Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
File:                     323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (raw, json)
Hash identifier:          q/koYfjUF8AnVTEggF2v/bNENIq5ytgPKwg5OQgEED0=
Subject key identifier:   91:9D:D2:A5:5C:9E:A8:93:AD:DC:15:D5:41:BB:F3:6E:8F:90:09:2C
Certificate issuer:       /CN=5F50A6A460D5319BEA5DD872C05A27993FA41793
Certificate serial:       149B27104EF439F1E7993323D3F318E9D5141D96
Authority key identifier: 5F:50:A6:A4:60:D5:31:9B:EA:5D:D8:72:C0:5A:27:99:3F:A4:17:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
Signing time:             Thu 10 Oct 2024 00:35:50 +0000
ROA not before:           Thu 10 Oct 2024 00:30:50 +0000
ROA not after:            Thu 09 Oct 2025 00:35:50 +0000
asID:                     273728
IP address blocks:        2804:8b5c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9b:27:10:4e:f4:39:f1:e7:99:33:23:d3:f3:18:e9:d5:14:1d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F50A6A460D5319BEA5DD872C05A27993FA41793
        Validity
            Not Before: Oct 10 00:30:50 2024 GMT
            Not After : Oct  9 00:35:50 2025 GMT
        Subject: CN=919DD2A55C9EA893ADDC15D541BBF36E8F90092C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:2a:0e:51:68:9b:91:9c:58:54:6e:b0:a8:
                    12:24:a9:7c:ad:f4:b1:21:4b:fe:d5:c6:0b:94:c9:
                    94:2a:f0:51:58:a8:e7:ab:c4:a0:ba:d9:5a:59:96:
                    6f:4b:ec:cd:86:30:d6:37:63:02:8e:fb:8c:9f:ea:
                    56:54:e7:19:27:39:51:48:f0:4c:10:e2:d8:28:ae:
                    cd:f8:84:b7:e6:02:38:c4:30:64:c6:64:71:05:e5:
                    c2:a4:15:f1:dc:85:93:cd:94:aa:57:8d:4c:88:7b:
                    4a:55:8e:8c:7c:42:c4:2d:05:66:9c:ff:e7:1e:86:
                    d9:df:26:2b:be:5c:84:61:b8:7e:aa:98:72:db:cc:
                    3b:24:a8:30:e4:75:a9:de:2c:dd:c3:c4:77:aa:4f:
                    88:80:de:e6:a0:7b:b6:53:08:01:91:4c:29:0f:f4:
                    ce:c7:45:8a:23:c8:79:1d:60:a9:c1:41:32:40:27:
                    5f:c9:da:f0:b5:c3:39:d3:cd:bb:1b:22:81:87:3f:
                    9d:af:7c:c4:50:61:cf:3f:f6:38:51:ef:93:b8:e8:
                    3f:fc:6e:1f:41:98:b8:6f:30:09:f0:0d:98:79:ca:
                    bd:72:97:57:92:f6:1f:cb:df:63:2f:13:89:35:64:
                    ff:fb:36:3e:8e:36:43:50:2f:a7:8c:3d:2c:c1:53:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9D:D2:A5:5C:9E:A8:93:AD:DC:15:D5:41:BB:F3:6E:8F:90:09:2C
            X509v3 Authority Key Identifier:
                keyid:5F:50:A6:A4:60:D5:31:9B:EA:5D:D8:72:C0:5A:27:99:3F:A4:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2d:fb:60:4d:69:bb:94:3e:3f:a0:9b:3b:56:63:a1:f1:9d:e1:
         b9:85:dd:cc:ee:8a:5d:20:04:26:6b:0d:57:2b:e7:d7:76:5f:
         ba:64:63:28:da:44:45:7e:7b:52:ae:1a:4a:b6:3e:89:7b:3e:
         56:b4:a1:d6:ac:3b:f0:b4:bc:9f:e7:fc:f3:36:53:f9:1f:12:
         b4:12:30:1c:95:50:9d:72:5f:f0:a0:72:e7:ae:5a:8f:68:61:
         b6:5a:82:db:ee:5a:44:0b:99:ab:87:75:c7:a6:a0:f0:d1:22:
         43:e2:85:9b:04:ec:b9:0b:a2:60:99:f3:c2:d5:3b:01:b0:98:
         bc:ef:d6:f9:31:03:70:d1:33:e9:3a:48:8c:1c:70:07:53:28:
         2e:1f:71:87:40:e5:86:01:92:76:4c:95:8c:42:c8:36:8e:c7:
         b3:2e:89:ea:59:8a:99:36:ff:0b:71:ad:68:0c:3b:1a:bd:fb:
         bf:e5:96:9b:6d:73:df:10:fc:01:c2:c6:7b:d4:aa:87:90:4b:
         e0:2c:5e:4d:fa:60:5f:fd:ea:2e:c8:3d:7f:d4:a1:98:72:83:
         40:52:5e:6e:d7:e5:df:b3:3b:ca:dd:30:bc:a1:67:c1:d3:c5:
         42:dc:17:d1:41:8a:29:97:47:8b:13:3f:35:d1:45:4d:12:fe:
         95:2f:0a:a2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFJsnEE70OfHnmTMj0/MY6dUUHZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY1MEE2QTQ2MEQ1MzE5QkVBNUREODcyQzA1QTI3OTkz
RkE0MTc5MzAeFw0yNDEwMTAwMDMwNTBaFw0yNTEwMDkwMDM1NTBaMDMxMTAvBgNV
BAMTKDkxOUREMkE1NUM5RUE4OTNBRERDMTVENTQxQkJGMzZFOEY5MDA5MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nCoOUWibkZxYVG6wqBIkqXyt
9LEhS/7VxguUyZQq8FFYqOerxKC62VpZlm9L7M2GMNY3YwKO+4yf6lZU5xknOVFI
8EwQ4tgors34hLfmAjjEMGTGZHEF5cKkFfHchZPNlKpXjUyIe0pVjox8QsQtBWac
/+cehtnfJiu+XIRhuH6qmHLbzDskqDDkdaneLN3DxHeqT4iA3uage7ZTCAGRTCkP
9M7HRYojyHkdYKnBQTJAJ1/J2vC1wznTzbsbIoGHP52vfMRQYc8/9jhR75O46D/8
bh9BmLhvMAnwDZh5yr1yl1eS9h/L32MvE4k1ZP/7Nj6ONkNQL6eMPSzBU0pHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUkZ3SpVyeqJOt3BXVQbvzbo+QCSwwHwYDVR0j
BBgwFoAUX1CmpGDVMZvqXdhywFonmT+kF5MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR
Wm8vMS81RjUwQTZBNDYwRDUzMTlCRUE1REQ4NzJDMDVBMjc5OTNGQTQxNzkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGNTBBNkE0NjBENTMxOUJF
QTVERDg3MkMwNUEyNzk5M0ZBNDE3OTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzEv
MzIzODMwMzQzYTM4NjIzNTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMzM3MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEi1yAMA0GCSqGSIb3DQEBCwUA
A4IBAQAt+2BNabuUPj+gmztWY6HxneG5hd3M7opdIAQmaw1XK+fXdl+6ZGMo2kRF
fntSrhpKtj6Jez5WtKHWrDvwtLyf5/zzNlP5HxK0EjAclVCdcl/woHLnrlqPaGG2
WoLb7lpEC5mrh3XHpqDw0SJD4oWbBOy5C6JgmfPC1TsBsJi879b5MQNw0TPpOkiM
HHAHUyguH3GHQOWGAZJ2TJWMQsg2jsezLonqWYqZNv8Lca1oDDsavfu/5ZabbXPf
EPwBwsZ71KqHkEvgLF5N+mBf/eouyD1/1KGYcoNAUl5u1+XfszvK3TC8oWfB08VC
3BfRQYopl0eLEz810UVNEv6VLwqi
-----END CERTIFICATE-----
Generated at Fri Oct 18 19:03:24 2024 by rpki-client on console-ams.rpki-client.org