Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          0htWo2mQ7e0eUvLhrpWtBYj4GCmPy/cx/GSFn0WpSqM=
Subject key identifier:   94:68:7A:E8:5D:DC:7E:A6:D9:55:F0:81:23:39:84:98:F5:05:60:23
Certificate issuer:       /CN=5F50A6A460D5319BEA5DD872C05A27993FA41793
Certificate serial:       5AFE0AF7E9BDEE56AD3172851609DB306BB4CD97
Authority key identifier: 5F:50:A6:A4:60:D5:31:9B:EA:5D:D8:72:C0:5A:27:99:3F:A4:17:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Thu 10 Oct 2024 00:35:51 +0000
ROA not before:           Thu 10 Oct 2024 00:30:51 +0000
ROA not after:            Thu 09 Oct 2025 00:35:51 +0000
asID:                     273728
IP address blocks:        2804:8b5c:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fe:0a:f7:e9:bd:ee:56:ad:31:72:85:16:09:db:30:6b:b4:cd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F50A6A460D5319BEA5DD872C05A27993FA41793
        Validity
            Not Before: Oct 10 00:30:51 2024 GMT
            Not After : Oct  9 00:35:51 2025 GMT
        Subject: CN=94687AE85DDC7EA6D955F08123398498F5056023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:08:c5:c5:49:6e:88:e5:72:91:7a:b1:dd:b9:
                    7c:2b:3d:42:fb:b3:ce:5f:75:7f:94:95:a6:d2:9a:
                    39:3f:8a:f6:ae:69:ea:d5:39:6d:d8:4c:3d:26:08:
                    ec:e3:e2:41:42:16:7d:cc:cc:e8:d1:99:9e:89:3f:
                    22:6a:a3:21:4d:a1:17:2d:5e:ef:a5:59:4c:bd:41:
                    a9:11:4c:f4:e3:a4:e7:e0:e7:6f:c5:b7:6a:7d:aa:
                    c5:53:07:af:ee:37:d4:1e:fe:59:3b:24:15:1a:88:
                    65:0c:2f:00:12:b1:09:ba:e2:8e:ac:fe:4d:c0:00:
                    86:8b:23:9d:12:58:ea:e8:f5:ce:a6:a0:6a:8c:0f:
                    c4:9a:07:bc:c5:ee:a6:d6:76:ba:44:78:c1:81:13:
                    21:da:86:4c:5d:98:56:8e:52:9f:00:cc:4d:84:b7:
                    ee:4a:91:98:0f:40:54:e7:ce:fd:62:3f:02:52:3f:
                    db:60:1e:1c:b2:c9:16:71:b9:c8:6a:75:76:ae:26:
                    45:27:4b:4b:51:91:17:37:13:61:5f:26:42:d6:ee:
                    4c:91:6c:a8:c9:57:75:c5:33:85:db:16:2e:8d:6f:
                    3e:49:6a:8a:a2:d1:ea:ee:6f:ad:bb:b8:19:dd:0e:
                    13:69:d3:c0:3e:5a:fe:36:26:80:66:ef:f1:d6:06:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:68:7A:E8:5D:DC:7E:A6:D9:55:F0:81:23:39:84:98:F5:05:60:23
            X509v3 Authority Key Identifier:
                keyid:5F:50:A6:A4:60:D5:31:9B:EA:5D:D8:72:C0:5A:27:99:3F:A4:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4f:81:70:7f:f0:fb:85:0a:a3:6b:4c:77:c5:ae:d8:23:f3:01:
         e9:95:ba:df:e9:4e:a1:d5:ba:52:1e:46:b5:1d:ed:0d:e4:b0:
         7c:5c:fd:aa:30:b1:9a:1c:e3:a9:35:7e:be:fc:f5:98:63:8c:
         df:b4:a0:54:d6:52:86:58:b2:63:dc:3b:73:ff:60:1c:e0:11:
         79:df:2c:bd:33:66:11:7f:ad:8c:69:9f:e1:ca:cf:1e:54:05:
         db:b0:df:eb:02:e0:22:c2:00:94:56:1f:0d:89:fb:8c:4c:4f:
         1c:e7:35:f9:b8:99:10:37:3a:dd:d2:10:da:1a:d1:d0:46:ac:
         62:45:eb:f3:38:8e:96:7c:78:46:48:9e:09:b9:d1:7d:22:98:
         48:c1:d6:8d:41:09:69:ac:8e:18:d2:13:7f:9f:35:52:fe:46:
         24:51:a2:99:00:a2:27:e4:d9:5f:ea:5d:f6:fb:37:68:a2:95:
         e1:fa:ad:2b:44:93:b4:f2:61:4e:93:6a:08:e5:75:3b:74:6a:
         ce:6a:28:d9:61:12:fa:cf:ab:cf:28:ec:65:03:a8:c3:b1:db:
         34:fb:5b:bb:a6:7c:78:ee:77:09:a2:9b:91:88:50:b0:9e:21:
         8f:0a:52:e0:56:57:76:a1:41:d4:a2:64:ec:4d:6b:c9:39:9f:
         7d:18:4d:4a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWv4K9+m97latMXKFFgnbMGu0zZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY1MEE2QTQ2MEQ1MzE5QkVBNUREODcyQzA1QTI3OTkz
RkE0MTc5MzAeFw0yNDEwMTAwMDMwNTFaFw0yNTEwMDkwMDM1NTFaMDMxMTAvBgNV
BAMTKDk0Njg3QUU4NUREQzdFQTZEOTU1RjA4MTIzMzk4NDk4RjUwNTYwMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrCMXFSW6I5XKRerHduXwrPUL7
s85fdX+UlabSmjk/ivauaerVOW3YTD0mCOzj4kFCFn3MzOjRmZ6JPyJqoyFNoRct
Xu+lWUy9QakRTPTjpOfg52/Ft2p9qsVTB6/uN9Qe/lk7JBUaiGUMLwASsQm64o6s
/k3AAIaLI50SWOro9c6moGqMD8SaB7zF7qbWdrpEeMGBEyHahkxdmFaOUp8AzE2E
t+5KkZgPQFTnzv1iPwJSP9tgHhyyyRZxuchqdXauJkUnS0tRkRc3E2FfJkLW7kyR
bKjJV3XFM4XbFi6Nbz5Jaoqi0erub627uBndDhNp08A+Wv42JoBm7/HWBulBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUlGh66F3cfqbZVfCBIzmEmPUFYCMwHwYDVR0j
BBgwFoAUX1CmpGDVMZvqXdhywFonmT+kF5MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR
Wm8vMS81RjUwQTZBNDYwRDUzMTlCRUE1REQ4NzJDMDVBMjc5OTNGQTQxNzkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGNTBBNkE0NjBENTMxOUJF
QTVERDg3MkMwNUEyNzk5M0ZBNDE3OTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzEv
MzIzODMwMzQzYTM4NjIzNTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMzM3MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEi1zAMA0GCSqGSIb3DQEBCwUA
A4IBAQBPgXB/8PuFCqNrTHfFrtgj8wHplbrf6U6h1bpSHka1He0N5LB8XP2qMLGa
HOOpNX6+/PWYY4zftKBU1lKGWLJj3Dtz/2Ac4BF53yy9M2YRf62MaZ/hys8eVAXb
sN/rAuAiwgCUVh8NifuMTE8c5zX5uJkQNzrd0hDaGtHQRqxiRevzOI6WfHhGSJ4J
udF9IphIwdaNQQlprI4Y0hN/nzVS/kYkUaKZAKIn5Nlf6l32+zdoopXh+q0rRJO0
8mFOk2oI5XU7dGrOaijZYRL6z6vPKOxlA6jDsds0+1u7pnx47ncJopuRiFCwniGP
ClLgVld2oUHUomTsTWvJOZ99GE1K
-----END CERTIFICATE-----
Generated at Fri Oct 18 19:03:24 2024 by rpki-client on console-ams.rpki-client.org