Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/323830343a353964383a613130303a3a2f34302d3430203d3e20323638373239.roa
File:                     323830343a353964383a613130303a3a2f34302d3430203d3e20323638373239.roa (raw, json)
Hash identifier:          s/+iKLNDe94PsQYBZ5p4pVXmUSyTZqaU8rpfQa7EyTM=
Subject key identifier:   EA:AA:CB:EA:70:DE:EE:0A:11:8B:59:01:6E:60:F7:41:2A:43:38:29
Certificate issuer:       /CN=8881C2C20AAAF7924613B94374865D8C137EAD42
Certificate serial:       22E5A1CC6250AFA385C027F20C791F1BC29CA6CF
Authority key identifier: 88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/323830343a353964383a613130303a3a2f34302d3430203d3e20323638373239.roa
Signing time:             Thu 04 Apr 2024 07:56:19 +0000
ROA not before:           Thu 04 Apr 2024 07:51:19 +0000
ROA not after:            Thu 03 Apr 2025 07:56:19 +0000
asID:                     268729
IP address blocks:        2804:59d8:a100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e5:a1:cc:62:50:af:a3:85:c0:27:f2:0c:79:1f:1b:c2:9c:a6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8881C2C20AAAF7924613B94374865D8C137EAD42
        Validity
            Not Before: Apr  4 07:51:19 2024 GMT
            Not After : Apr  3 07:56:19 2025 GMT
        Subject: CN=EAAACBEA70DEEE0A118B59016E60F7412A433829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:a5:1d:17:4b:d6:a8:52:45:3b:6f:7f:2b:
                    b3:0b:0a:ae:5a:1c:59:3f:2d:44:5b:ec:83:6a:ea:
                    a9:5b:da:68:a6:74:58:eb:6b:ac:b3:f4:0f:79:c1:
                    63:09:57:e7:05:1d:b6:db:f0:3f:38:d6:98:e9:a4:
                    d6:d9:16:c8:8f:d7:71:7b:3b:4c:4c:57:95:c8:8b:
                    39:05:27:db:74:9e:48:a2:94:c3:86:09:a7:f1:d5:
                    d7:52:5a:60:1d:0c:01:37:29:75:e2:de:eb:5e:38:
                    ea:a5:fd:52:c9:a9:68:51:45:db:0a:ec:ef:a2:48:
                    07:25:d5:ad:f7:c8:48:1e:7b:8f:e4:e2:c0:21:84:
                    61:7e:f0:9d:40:77:74:28:97:d8:38:21:77:89:84:
                    3a:79:6a:50:22:74:ea:75:28:64:d6:9e:94:b3:40:
                    7a:ce:0d:ae:86:96:23:59:90:00:56:50:64:e2:49:
                    20:20:4f:a8:7c:23:a3:7a:38:3b:07:5b:4f:a5:e1:
                    83:00:14:20:30:a8:46:d0:4d:7a:54:80:f0:d6:2f:
                    ef:33:2f:fc:7a:aa:d2:d5:08:74:2f:e2:da:37:c5:
                    13:2b:78:64:81:2c:90:a3:88:7c:f0:1c:9b:bd:2e:
                    74:c5:2c:41:6e:7e:1c:f4:c2:51:d6:63:bb:bd:98:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AA:CB:EA:70:DE:EE:0A:11:8B:59:01:6E:60:F7:41:2A:43:38:29
            X509v3 Authority Key Identifier:
                keyid:88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/8881C2C20AAAF7924613B94374865D8C137EAD42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/323830343a353964383a613130303a3a2f34302d3430203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59d8:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:90:77:f1:9d:fb:2e:db:63:2a:ba:65:58:7c:ae:af:b2:8f:
         fd:f4:cf:e1:2e:d2:e4:f1:86:c4:30:51:96:d8:7c:89:17:2f:
         59:60:72:ca:0c:cf:37:58:2f:73:c9:52:4e:88:a4:30:c6:83:
         97:eb:c7:f9:23:3c:f8:df:f1:11:6e:b8:92:61:d5:36:ee:77:
         b4:2b:c1:08:ae:f6:e3:da:96:aa:b9:9b:e9:a7:9b:65:d0:71:
         ed:99:cd:27:11:05:70:21:2f:44:57:14:4f:de:68:e8:09:b7:
         bf:02:0f:4b:59:a9:c8:1d:86:4f:e9:e4:18:39:61:69:89:5c:
         ca:ea:02:fb:69:89:bf:54:70:10:d9:a4:ae:25:b2:b5:48:8e:
         50:94:ee:16:82:d2:5c:70:61:b4:16:c1:54:62:48:d0:58:c2:
         8e:87:2d:8f:ff:62:c4:f9:0e:6b:3a:c2:ce:76:05:32:44:86:
         ae:d0:37:76:d1:5d:60:b0:70:b3:93:07:ce:28:1a:22:f4:fb:
         71:b8:73:83:d1:0a:34:d5:da:ce:f5:15:e2:ae:55:95:5d:cc:
         51:65:18:a9:6c:38:86:98:25:84:24:f1:d9:80:b8:85:63:6a:
         b1:d1:2c:7f:f5:1c:9d:65:0e:52:72:fa:b9:f4:cd:13:00:d1:
         00:8f:1c:13
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUIuWhzGJQr6OFwCfyDHkfG8Kcps8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg4MUMyQzIwQUFBRjc5MjQ2MTNCOTQzNzQ4NjVEOEMx
MzdFQUQ0MjAeFw0yNDA0MDQwNzUxMTlaFw0yNTA0MDMwNzU2MTlaMDMxMTAvBgNV
BAMTKEVBQUFDQkVBNzBERUVFMEExMThCNTkwMTZFNjBGNzQxMkE0MzM4MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdc6UdF0vWqFJFO29/K7MLCq5a
HFk/LURb7INq6qlb2mimdFjra6yz9A95wWMJV+cFHbbb8D841pjppNbZFsiP13F7
O0xMV5XIizkFJ9t0nkiilMOGCafx1ddSWmAdDAE3KXXi3uteOOql/VLJqWhRRdsK
7O+iSAcl1a33yEgee4/k4sAhhGF+8J1Ad3Qol9g4IXeJhDp5alAidOp1KGTWnpSz
QHrODa6GliNZkABWUGTiSSAgT6h8I6N6ODsHW0+l4YMAFCAwqEbQTXpUgPDWL+8z
L/x6qtLVCHQv4to3xRMreGSBLJCjiHzwHJu9LnTFLEFufhz0wlHWY7u9mNaBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU6qrL6nDe7goRi1kBbmD3QSpDOCkwHwYDVR0j
BBgwFoAUiIHCwgqq95JGE7lDdIZdjBN+rUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZTZ3NiOU53UDJCdmdMZDhhMVlVOUJ2c25UaFVLc1AyYWNKNGVOWXc2
YXkvMS84ODgxQzJDMjBBQUFGNzkyNDYxM0I5NDM3NDg2NUQ4QzEzN0VBRDQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4ODFDMkMyMEFBQUY3OTI0
NjEzQjk0Mzc0ODY1RDhDMTM3RUFENDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGU2dzYjlOd1AyQnZnTGQ4YTFZVTlCdnNuVGhVS3NQMmFjSjRlTll3NmF5LzEv
MzIzODMwMzQzYTM1Mzk2NDM4M2E2MTMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzODM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEWdihMA0GCSqGSIb3DQEBCwUA
A4IBAQA1kHfxnfsu22MqumVYfK6vso/99M/hLtLk8YbEMFGW2HyJFy9ZYHLKDM83
WC9zyVJOiKQwxoOX68f5Izz43/ERbriSYdU27ne0K8EIrvbj2paquZvpp5tl0HHt
mc0nEQVwIS9EVxRP3mjoCbe/Ag9LWanIHYZP6eQYOWFpiVzK6gL7aYm/VHAQ2aSu
JbK1SI5QlO4WgtJccGG0FsFUYkjQWMKOhy2P/2LE+Q5rOsLOdgUyRIau0Dd20V1g
sHCzkwfOKBoi9PtxuHOD0Qo01drO9RXirlWVXcxRZRipbDiGmCWEJPHZgLiFY2qx
0Sx/9RydZQ5Scvq59M0TANEAjxwT
-----END CERTIFICATE-----
Generated at Fri Jul 12 14:49:05 2024 by rpki-client on console-fra.rpki-client.org