Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/323830343a353964383a623138313a3a2f34382d3438203d3e20323638373239.roa
File:                     323830343a353964383a623138313a3a2f34382d3438203d3e20323638373239.roa (raw, json)
Hash identifier:          4wgu/B8mzE8Qkjcj/8ahY9uC0BIMGw1KmAjcC5eNLg8=
Subject key identifier:   BB:B2:62:34:D1:AE:34:AC:8D:4C:00:75:AC:49:B7:14:88:AF:F3:F8
Certificate issuer:       /CN=8881C2C20AAAF7924613B94374865D8C137EAD42
Certificate serial:       0D9049F0C6187B75F884F520AC5F83785D4FE50C
Authority key identifier: 88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/323830343a353964383a623138313a3a2f34382d3438203d3e20323638373239.roa
Signing time:             Thu 04 Apr 2024 07:56:16 +0000
ROA not before:           Thu 04 Apr 2024 07:51:16 +0000
ROA not after:            Thu 03 Apr 2025 07:56:16 +0000
asID:                     268729
IP address blocks:        2804:59d8:b181::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:90:49:f0:c6:18:7b:75:f8:84:f5:20:ac:5f:83:78:5d:4f:e5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8881C2C20AAAF7924613B94374865D8C137EAD42
        Validity
            Not Before: Apr  4 07:51:16 2024 GMT
            Not After : Apr  3 07:56:16 2025 GMT
        Subject: CN=BBB26234D1AE34AC8D4C0075AC49B71488AFF3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:c8:bb:0d:fc:e5:79:b4:2f:41:bd:7e:a9:
                    93:06:20:6d:de:83:89:6c:9f:86:9a:93:db:5b:06:
                    07:9f:28:21:c8:d7:e9:c8:2d:7c:72:51:9e:fb:0e:
                    6b:b9:92:f2:e3:73:68:57:a6:30:79:03:82:56:75:
                    28:fe:9e:d5:93:b0:81:48:1f:5e:3c:a6:7a:21:70:
                    95:6e:5b:32:05:79:3d:09:96:a8:17:b0:49:d2:83:
                    a9:bb:a8:4f:e4:0e:11:6e:ce:37:92:98:e2:b2:04:
                    fc:5f:3b:d5:4b:8d:63:8e:c7:ea:b3:c5:40:80:59:
                    42:2e:86:77:91:69:1c:03:83:6f:75:bf:1e:e5:ac:
                    40:f1:33:4c:8b:83:37:44:fc:d3:fb:cb:1d:8b:00:
                    73:67:32:d2:8a:cb:c8:68:bd:de:7c:50:31:55:d1:
                    37:b5:8e:69:df:98:fc:61:38:94:aa:68:18:22:0f:
                    ca:f4:f7:05:9e:ff:af:55:13:3f:12:5c:b8:7f:bd:
                    ea:71:95:c4:48:e8:43:f1:66:0c:b0:72:59:0a:d2:
                    f0:0a:4b:ef:d0:1e:06:0e:08:78:d0:34:dd:82:bf:
                    db:79:e0:af:5a:e6:4d:cd:ca:15:0b:b9:fc:44:b9:
                    34:b1:68:44:b9:a7:86:e9:5e:9b:ce:44:6d:92:13:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B2:62:34:D1:AE:34:AC:8D:4C:00:75:AC:49:B7:14:88:AF:F3:F8
            X509v3 Authority Key Identifier:
                keyid:88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/8881C2C20AAAF7924613B94374865D8C137EAD42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/323830343a353964383a623138313a3a2f34382d3438203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59d8:b181::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:6c:a0:1b:58:95:0c:da:89:89:8a:78:c7:12:ef:3e:74:2a:
         cc:86:a3:ff:b2:24:b4:85:ff:8e:80:02:d1:d0:3c:19:eb:b7:
         8c:c7:f3:41:c0:ec:fb:5b:ac:18:bd:b6:31:90:db:46:52:9e:
         46:8e:ba:1a:6e:6e:43:a5:3e:bf:a5:4e:ef:bd:87:af:50:ab:
         34:fe:a4:20:d2:7a:3e:1f:29:9a:f0:e2:09:89:79:f1:fc:b9:
         bb:a8:06:84:ab:a6:a1:5d:83:6c:bb:cd:ca:10:f4:0c:d1:07:
         f5:b8:cf:a8:e1:5b:44:51:c8:b6:bc:f4:dc:eb:37:34:86:14:
         9c:d2:33:c7:9f:a9:cd:c7:fb:ab:1f:38:4b:9c:6f:60:11:f5:
         0d:79:73:76:1e:07:f0:a0:80:95:52:f9:6c:23:74:93:ff:16:
         4f:9a:64:19:60:d9:82:1d:81:d9:06:5f:2f:2d:e2:90:7e:6a:
         e4:ca:60:c2:c5:32:0f:e7:f1:f4:f6:fa:d9:5b:bd:7b:1e:ab:
         fa:21:15:f7:5b:29:ab:a2:1e:13:90:90:51:c2:4a:f3:9b:b5:
         49:ac:46:49:8b:53:d6:2c:4f:cf:b6:e8:b4:56:18:ed:03:60:
         33:df:2d:f4:b3:d6:9a:59:84:e7:6f:f8:24:2f:65:eb:41:39:
         29:f7:79:12
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUDZBJ8MYYe3X4hPUgrF+DeF1P5QwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg4MUMyQzIwQUFBRjc5MjQ2MTNCOTQzNzQ4NjVEOEMx
MzdFQUQ0MjAeFw0yNDA0MDQwNzUxMTZaFw0yNTA0MDMwNzU2MTZaMDMxMTAvBgNV
BAMTKEJCQjI2MjM0RDFBRTM0QUM4RDRDMDA3NUFDNDlCNzE0ODhBRkYzRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1u8i7DfzlebQvQb1+qZMGIG3e
g4lsn4aak9tbBgefKCHI1+nILXxyUZ77Dmu5kvLjc2hXpjB5A4JWdSj+ntWTsIFI
H148pnohcJVuWzIFeT0JlqgXsEnSg6m7qE/kDhFuzjeSmOKyBPxfO9VLjWOOx+qz
xUCAWUIuhneRaRwDg291vx7lrEDxM0yLgzdE/NP7yx2LAHNnMtKKy8hovd58UDFV
0Te1jmnfmPxhOJSqaBgiD8r09wWe/69VEz8SXLh/vepxlcRI6EPxZgywclkK0vAK
S+/QHgYOCHjQNN2Cv9t54K9a5k3NyhULufxEuTSxaES5p4bpXpvORG2SE527AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUu7JiNNGuNKyNTAB1rEm3FIiv8/gwHwYDVR0j
BBgwFoAUiIHCwgqq95JGE7lDdIZdjBN+rUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZTZ3NiOU53UDJCdmdMZDhhMVlVOUJ2c25UaFVLc1AyYWNKNGVOWXc2
YXkvMS84ODgxQzJDMjBBQUFGNzkyNDYxM0I5NDM3NDg2NUQ4QzEzN0VBRDQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4ODFDMkMyMEFBQUY3OTI0
NjEzQjk0Mzc0ODY1RDhDMTM3RUFENDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGU2dzYjlOd1AyQnZnTGQ4YTFZVTlCdnNuVGhVS3NQMmFjSjRlTll3NmF5LzEv
MzIzODMwMzQzYTM1Mzk2NDM4M2E2MjMxMzgzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzODM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEWdixgTANBgkqhkiG9w0BAQsF
AAOCAQEAAmygG1iVDNqJiYp4xxLvPnQqzIaj/7IktIX/joAC0dA8Geu3jMfzQcDs
+1usGL22MZDbRlKeRo66Gm5uQ6U+v6VO772Hr1CrNP6kINJ6Ph8pmvDiCYl58fy5
u6gGhKumoV2DbLvNyhD0DNEH9bjPqOFbRFHItrz03Os3NIYUnNIzx5+pzcf7qx84
S5xvYBH1DXlzdh4H8KCAlVL5bCN0k/8WT5pkGWDZgh2B2QZfLy3ikH5q5MpgwsUy
D+fx9Pb62Vu9ex6r+iEV91spq6IeE5CQUcJK85u1SaxGSYtT1ixPz7botFYY7QNg
M98t9LPWmlmE52/4JC9l60E5Kfd5Eg==
-----END CERTIFICATE-----
Generated at Fri Jul 12 14:49:05 2024 by rpki-client on console-fra.rpki-client.org