Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a383030303a3a2f33342d3334203d3e20323638363932.roa
File:                     323830343a353532343a383030303a3a2f33342d3334203d3e20323638363932.roa (raw, json)
Hash identifier:          CVQUWzpyD9fWAnrX4FSsiwaZW56QLVi/UMiSNTv7G58=
Subject key identifier:   6C:AA:A2:17:E6:50:5D:E9:1B:64:96:AE:C4:41:8D:D7:94:5E:CC:C4
Certificate issuer:       /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial:       4225A40EB3D13F062DC40652BEA001FE547F1C5B
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a383030303a3a2f33342d3334203d3e20323638363932.roa
Signing time:             Fri 20 Sep 2024 18:57:37 +0000
ROA not before:           Fri 20 Sep 2024 18:52:37 +0000
ROA not after:            Fri 19 Sep 2025 18:57:37 +0000
asID:                     268692
IP address blocks:        2804:5524:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:25:a4:0e:b3:d1:3f:06:2d:c4:06:52:be:a0:01:fe:54:7f:1c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
        Validity
            Not Before: Sep 20 18:52:37 2024 GMT
            Not After : Sep 19 18:57:37 2025 GMT
        Subject: CN=6CAAA217E6505DE91B6496AEC4418DD7945ECCC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:53:af:e7:f9:9e:b4:4f:dd:06:a7:ed:cb:52:
                    f7:24:46:57:37:54:20:a1:8f:9a:d8:d3:6b:ff:b8:
                    84:58:f8:f5:d5:cd:89:1a:e0:e3:5f:c4:a1:ea:d2:
                    9b:79:82:aa:0d:18:0c:1f:65:48:d9:6c:59:d0:3f:
                    5c:29:22:cc:6f:59:f4:64:a7:62:ef:74:48:87:bc:
                    a9:be:63:99:ce:6a:49:3f:2d:d6:27:aa:55:de:2b:
                    59:75:66:44:55:de:ea:96:e4:29:91:ca:cc:e0:41:
                    9a:2f:ed:b1:59:10:22:7a:fd:20:17:db:ab:a0:b6:
                    9a:a0:45:88:ac:d2:2e:ff:fa:46:a6:59:01:3b:d5:
                    1d:8d:27:d0:f9:72:d7:6b:3a:bc:48:f4:dd:c1:0b:
                    d5:9f:d7:d8:95:00:87:f9:01:ff:ea:f5:e2:3e:5e:
                    2f:38:15:0b:bd:71:2c:c4:4f:17:a7:2e:e7:b6:7e:
                    d9:03:50:ce:d9:3e:7f:10:26:cd:d7:9b:a6:b8:b2:
                    22:02:66:c1:02:0b:3b:b3:3b:b3:50:3b:53:51:1b:
                    4b:3f:51:ce:9d:cc:51:5a:eb:4b:2d:f0:9a:00:88:
                    81:4d:56:8c:54:73:9e:59:07:35:c4:33:57:fb:b4:
                    03:da:44:c8:70:ad:3d:86:0d:45:be:06:6f:75:8a:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AA:A2:17:E6:50:5D:E9:1B:64:96:AE:C4:41:8D:D7:94:5E:CC:C4
            X509v3 Authority Key Identifier:
                keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a383030303a3a2f33342d3334203d3e20323638363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5524:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:2d:a7:e7:a4:32:0b:0a:33:4e:b2:42:f3:56:b0:5e:04:76:
         63:c2:ed:96:67:12:5b:12:aa:cb:32:5c:a7:84:ff:a9:3d:57:
         f1:86:7e:5e:c4:9b:51:8a:d8:55:8c:a4:db:9e:16:0c:2c:c9:
         a6:a7:c4:40:69:a2:a5:1e:81:ed:24:0e:15:1c:71:92:80:49:
         c2:99:7a:e7:b8:da:36:ec:a7:c7:bb:b1:34:9b:18:d1:a5:c2:
         59:40:99:81:4b:32:10:e3:18:1f:cc:04:76:7b:29:26:bf:ec:
         9a:9e:b6:38:31:3c:db:bc:1e:7b:55:70:5c:c0:47:bf:6d:c7:
         06:bc:46:65:83:23:6f:f4:c9:c4:2a:f6:81:10:ee:03:ec:f2:
         f1:c3:53:4b:bf:a9:5e:52:74:ef:eb:8e:43:14:50:37:fa:c5:
         6a:33:d6:c5:4a:32:b6:18:53:8f:23:b4:6e:73:b6:2e:e1:38:
         89:3d:69:58:09:5e:15:54:71:67:89:dd:35:19:38:46:e8:d8:
         c7:39:b0:ca:d1:59:d4:c1:33:bf:2d:62:dc:19:f5:43:78:68:
         56:29:d3:af:e1:f5:7c:88:2d:da:28:6d:37:b2:2f:49:10:48:
         b0:28:53:6b:b4:7c:97:57:a6:0e:55:2a:d6:52:d3:ce:d6:26:
         4e:02:37:07
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQiWkDrPRPwYtxAZSvqAB/lR/HFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYwMTI1QTEzMDhBQzRERTZBM0FDQ0FGQ0MzREFEOEQw
REM1MkUwNzAeFw0yNDA5MjAxODUyMzdaFw0yNTA5MTkxODU3MzdaMDMxMTAvBgNV
BAMTKDZDQUFBMjE3RTY1MDVERTkxQjY0OTZBRUM0NDE4REQ3OTQ1RUNDQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkU6/n+Z60T90Gp+3LUvckRlc3
VCChj5rY02v/uIRY+PXVzYka4ONfxKHq0pt5gqoNGAwfZUjZbFnQP1wpIsxvWfRk
p2LvdEiHvKm+Y5nOakk/LdYnqlXeK1l1ZkRV3uqW5CmRyszgQZov7bFZECJ6/SAX
26ugtpqgRYis0i7/+kamWQE71R2NJ9D5ctdrOrxI9N3BC9Wf19iVAIf5Af/q9eI+
Xi84FQu9cSzETxenLue2ftkDUM7ZPn8QJs3Xm6a4siICZsECCzuzO7NQO1NRG0s/
Uc6dzFFa60st8JoAiIFNVoxUc55ZBzXEM1f7tAPaRMhwrT2GDUW+Bm91iponAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbKqiF+ZQXekbZJauxEGN15RezMQwHwYDVR0j
BBgwFoAULwEloTCKxN5qOsyvzD2tjQ3FLgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGZrblZEZW1vNnJhMmpnbmJkaUU2WnhlMUZzdzRRQTNocXQybXNwZVRV
TksvMC8yRjAxMjVBMTMwOEFDNERFNkEzQUNDQUZDQzNEQUQ4RDBEQzUyRTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMDEyNUExMzA4QUM0REU2
QTNBQ0NBRkNDM0RBRDhEMERDNTJFMDcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhma25WRGVtbzZyYTJqZ25iZGlFNlp4ZTFGc3c0UUEzaHF0Mm1zcGVUVU5LLzAv
MzIzODMwMzQzYTM1MzUzMjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM2MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVSSAMA0GCSqGSIb3DQEBCwUA
A4IBAQAELafnpDILCjNOskLzVrBeBHZjwu2WZxJbEqrLMlynhP+pPVfxhn5exJtR
ithVjKTbnhYMLMmmp8RAaaKlHoHtJA4VHHGSgEnCmXrnuNo27KfHu7E0mxjRpcJZ
QJmBSzIQ4xgfzAR2eykmv+yanrY4MTzbvB57VXBcwEe/bccGvEZlgyNv9MnEKvaB
EO4D7PLxw1NLv6leUnTv645DFFA3+sVqM9bFSjK2GFOPI7Ruc7Yu4TiJPWlYCV4V
VHFnid01GThG6NjHObDK0VnUwTO/LWLcGfVDeGhWKdOv4fV8iC3aKG03si9JEEiw
KFNrtHyXV6YOVSrWUtPO1iZOAjcH
-----END CERTIFICATE-----
Generated at Wed Oct 16 13:21:09 2024 by rpki-client on console-ams.rpki-client.org