Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/1/323830343a313763633a3a2f33322d313238203d3e20323633323532.roa
File:                     323830343a313763633a3a2f33322d313238203d3e20323633323532.roa (raw, json)
Hash identifier:          gO4O+V4sAwlgfEYB+isYsqfihIXdy4A5pz3BmnOnsa4=
Subject key identifier:   B8:E4:C2:DB:80:F4:58:AF:23:CB:58:D6:38:0D:0C:F1:2B:C1:8C:D2
Certificate issuer:       /CN=FC2678D5CED0EF11DFC762E339166B56C1FB68A5
Certificate serial:       10E25CCCD59615D144150AC396CBF12E6FFB1CFD
Authority key identifier: FC:26:78:D5:CE:D0:EF:11:DF:C7:62:E3:39:16:6B:56:C1:FB:68:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC2678D5CED0EF11DFC762E339166B56C1FB68A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/1/323830343a313763633a3a2f33322d313238203d3e20323633323532.roa
Signing time:             Thu 04 Apr 2024 05:49:26 +0000
ROA not before:           Thu 04 Apr 2024 05:44:26 +0000
ROA not after:            Thu 03 Apr 2025 05:49:26 +0000
asID:                     263252
IP address blocks:        2804:17cc::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e2:5c:cc:d5:96:15:d1:44:15:0a:c3:96:cb:f1:2e:6f:fb:1c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC2678D5CED0EF11DFC762E339166B56C1FB68A5
        Validity
            Not Before: Apr  4 05:44:26 2024 GMT
            Not After : Apr  3 05:49:26 2025 GMT
        Subject: CN=B8E4C2DB80F458AF23CB58D6380D0CF12BC18CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:73:d0:2c:70:83:e5:47:09:47:c7:a6:d6:9a:
                    59:89:8d:40:82:fb:a5:88:59:41:76:29:05:a1:8a:
                    80:1b:a9:7b:e1:5d:8c:f4:af:92:60:21:79:86:bc:
                    f3:27:1b:86:93:e9:d3:6d:ef:38:8e:67:cf:65:f9:
                    d5:a5:f4:32:04:7a:cf:e3:5d:51:eb:4b:1c:d2:77:
                    b3:b4:e5:f2:7d:38:0c:e0:12:81:24:00:4b:8c:fb:
                    39:31:3d:98:78:a3:c4:93:be:bf:38:64:df:cc:54:
                    9c:34:5a:9d:2b:1f:ff:8d:24:40:6c:8e:cd:4d:a0:
                    1a:92:51:d3:01:ef:ac:f1:c4:23:46:b2:05:0a:06:
                    99:b1:92:0b:c9:23:39:28:c1:da:da:2f:6b:f5:22:
                    fd:87:32:b3:d7:de:8a:80:c7:de:1b:60:3b:2b:88:
                    0f:87:32:36:7b:dc:96:66:5b:05:fa:df:c3:a5:a7:
                    b8:ee:3e:5f:39:1f:f3:a4:8d:e1:ff:d3:8d:71:8b:
                    50:a8:66:d3:a3:d1:f1:7f:82:10:b3:d5:45:26:b4:
                    42:b9:46:5a:d0:d7:bf:87:39:e9:e7:ea:7d:1a:8a:
                    87:23:51:b0:32:2f:dc:72:c5:74:41:66:fe:73:df:
                    21:31:90:72:e6:71:3a:72:ee:df:af:65:9b:f8:81:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E4:C2:DB:80:F4:58:AF:23:CB:58:D6:38:0D:0C:F1:2B:C1:8C:D2
            X509v3 Authority Key Identifier:
                keyid:FC:26:78:D5:CE:D0:EF:11:DF:C7:62:E3:39:16:6B:56:C1:FB:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/1/FC2678D5CED0EF11DFC762E339166B56C1FB68A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC2678D5CED0EF11DFC762E339166B56C1FB68A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/1/323830343a313763633a3a2f33322d313238203d3e20323633323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:3d:31:0a:0e:70:dd:26:97:56:29:c2:00:67:06:44:13:d4:
         a1:d6:e0:5d:78:04:d0:f8:37:2a:8f:dc:0b:73:1b:ff:6d:1e:
         2d:93:5b:68:9d:5f:48:af:33:fb:a0:22:65:d6:73:eb:14:8f:
         46:ab:e1:22:f4:f4:ba:16:d1:c6:51:97:b7:b0:1e:bc:d0:16:
         98:33:28:83:cb:de:16:e8:bf:a2:a3:d3:85:d0:24:20:b9:af:
         3e:e4:3a:60:d3:fe:14:2e:9d:82:10:a6:d0:43:6b:ac:da:e6:
         ae:9b:e7:b8:aa:e6:c5:19:dc:80:e6:86:03:a9:03:bf:5e:50:
         f4:ff:fb:49:e6:11:cd:ff:25:c1:2a:a2:0e:84:90:a6:6c:e4:
         cc:30:b2:2d:bc:80:93:22:cc:e2:fd:c0:d2:f3:d0:0d:8d:e0:
         3d:15:d2:b7:9b:fa:63:3a:aa:7f:a9:f1:24:5d:fa:65:04:3a:
         c6:88:d7:d5:9a:78:be:bf:94:6d:10:44:5f:34:ab:f4:98:56:
         57:c5:84:dd:dd:72:cd:d2:5f:e3:73:43:e1:f3:63:1f:09:ab:
         d3:38:1c:c2:a8:03:71:60:e6:6d:7a:49:e7:61:b4:bc:9e:6c:
         cd:ff:b6:ff:4b:61:6f:af:f9:5b:43:12:48:83:a4:ce:9c:23:
         85:5b:72:39
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUEOJczNWWFdFEFQrDlsvxLm/7HP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMyNjc4RDVDRUQwRUYxMURGQzc2MkUzMzkxNjZCNTZD
MUZCNjhBNTAeFw0yNDA0MDQwNTQ0MjZaFw0yNTA0MDMwNTQ5MjZaMDMxMTAvBgNV
BAMTKEI4RTRDMkRCODBGNDU4QUYyM0NCNThENjM4MEQwQ0YxMkJDMThDRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCec9AscIPlRwlHx6bWmlmJjUCC
+6WIWUF2KQWhioAbqXvhXYz0r5JgIXmGvPMnG4aT6dNt7ziOZ89l+dWl9DIEes/j
XVHrSxzSd7O05fJ9OAzgEoEkAEuM+zkxPZh4o8STvr84ZN/MVJw0Wp0rH/+NJEBs
js1NoBqSUdMB76zxxCNGsgUKBpmxkgvJIzkowdraL2v1Iv2HMrPX3oqAx94bYDsr
iA+HMjZ73JZmWwX638Olp7juPl85H/OkjeH/041xi1CoZtOj0fF/ghCz1UUmtEK5
RlrQ17+HOenn6n0aiocjUbAyL9xyxXRBZv5z3yExkHLmcTpy7t+vZZv4gW+vAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUuOTC24D0WK8jy1jWOA0M8SvBjNIwHwYDVR0j
BBgwFoAU/CZ41c7Q7xHfx2LjORZrVsH7aKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnFvc0VGSFZRYmVRdnk4aWt0ZE56cFdOSEtjQjF6ZVY0bVNkNkYxZWEx
V04vMS9GQzI2NzhENUNFRDBFRjExREZDNzYyRTMzOTE2NkI1NkMxRkI2OEE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDMjY3OEQ1Q0VEMEVGMTFE
RkM3NjJFMzM5MTY2QjU2QzFGQjY4QTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJxb3NFRkhWUWJlUXZ5OGlrdGROenBXTkhLY0IxemVWNG1TZDZGMWVhMVdOLzEv
MzIzODMwMzQzYTMxMzc2MzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBfMMA0GCSqGSIb3DQEBCwUAA4IBAQBzPTEK
DnDdJpdWKcIAZwZEE9Sh1uBdeATQ+Dcqj9wLcxv/bR4tk1tonV9IrzP7oCJl1nPr
FI9Gq+Ei9PS6FtHGUZe3sB680BaYMyiDy94W6L+io9OF0CQgua8+5Dpg0/4ULp2C
EKbQQ2us2uaum+e4qubFGdyA5oYDqQO/XlD0//tJ5hHN/yXBKqIOhJCmbOTMMLIt
vICTIszi/cDS89ANjeA9FdK3m/pjOqp/qfEkXfplBDrGiNfVmni+v5RtEERfNKv0
mFZXxYTd3XLN0l/jc0Ph82MfCavTOBzCqANxYOZteknnYbS8nmzN/7b/S2Fvr/lb
QxJIg6TOnCOFW3I5
-----END CERTIFICATE-----
Generated at Thu Aug 29 10:18:11 2024 by rpki-client on console-ams.rpki-client.org