Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a343a3a2f34382d3438203d3e20323730333035.roa
File:                     323830343a366130303a343a3a2f34382d3438203d3e20323730333035.roa (raw, json)
Hash identifier:          JhS/i1MZbAp0T6vPSELo6m1Ghq7ylbmRM+qS8XIMz/E=
Subject key identifier:   AE:B0:4C:6D:01:EC:DA:79:FA:DA:3A:6C:06:BA:7B:A9:52:C3:D3:CB
Certificate issuer:       /CN=78E0E3DA12B6955DA5A7545389B2671B15D7C570
Certificate serial:       045A9A8931963B941AF76C36B76E93C512F7A270
Authority key identifier: 78:E0:E3:DA:12:B6:95:5D:A5:A7:54:53:89:B2:67:1B:15:D7:C5:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E0E3DA12B6955DA5A7545389B2671B15D7C570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a343a3a2f34382d3438203d3e20323730333035.roa
Signing time:             Mon 29 Apr 2024 19:35:14 +0000
ROA not before:           Mon 29 Apr 2024 19:30:14 +0000
ROA not after:            Mon 28 Apr 2025 19:35:14 +0000
asID:                     270305
IP address blocks:        2804:6a00:4::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5a:9a:89:31:96:3b:94:1a:f7:6c:36:b7:6e:93:c5:12:f7:a2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E0E3DA12B6955DA5A7545389B2671B15D7C570
        Validity
            Not Before: Apr 29 19:30:14 2024 GMT
            Not After : Apr 28 19:35:14 2025 GMT
        Subject: CN=AEB04C6D01ECDA79FADA3A6C06BA7BA952C3D3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:34:80:34:17:a2:b2:c8:49:78:f8:9b:45:
                    b0:f2:77:f9:ff:46:ef:87:93:08:0a:85:01:b4:ba:
                    ed:f1:1d:c7:a8:5f:0e:29:a5:d5:39:fa:8c:06:8b:
                    a7:2a:0a:a1:2b:40:91:43:ff:76:cc:6f:3e:c3:58:
                    d0:ae:a0:c5:78:c8:78:fa:36:97:a3:00:0d:39:bc:
                    08:93:d4:61:e5:53:55:69:83:0d:62:14:da:d3:3f:
                    b7:d9:e7:79:42:93:6c:b4:bb:c4:a2:7d:1b:1f:77:
                    bd:25:67:b9:df:d1:4f:33:00:49:77:d8:03:0f:1f:
                    9b:a6:26:ee:8b:70:c8:da:a6:a4:6f:78:ec:0b:89:
                    6e:7e:41:2e:0e:33:ca:55:b2:93:0d:c7:5b:2b:18:
                    cd:cb:a8:67:0b:48:7f:ef:95:27:86:e2:ec:9b:60:
                    ca:e1:37:4b:11:8a:7f:5a:b5:9d:26:a2:69:6f:8c:
                    96:97:9e:22:bd:4e:a4:f6:64:fb:d8:e1:05:b9:11:
                    e2:59:33:ca:d1:f1:15:80:ce:6a:82:18:07:0f:cc:
                    de:40:6a:97:1b:2b:79:30:11:6e:44:92:a5:00:c0:
                    ca:8f:22:5b:3c:96:1e:c7:f7:e7:af:a8:17:fb:81:
                    7d:ea:55:4b:fb:3a:78:a0:51:4e:2c:ca:0e:27:89:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B0:4C:6D:01:EC:DA:79:FA:DA:3A:6C:06:BA:7B:A9:52:C3:D3:CB
            X509v3 Authority Key Identifier:
                keyid:78:E0:E3:DA:12:B6:95:5D:A5:A7:54:53:89:B2:67:1B:15:D7:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/78E0E3DA12B6955DA5A7545389B2671B15D7C570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E0E3DA12B6955DA5A7545389B2671B15D7C570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a343a3a2f34382d3438203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:c5:bf:2b:24:91:16:f6:a0:b4:70:4f:8f:64:56:48:cb:
         26:d3:ca:01:71:27:28:78:ca:94:43:a6:d7:41:9d:7c:53:e9:
         ab:dd:3a:ad:2a:f8:ac:e7:f8:18:7c:75:e8:73:14:41:22:ef:
         e3:de:b1:b0:99:94:3b:04:13:13:a6:2b:de:37:9a:be:47:61:
         4d:57:7d:a3:4e:ac:18:35:37:0f:fd:8f:1d:e8:a3:9b:94:ce:
         61:30:33:ad:69:41:97:50:e8:cc:54:9e:38:61:af:86:4e:2a:
         16:fa:2a:f1:7e:3f:12:99:9c:ab:18:db:8f:9d:95:8c:8d:c2:
         85:d3:46:c9:af:72:a9:1f:ad:2f:35:ec:86:91:92:0f:90:4a:
         8c:30:e3:1f:dd:0e:b3:b3:b7:24:f3:6b:c5:78:7e:ec:4c:b0:
         fc:4b:07:b8:c2:6c:e7:d2:05:5f:87:eb:ee:91:67:e8:2e:14:
         c5:7f:a2:92:8f:cd:0f:c2:33:3e:c3:f7:2f:72:67:9e:ec:15:
         e2:23:47:e5:69:be:9e:9f:7e:cc:c2:9a:22:a8:44:41:79:0f:
         ec:72:fe:6c:8f:1b:95:43:43:1d:63:4e:25:8b:93:1b:bb:f6:
         cc:2d:df:fb:65:76:ff:df:78:2f:9f:e4:18:a3:6f:9d:e6:82:
         ec:a7:91:1a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBFqaiTGWO5Qa92w2t26TxRL3onAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhFMEUzREExMkI2OTU1REE1QTc1NDUzODlCMjY3MUIx
NUQ3QzU3MDAeFw0yNDA0MjkxOTMwMTRaFw0yNTA0MjgxOTM1MTRaMDMxMTAvBgNV
BAMTKEFFQjA0QzZEMDFFQ0RBNzlGQURBM0E2QzA2QkE3QkE5NTJDM0QzQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHDSANBeisshJePibRbDyd/n/
Ru+HkwgKhQG0uu3xHceoXw4ppdU5+owGi6cqCqErQJFD/3bMbz7DWNCuoMV4yHj6
NpejAA05vAiT1GHlU1Vpgw1iFNrTP7fZ53lCk2y0u8SifRsfd70lZ7nf0U8zAEl3
2AMPH5umJu6LcMjapqRveOwLiW5+QS4OM8pVspMNx1srGM3LqGcLSH/vlSeG4uyb
YMrhN0sRin9atZ0momlvjJaXniK9TqT2ZPvY4QW5EeJZM8rR8RWAzmqCGAcPzN5A
apcbK3kwEW5EkqUAwMqPIls8lh7H9+evqBf7gX3qVUv7OnigUU4syg4niYmNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrrBMbQHs2nn62jpsBrp7qVLD08swHwYDVR0j
BBgwFoAUeODj2hK2lV2lp1RTibJnGxXXxXAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzAvNzhFMEUzREExMkI2OTU1REE1QTc1NDUzODlCMjY3MUIxNUQ3QzU3MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83OEUwRTNEQTEyQjY5NTVEQTVB
NzU0NTM4OUIyNjcxQjE1RDdDNTcwLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
OEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtxLzAvMzIz
ODMwMzQzYTM2NjEzMDMwM2EzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzcz
MDMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACgEagAABDANBgkqhkiG9w0BAQsFAAOCAQEAYn7F
vyskkRb2oLRwT49kVkjLJtPKAXEnKHjKlEOm10GdfFPpq906rSr4rOf4GHx16HMU
QSLv496xsJmUOwQTE6Yr3jeavkdhTVd9o06sGDU3D/2PHeijm5TOYTAzrWlBl1Do
zFSeOGGvhk4qFvoq8X4/Epmcqxjbj52VjI3ChdNGya9yqR+tLzXshpGSD5BKjDDj
H90Os7O3JPNrxXh+7Eyw/EsHuMJs59IFX4fr7pFn6C4UxX+iko/ND8IzPsP3L3Jn
nuwV4iNH5Wm+np9+zMKaIqhEQXkP7HL+bI8blUNDHWNOJYuTG7v2zC3f+2V2/994
L5/kGKNvneaC7KeRGg==
-----END CERTIFICATE-----
Generated at Fri Aug 23 07:13:25 2024 by rpki-client on console-ams.rpki-client.org