Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          vBcYD1vCVQsYnyEZ4bJUDt3G9PYe9O+WfucBqbzYOCA=
Subject key identifier:   85:8F:EE:78:81:B4:9A:4F:A7:5A:57:A1:F7:BD:9E:98:1F:B9:9A:8E
Certificate issuer:       /CN=5F50A6A460D5319BEA5DD872C05A27993FA41793
Certificate serial:       7678258FAAE08553D215A95C03304DDB633B2D44
Authority key identifier: 5F:50:A6:A4:60:D5:31:9B:EA:5D:D8:72:C0:5A:27:99:3F:A4:17:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Thu 10 Oct 2024 00:35:50 +0000
ROA not before:           Thu 10 Oct 2024 00:30:50 +0000
ROA not after:            Thu 09 Oct 2025 00:35:50 +0000
asID:                     273728
IP address blocks:        2804:8b5c::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:78:25:8f:aa:e0:85:53:d2:15:a9:5c:03:30:4d:db:63:3b:2d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F50A6A460D5319BEA5DD872C05A27993FA41793
        Validity
            Not Before: Oct 10 00:30:50 2024 GMT
            Not After : Oct  9 00:35:50 2025 GMT
        Subject: CN=858FEE7881B49A4FA75A57A1F7BD9E981FB99A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:f3:4d:bc:d8:52:2d:0f:12:7c:28:bc:a2:
                    43:0b:79:a1:df:ee:37:36:ef:b3:7f:d7:01:04:08:
                    e0:29:2a:08:16:9a:e1:0b:fd:ff:87:b7:bf:67:df:
                    e3:c6:db:27:9c:de:41:a5:fd:5e:8c:04:9e:9f:53:
                    61:07:0a:f5:50:9a:16:7f:c3:ff:87:6b:2d:3a:39:
                    97:9c:e7:1c:1f:ce:cf:de:d2:60:94:1f:4d:51:13:
                    f6:98:75:f2:e4:0d:b6:f9:c8:c2:91:33:d8:12:25:
                    ab:7d:95:33:b7:ee:33:7d:43:89:ba:4f:53:c1:b9:
                    de:e7:47:4d:ca:30:66:87:1c:1c:8a:c6:41:06:cc:
                    53:29:f5:b5:4b:3e:82:fb:b0:de:8f:34:15:05:e2:
                    e2:ea:12:e9:49:fb:38:08:c2:bd:40:d2:1b:86:b1:
                    e1:86:77:71:6e:c1:fa:60:22:8f:9e:6a:13:a3:50:
                    e9:b4:0d:34:bc:0c:41:f9:c7:67:f2:6a:4e:6a:9f:
                    b6:43:bd:e7:74:7c:16:62:69:ad:73:30:51:29:e3:
                    5e:32:30:ac:6a:58:91:73:06:5d:9c:32:04:39:22:
                    57:3d:bc:43:17:53:5a:73:32:ee:97:30:4b:06:c6:
                    c7:3d:ac:48:9b:14:56:57:4a:95:0f:51:7d:e8:ea:
                    4c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8F:EE:78:81:B4:9A:4F:A7:5A:57:A1:F7:BD:9E:98:1F:B9:9A:8E
            X509v3 Authority Key Identifier:
                keyid:5F:50:A6:A4:60:D5:31:9B:EA:5D:D8:72:C0:5A:27:99:3F:A4:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:bf:8d:f6:95:d1:11:4d:f8:a6:b9:66:8c:ec:b7:e8:76:7c:
         17:37:d4:2c:b4:63:e7:75:b8:bb:a9:3f:a3:30:e4:37:fb:b8:
         f1:47:f1:24:43:e8:dd:63:8c:45:26:b1:9f:27:81:01:fe:93:
         63:3d:81:c0:68:55:83:b8:e0:e8:71:df:00:e1:4f:ca:fc:a1:
         d0:91:24:06:77:07:76:f3:c3:68:c0:95:d3:8d:77:c0:c0:34:
         ee:e1:b3:4a:8d:e4:aa:a3:85:a7:48:ee:11:bc:45:b8:86:b4:
         72:5a:cb:a3:90:09:ce:82:4d:07:98:8a:0e:95:7c:47:91:73:
         64:21:43:31:82:2f:16:e7:9c:ef:e7:57:b5:6a:8e:f0:41:07:
         a7:8b:6a:67:97:5b:8f:b5:0f:3f:9c:fa:32:1b:f3:f3:98:96:
         58:9a:e7:e5:3c:12:3f:35:ec:e4:bf:96:cc:22:ee:6a:27:ef:
         0c:32:a6:b7:99:74:96:f9:8b:60:8b:69:50:0a:8a:a5:ad:79:
         1a:ba:80:fe:0e:6c:13:ad:fd:0e:5b:77:ec:67:15:9e:e0:46:
         c0:6c:9b:1f:43:a9:01:6c:48:99:e3:af:db:de:a0:c9:b1:b1:
         75:90:7e:d7:0c:0f:b4:cc:a7:63:95:06:7c:1f:84:f5:71:79:
         0c:00:5c:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdnglj6rghVPSFalcAzBN22M7LUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY1MEE2QTQ2MEQ1MzE5QkVBNUREODcyQzA1QTI3OTkz
RkE0MTc5MzAeFw0yNDEwMTAwMDMwNTBaFw0yNTEwMDkwMDM1NTBaMDMxMTAvBgNV
BAMTKDg1OEZFRTc4ODFCNDlBNEZBNzVBNTdBMUY3QkQ5RTk4MUZCOTlBOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcsPNNvNhSLQ8SfCi8okMLeaHf
7jc277N/1wEECOApKggWmuEL/f+Ht79n3+PG2yec3kGl/V6MBJ6fU2EHCvVQmhZ/
w/+Hay06OZec5xwfzs/e0mCUH01RE/aYdfLkDbb5yMKRM9gSJat9lTO37jN9Q4m6
T1PBud7nR03KMGaHHByKxkEGzFMp9bVLPoL7sN6PNBUF4uLqEulJ+zgIwr1A0huG
seGGd3FuwfpgIo+eahOjUOm0DTS8DEH5x2fyak5qn7ZDved0fBZiaa1zMFEp414y
MKxqWJFzBl2cMgQ5Ilc9vEMXU1pzMu6XMEsGxsc9rEibFFZXSpUPUX3o6kx7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhY/ueIG0mk+nWleh972emB+5mo4wHwYDVR0j
BBgwFoAUX1CmpGDVMZvqXdhywFonmT+kF5MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR
Wm8vMS81RjUwQTZBNDYwRDUzMTlCRUE1REQ4NzJDMDVBMjc5OTNGQTQxNzkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGNTBBNkE0NjBENTMxOUJF
QTVERDg3MkMwNUEyNzk5M0ZBNDE3OTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzEv
MzIzODMwMzQzYTM4NjIzNTYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMz
MzczMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKASLXAAwDQYJKoZIhvcNAQELBQADggEBACi/jfaV
0RFN+Ka5Zozst+h2fBc31Cy0Y+d1uLupP6Mw5Df7uPFH8SRD6N1jjEUmsZ8ngQH+
k2M9gcBoVYO44Ohx3wDhT8r8odCRJAZ3B3bzw2jAldONd8DANO7hs0qN5KqjhadI
7hG8RbiGtHJay6OQCc6CTQeYig6VfEeRc2QhQzGCLxbnnO/nV7VqjvBBB6eLameX
W4+1Dz+c+jIb8/OYllia5+U8Ej817OS/lswi7mon7wwypreZdJb5i2CLaVAKiqWt
eRq6gP4ObBOt/Q5bd+xnFZ7gRsBsmx9DqQFsSJnjr9veoMmxsXWQftcMD7TMp2OV
BnwfhPVxeQwAXNc=
-----END CERTIFICATE-----
Generated at Fri Oct 18 17:45:12 2024 by rpki-client on console-fra.rpki-client.org