Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a613a333a3a2f36342d3634203d3e203533303338.roa
File:                     323830343a3634383a613a333a3a2f36342d3634203d3e203533303338.roa (raw, json)
Hash identifier:          gA+xNE5NZMOoLOrMvbsHV0gxryQqtSA7KujsOPv1M4Q=
Subject key identifier:   D6:14:5D:7B:E8:BA:8C:F7:10:29:C3:67:47:47:BF:B1:90:76:BE:6C
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       6EFE4123ED9666832FB38AB0ECA32D724078E5C1
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a613a333a3a2f36342d3634203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:31 +0000
ROA not before:           Thu 07 Nov 2024 04:00:31 +0000
ROA not after:            Thu 06 Nov 2025 04:05:31 +0000
asID:                     53038
IP address blocks:        2804:648:a:3::/64 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fe:41:23:ed:96:66:83:2f:b3:8a:b0:ec:a3:2d:72:40:78:e5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:31 2024 GMT
            Not After : Nov  6 04:05:31 2025 GMT
        Subject: CN=D6145D7BE8BA8CF71029C3674747BFB19076BE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:10:3d:dc:0a:1c:f6:a9:2e:dd:1a:ae:8c:53:
                    38:7a:ed:ec:03:3c:cc:ac:3e:d6:88:d3:f2:6a:05:
                    a2:1f:57:a2:47:e0:de:e5:3b:0c:e3:e2:d2:32:b3:
                    5f:5e:28:21:d8:ad:d2:49:eb:c9:ba:a7:9b:8a:23:
                    6f:28:af:0d:2a:df:28:02:67:88:0e:79:62:30:0c:
                    0b:1b:7c:47:9f:2b:42:de:1a:22:6a:14:5a:8a:eb:
                    dc:a7:6c:9c:d9:3d:8d:24:f7:81:64:46:bc:88:d9:
                    a9:59:83:d6:86:a8:2d:e9:85:aa:df:f3:a8:3b:e5:
                    cd:42:02:0b:11:d6:4e:a0:d9:21:aa:37:26:c1:f6:
                    e7:7b:ac:6f:2d:33:ed:0a:82:69:b4:ba:ba:8f:d6:
                    c2:32:87:3b:d8:34:13:a8:c9:d0:89:dc:85:5a:b9:
                    56:97:00:05:63:e9:53:14:57:57:1f:4d:e6:60:e6:
                    96:2b:bc:71:88:7c:53:23:71:81:df:9c:10:41:e7:
                    7b:3f:49:0a:c3:38:96:23:a8:77:98:57:67:66:ef:
                    6c:db:8e:2e:c3:9a:a3:1d:e5:77:53:59:2a:8f:a0:
                    a7:3c:48:1f:a7:8a:eb:19:02:26:ee:03:e4:1c:93:
                    00:ee:d6:27:56:f7:f4:8f:fe:3a:a8:c7:12:c9:7b:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:14:5D:7B:E8:BA:8C:F7:10:29:C3:67:47:47:BF:B1:90:76:BE:6C
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a613a333a3a2f36342d3634203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:648:a:3::/64

    Signature Algorithm: sha256WithRSAEncryption
         0b:3a:44:e7:14:51:54:eb:9f:cf:c5:59:0e:c0:c9:81:67:39:
         d9:de:ce:35:ea:38:9b:b8:d7:e9:2f:79:9c:42:4c:7c:e1:0c:
         8f:2e:5d:cf:87:72:2c:ca:45:e5:db:8b:70:71:d4:c0:3d:19:
         f4:15:de:66:e8:35:fc:dc:81:73:8b:b4:b3:33:5e:75:a3:b1:
         83:58:0c:dc:f4:37:a5:ad:fd:28:7c:c6:8b:8c:fd:7b:1a:7f:
         cd:31:85:ce:b6:e7:86:2f:93:0d:97:cb:d7:53:8d:8e:9b:44:
         eb:39:3c:12:9e:1d:96:81:2e:c6:d3:d3:08:a9:ec:82:18:33:
         d5:96:c0:15:d9:fd:e2:bb:f1:5f:cc:f2:6d:b2:23:05:93:44:
         91:88:c4:00:85:e3:94:d3:92:5c:a7:12:98:3f:34:2f:0a:f1:
         08:ef:3e:88:c7:9e:a5:7a:b9:3b:71:7e:79:c4:5c:17:84:b4:
         69:7b:e1:85:44:b8:aa:0d:75:76:2a:be:3b:25:72:ca:e0:d2:
         70:76:d6:aa:c4:ba:65:67:84:24:28:04:2c:77:5f:de:a9:56:
         ec:7b:3e:86:da:26:57:b4:b5:6e:b6:a0:d2:0d:58:ff:42:fe:
         b8:86:56:c8:0a:70:d7:26:9a:ba:8e:78:fc:5e:8f:c7:94:fb:
         ac:61:24:ac
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUbv5BI+2WZoMvs4qw7KMtckB45cEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBNUU4QTYxQ0MxN0MwRUFCNzNGRDZFM0I5RDFGMjVF
NDM0OENDNjAeFw0yNDExMDcwNDAwMzFaFw0yNTExMDYwNDA1MzFaMDMxMTAvBgNV
BAMTKEQ2MTQ1RDdCRThCQThDRjcxMDI5QzM2NzQ3NDdCRkIxOTA3NkJFNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHED3cChz2qS7dGq6MUzh67ewD
PMysPtaI0/JqBaIfV6JH4N7lOwzj4tIys19eKCHYrdJJ68m6p5uKI28orw0q3ygC
Z4gOeWIwDAsbfEefK0LeGiJqFFqK69ynbJzZPY0k94FkRryI2alZg9aGqC3pharf
86g75c1CAgsR1k6g2SGqNybB9ud7rG8tM+0Kgmm0urqP1sIyhzvYNBOoydCJ3IVa
uVaXAAVj6VMUV1cfTeZg5pYrvHGIfFMjcYHfnBBB53s/SQrDOJYjqHeYV2dm72zb
ji7DmqMd5XdTWSqPoKc8SB+niusZAibuA+QckwDu1idW9/SP/jqoxxLJe/SxAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU1hRde+i6jPcQKcNnR0e/sZB2vmwwHwYDVR0j
BBgwFoAU7aXophzBfA6rc/1uO50fJeQ0jMYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZYSFljcW1yVDVhMWhlbkpBdERpR0JDbkFhNGpYVHZqRGlLekIxY3E3
alUvMC9FREE1RThBNjFDQzE3QzBFQUI3M0ZENkUzQjlEMUYyNUU0MzQ4Q0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEQTVFOEE2MUNDMTdDMEVB
QjczRkQ2RTNCOUQxRjI1RTQzNDhDQzYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmWEhZY3FtclQ1YTFoZW5KQXREaUdCQ25BYTRqWFR2akRpS3pCMWNxN2pVLzAv
MzIzODMwMzQzYTM2MzQzODNhNjEzYTMzM2EzYTJmMzYzNDJkMzYzNDIwM2QzZTIw
MzUzMzMwMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEF
BQcBBwEB/wQVMBMwEQQCAAIwCwMJACgEBkgACgADMA0GCSqGSIb3DQEBCwUAA4IB
AQALOkTnFFFU65/PxVkOwMmBZznZ3s416jibuNfpL3mcQkx84QyPLl3Ph3IsykXl
24twcdTAPRn0Fd5m6DX83IFzi7SzM151o7GDWAzc9Delrf0ofMaLjP17Gn/NMYXO
tueGL5MNl8vXU42Om0TrOTwSnh2WgS7G09MIqeyCGDPVlsAV2f3iu/FfzPJtsiMF
k0SRiMQAheOU05JcpxKYPzQvCvEI7z6Ix56lerk7cX55xFwXhLRpe+GFRLiqDXV2
Kr47JXLK4NJwdtaqxLplZ4QkKAQsd1/eqVbsez6G2iZXtLVutqDSDVj/Qv64hlbI
CnDXJpq6jnj8Xo/HlPusYSSs
-----END CERTIFICATE-----
Generated at Mon Nov 25 12:01:05 2024 by rpki-client on console-ams.rpki-client.org