Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/2/323830343a353561303a3a2f33322d3438203d3e20323637393436.roa
File:                     323830343a353561303a3a2f33322d3438203d3e20323637393436.roa (raw, json)
Hash identifier:          o96e7s0StvkUZauI69RyrfTWIPqViZoZygsYJevjbB8=
Subject key identifier:   E0:C8:3F:0C:B8:18:1F:87:33:88:B9:73:70:77:56:FC:3D:D5:21:23
Certificate issuer:       /CN=D6583CFEF699DC8C88F145658617A79CD61A3138
Certificate serial:       14DA07D95A333F355F85FA102730294A1099C8EE
Authority key identifier: D6:58:3C:FE:F6:99:DC:8C:88:F1:45:65:86:17:A7:9C:D6:1A:31:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6583CFEF699DC8C88F145658617A79CD61A3138.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/2/323830343a353561303a3a2f33322d3438203d3e20323637393436.roa
Signing time:             Thu 04 Apr 2024 16:53:50 +0000
ROA not before:           Thu 04 Apr 2024 16:48:50 +0000
ROA not after:            Thu 03 Apr 2025 16:53:50 +0000
asID:                     267946
IP address blocks:        2804:55a0::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:da:07:d9:5a:33:3f:35:5f:85:fa:10:27:30:29:4a:10:99:c8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6583CFEF699DC8C88F145658617A79CD61A3138
        Validity
            Not Before: Apr  4 16:48:50 2024 GMT
            Not After : Apr  3 16:53:50 2025 GMT
        Subject: CN=E0C83F0CB8181F873388B973707756FC3DD52123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:6b:62:48:ed:06:ea:16:ca:1c:ca:df:35:
                    7f:f8:14:cf:3c:55:66:11:75:76:95:4f:07:73:86:
                    a4:0f:26:4f:1f:35:de:cb:0d:b0:7a:8f:bf:c4:61:
                    ca:b1:cc:e4:7b:f9:75:26:4e:f4:75:be:ab:4a:3e:
                    49:03:ad:07:ee:80:ca:b6:4a:29:57:9d:ec:90:1c:
                    b5:f4:bb:ed:71:74:61:33:d2:be:97:f6:b7:cf:6a:
                    e1:fc:56:5e:93:35:5f:c4:5e:c3:5c:ce:21:07:30:
                    3e:e9:8e:89:cf:ca:3f:38:93:ed:25:e7:a6:d6:22:
                    8c:dc:31:7f:a4:26:02:94:da:08:17:ef:a9:dd:2c:
                    5b:a0:2a:ab:66:48:19:96:26:3a:e0:1a:f3:73:a2:
                    08:79:e4:e3:5f:60:a7:98:d2:21:c4:fd:70:c2:53:
                    3a:4b:aa:27:d6:2b:ef:99:12:7d:a6:52:a4:00:74:
                    3d:89:e8:ce:c9:31:51:e7:db:1c:f8:7d:99:2b:ac:
                    90:7a:97:f0:9f:0b:38:b3:d5:f4:2b:90:92:57:ff:
                    4c:6d:42:e8:9b:d6:2c:1d:a5:9f:1e:03:75:80:c9:
                    c7:d2:a9:07:f1:af:47:80:48:26:a7:25:0a:5b:9f:
                    fb:fc:6e:4e:c0:ee:88:71:81:f1:b5:db:3a:ca:04:
                    f1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C8:3F:0C:B8:18:1F:87:33:88:B9:73:70:77:56:FC:3D:D5:21:23
            X509v3 Authority Key Identifier:
                keyid:D6:58:3C:FE:F6:99:DC:8C:88:F1:45:65:86:17:A7:9C:D6:1A:31:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/2/D6583CFEF699DC8C88F145658617A79CD61A3138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6583CFEF699DC8C88F145658617A79CD61A3138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/2/323830343a353561303a3a2f33322d3438203d3e20323637393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:56:6c:17:f3:33:36:ab:97:64:bb:a1:45:05:10:67:61:32:
         31:5b:4b:49:ac:b8:73:d2:55:be:59:29:86:40:15:7d:aa:80:
         0c:f3:f1:97:48:df:f1:6b:31:48:49:94:5f:b2:a9:00:c7:d9:
         6d:6f:ce:77:d3:5b:fe:7a:dc:05:c6:f0:01:91:bf:72:cc:d4:
         85:10:4e:32:9e:01:aa:29:84:68:bc:dc:1d:08:92:29:f8:f7:
         07:1f:97:e4:30:cd:78:66:4c:da:0f:7d:dd:2a:30:4a:b2:cb:
         7e:84:ec:ba:48:18:6b:61:d1:54:ce:80:b8:41:bc:68:5a:ee:
         7b:b7:eb:f2:26:b4:f9:f3:d9:b5:04:c0:9f:1c:11:b8:ac:43:
         2a:1f:c0:c9:f9:50:11:97:b3:f9:8a:b6:2f:59:36:9a:1f:26:
         6d:90:57:5e:23:64:17:5f:41:24:5f:aa:1d:b6:2e:c9:e7:c8:
         a2:22:98:f3:b6:97:25:23:67:f2:ae:26:2d:6b:de:46:f5:63:
         51:e9:23:dc:69:99:64:de:db:1e:53:df:90:d0:e3:48:64:cc:
         79:01:8f:7b:e4:18:7c:ec:4c:cf:1d:22:cc:fc:6f:25:4d:2c:
         fe:e6:d8:e5:57:c7:2f:83:82:07:65:d5:8d:36:e8:4e:4f:d4:
         d2:da:3f:72
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFNoH2VozPzVfhfoQJzApShCZyO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY1ODNDRkVGNjk5REM4Qzg4RjE0NTY1ODYxN0E3OUNE
NjFBMzEzODAeFw0yNDA0MDQxNjQ4NTBaFw0yNTA0MDMxNjUzNTBaMDMxMTAvBgNV
BAMTKEUwQzgzRjBDQjgxODFGODczMzg4Qjk3MzcwNzc1NkZDM0RENTIxMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TWtiSO0G6hbKHMrfNX/4FM88
VWYRdXaVTwdzhqQPJk8fNd7LDbB6j7/EYcqxzOR7+XUmTvR1vqtKPkkDrQfugMq2
SilXneyQHLX0u+1xdGEz0r6X9rfPauH8Vl6TNV/EXsNcziEHMD7pjonPyj84k+0l
56bWIozcMX+kJgKU2ggX76ndLFugKqtmSBmWJjrgGvNzogh55ONfYKeY0iHE/XDC
UzpLqifWK++ZEn2mUqQAdD2J6M7JMVHn2xz4fZkrrJB6l/CfCziz1fQrkJJX/0xt
Quib1iwdpZ8eA3WAycfSqQfxr0eASCanJQpbn/v8bk7A7ohxgfG12zrKBPHbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4Mg/DLgYH4cziLlzcHdW/D3VISMwHwYDVR0j
BBgwFoAU1lg8/vaZ3IyI8UVlhhennNYaMTgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94ZUhZV2hRR0o1TVBqRVp1WnRwWEF1WXQ0UzFia0pOTG9pWnkza29YbXNI
LzIvRDY1ODNDRkVGNjk5REM4Qzg4RjE0NTY1ODYxN0E3OUNENjFBMzEzOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENjU4M0NGRUY2OTlEQzhDODhG
MTQ1NjU4NjE3QTc5Q0Q2MUEzMTM4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
ZUhZV2hRR0o1TVBqRVp1WnRwWEF1WXQ0UzFia0pOTG9pWnkza29YbXNILzIvMzIz
ODMwMzQzYTM1MzU2MTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3Mzkz
NDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARVoDANBgkqhkiG9w0BAQsFAAOCAQEAtlZsF/MzNquX
ZLuhRQUQZ2EyMVtLSay4c9JVvlkphkAVfaqADPPxl0jf8WsxSEmUX7KpAMfZbW/O
d9Nb/nrcBcbwAZG/cszUhRBOMp4BqimEaLzcHQiSKfj3Bx+X5DDNeGZM2g993Sow
SrLLfoTsukgYa2HRVM6AuEG8aFrue7fr8ia0+fPZtQTAnxwRuKxDKh/AyflQEZez
+Yq2L1k2mh8mbZBXXiNkF19BJF+qHbYuyefIoiKY87aXJSNn8q4mLWveRvVjUekj
3GmZZN7bHlPfkNDjSGTMeQGPe+QYfOxMzx0izPxvJU0s/ubY5VfHL4OCB2XVjTbo
Tk/U0to/cg==
-----END CERTIFICATE-----
Generated at Wed Sep 18 20:49:38 2024 by rpki-client on console-fra.rpki-client.org