    c0:55:5a:9d:64:1f:39:9c:6e:5d:b1:9c:8c:6a:5d:
                    5e:e0:14:8f:ac:bc:18:e7:34:24:a9:69:d3:a6:83:
                    1f:d5:04:44:f3:43:a8:5a:a5:3c:17:e5:ef:42:fc:
                    0e:26:15:09:7e:11:f9:86:01:9d:f1:88:7d:5d:12:
                    c4:c8:a3:fa:06:86:37:74:b5:2c:60:19:8f:57:a9:
                    86:aa:03:43:66:46:3e:51:ba:1f:2e:52:ee:de:ae:
                    61:91:7c:3e:44:97:48:03:27:3c:e1:25:85:40:5f:
                    04:d8:24:d6:49:4a:e3:73:24:be:c2:75:cd:f2:8a:
                    de:98:99:ed:e7:53:99:05:c9:00:82:7f:6c:bf:69:
                    18:e7:22:d1:be:08:ba:ea:74:37:2e:94:33:a6:00:
                    4a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7F:EB:EB:2E:B5:4B:D7:FF:AE:A9:45:34:9B:EF:1C:58:A7:69:F8
            X509v3 Authority Key Identifier:
                keyid:97:6D:8A:1B:E7:F7:63:99:85:F6:A8:FA:E6:D3:E9:38:76:46:F1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:98:62:7d:51:92:cc:79:dd:c9:cc:cd:10:7c:eb:0f:cb:
         d1:f3:56:0d:fa:45:94:06:57:0d:2f:a4:c1:ca:8d:0b:fb:e0:
         15:17:c7:22:f7:65:20:6d:cf:8e:dd:8e:d9:ad:39:9e:ae:77:
         a5:a4:89:77:bb:5c:87:5f:90:73:6f:4e:23:10:97:3c:06:0d:
         cc:23:58:23:f1:0a:f4:38:f6:27:be:2b:92:23:8a:b9:39:16:
         4f:87:d1:66:7c:67:5f:d8:13:64:c7:39:31:b7:5a:1d:29:20:
         58:35:15:fb:98:ab:2f:0b:06:af:7d:0a:a0:9f:ea:b9:37:04:
         05:ce:b5:29:24:7b:9c:db:2d:b5:01:9b:3b:7d:21:56:52:e3:
         fd:84:06:80:94:96:31:21:e4:5b:f1:1e:c5:50:d9:0f:c8:ab:
         18:89:23:b4:82:1e:16:07:d1:23:1b:b3:47:ca:9f:11:a7:fa:
         76:6a:7a:90:46:1f:1a:ec:0a:b2:07:9b:30:72:62:4b:88:d8:
         76:53:0e:ea:80:71:34:05:c9:c3:9e:ce:f8:07:7b:2f:65:c6:
         78:67:8c:a3:f7:b7:74:7c:6e:04:2b:84:98:ef:d9:e2:d1:19:
         f9:3d:73:28:cf:85:47:0c:9d:71:25:99:16:8f:c2:0b:68:18:
         d6:a8:86:1c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSnGiP891PrWKDZulVZyAe3rKAHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc2RDhBMUJFN0Y3NjM5OTg1RjZBOEZBRTZEM0U5Mzg3
NjQ2RjFBNTAeFw0yNDEwMjkxNTIxMjNaFw0yNTEwMjgxNTI2MjNaMDMxMTAvBgNV
BAMTKDZDN0ZFQkVCMkVCNTRCRDdGRkFFQTk0NTM0OUJFRjFDNThBNzY5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDimkwv2ITI9e2JIe98L9/LQs1x
UxoxNEuWHhsr3K0wOI1jk1htL3OEK1p3gCTY7XS1vg8z2BwLVzQtssNXK7yJ3aAy
n1+vWzrMXyqjBqblUtrir6EycnH/vqhUnQi3kNsjhouOPGHQA8BVWp1kHzmcbl2x
nIxqXV7gFI+svBjnNCSpadOmgx/VBETzQ6hapTwX5e9C/A4mFQl+EfmGAZ3xiH1d
EsTIo/oGhjd0tSxgGY9XqYaqA0NmRj5Ruh8uUu7ermGRfD5El0gDJzzhJYVAXwTY
JNZJSuNzJL7Cdc3yit6Yme3nU5kFyQCCf2y/aRjnItG+CLrqdDculDOmAEopAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbH/r6y61S9f/rqlFNJvvHFinafgwHwYDVR0j
BBgwFoAUl22KG+f3Y5mF9qj65tPpOHZG8aUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR
Wm8vMC85NzZEOEExQkU3Rjc2Mzk5ODVGNkE4RkFFNkQzRTkzODc2NDZGMUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3NkQ4QTFCRTdGNzYzOTk4
NUY2QThGQUU2RDNFOTM4NzY0NkYxQTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzAv
MzIzODMwMzQzYTM4NjIzNTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMzM3MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEi1yAMA0GCSqGSIb3DQEBCwUA
A4IBAQAuNZhifVGSzHndyczNEHzrD8vR81YN+kWUBlcNL6TByo0L++AVF8ci92Ug
bc+O3Y7ZrTmernelpIl3u1yHX5Bzb04jEJc8Bg3MI1gj8Qr0OPYnviuSI4q5ORZP
h9FmfGdf2BNkxzkxt1odKSBYNRX7mKsvCwavfQqgn+q5NwQFzrUpJHuc2y21AZs7
fSFWUuP9hAaAlJYxIeRb8R7FUNkPyKsYiSO0gh4WB9EjG7NHyp8Rp/p2anqQRh8a
7AqyB5swcmJLiNh2Uw7qgHE0BcnDns74B3svZcZ4Z4yj97d0fG4EK4SY79ni0Rn5
PXMoz4VHDJ1xJZkWj8ILaBjWqIYc
-----END CERTIFICATE-----
Generated at Tue Nov 19 13:48:21 2024 by rpki-client on console-ams.rpki-client.org