Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a613a353a3a2f36342d3634203d3e203533303338.roa
File:                     323830343a3634383a613a353a3a2f36342d3634203d3e203533303338.roa (raw, json)
Hash identifier:          qp9/uQRYAMyPoJpVl8x1SEosXukOY3iYpYlRjQsztj0=
Subject key identifier:   6D:7E:D7:5A:E6:34:C6:FF:01:AA:23:07:63:AA:A2:61:11:D5:60:96
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       70C336BD8FBDDAABE8F230114EA2B69A36E99CA6
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a613a353a3a2f36342d3634203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:28 +0000
ROA not before:           Thu 07 Nov 2024 04:00:28 +0000
ROA not after:            Thu 06 Nov 2025 04:05:28 +0000
asID:                     53038
IP address blocks:        2804:648:a:5::/64 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c3:36:bd:8f:bd:da:ab:e8:f2:30:11:4e:a2:b6:9a:36:e9:9c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:28 2024 GMT
            Not After : Nov  6 04:05:28 2025 GMT
        Subject: CN=6D7ED75AE634C6FF01AA230763AAA26111D56096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:b7:b6:37:a2:0f:cb:7a:ba:8a:6a:0a:11:
                    ab:09:ff:5f:86:bc:df:d5:62:51:71:83:ac:30:ca:
                    13:d0:25:c7:ff:b2:42:43:87:27:f4:df:52:6d:90:
                    ad:69:3f:1b:6f:d4:ef:0d:9e:c1:ae:ce:22:ae:9b:
                    69:df:d0:87:1d:99:58:96:f3:d3:4e:5b:04:61:69:
                    bf:4b:8d:48:01:44:81:bf:78:7b:73:49:d9:a6:9a:
                    8b:ec:d2:60:3e:a3:f6:7a:db:4b:8c:e0:e5:9b:e8:
                    b2:85:86:e2:02:ff:4d:f2:e4:07:40:da:23:ee:00:
                    60:9e:42:0c:e5:b7:71:91:19:fa:82:63:5c:13:6d:
                    26:d4:38:3e:eb:bc:87:1a:af:77:2c:26:78:00:75:
                    5c:70:1b:b7:22:10:a0:f6:d8:e3:fe:41:dc:29:06:
                    0b:94:77:f0:e8:25:93:41:a2:b9:31:7c:89:7a:d8:
                    ed:21:49:6b:df:90:2c:dd:13:f8:02:73:ae:7e:68:
                    3f:34:3e:c3:25:28:31:b6:9f:eb:fd:49:8b:5b:30:
                    57:0b:d8:e1:6e:50:76:89:f8:99:96:17:be:01:45:
                    bb:c8:26:b1:b0:f6:c6:50:8f:f7:ea:05:6a:58:a7:
                    5c:53:47:66:b3:20:3d:6e:fb:07:c4:14:cb:5a:23:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7E:D7:5A:E6:34:C6:FF:01:AA:23:07:63:AA:A2:61:11:D5:60:96
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a613a353a3a2f36342d3634203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:648:a:5::/64

    Signature Algorithm: sha256WithRSAEncryption
         9d:c0:2b:c0:b0:35:c9:f6:55:5c:40:2a:fc:07:65:98:48:7d:
         0e:0c:56:f7:07:2d:c8:84:97:2f:fe:82:39:8b:3d:c2:4e:b3:
         37:52:47:db:53:f2:0c:8f:3b:24:32:5e:38:cf:76:cd:ce:e5:
         5a:df:a7:07:f3:70:6d:6e:3f:60:25:f3:d8:7a:6a:79:41:e0:
         50:e5:a4:99:b6:90:90:82:db:5c:d5:d3:1d:3f:7f:14:01:ee:
         50:d6:d3:13:22:4b:3d:09:b4:50:4f:ad:61:99:78:a5:99:50:
         cd:a5:4e:92:76:76:ad:36:f8:17:a7:87:4c:4a:c7:26:40:ee:
         0b:9d:e4:2e:ed:79:15:99:26:4e:6b:36:a9:e3:5a:5f:83:55:
         21:8b:2e:92:e3:5a:53:c1:70:72:c8:87:9a:2f:99:8c:46:69:
         16:bb:f5:bb:63:23:2b:ae:e8:bb:c3:3d:d9:ef:cf:5f:16:92:
         1a:9c:69:18:82:ae:8d:74:33:08:64:d1:13:10:38:93:11:bc:
         23:11:59:05:3f:fc:95:e5:b5:b6:6f:e1:8e:4c:91:3e:4f:19:
         3a:5b:eb:46:f7:23:66:ca:a9:02:59:da:05:8d:6a:bc:b6:c5:
         e6:6d:83:3e:2e:ce:63:ab:59:f2:a9:b2:a4:3d:a6:12:1a:ea:
         a3:34:07:e5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUcMM2vY+92qvo8jARTqK2mjbpnKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBNUU4QTYxQ0MxN0MwRUFCNzNGRDZFM0I5RDFGMjVF
NDM0OENDNjAeFw0yNDExMDcwNDAwMjhaFw0yNTExMDYwNDA1MjhaMDMxMTAvBgNV
BAMTKDZEN0VENzVBRTYzNEM2RkYwMUFBMjMwNzYzQUFBMjYxMTFENTYwOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+7e2N6IPy3q6imoKEasJ/1+G
vN/VYlFxg6wwyhPQJcf/skJDhyf031JtkK1pPxtv1O8NnsGuziKum2nf0IcdmViW
89NOWwRhab9LjUgBRIG/eHtzSdmmmovs0mA+o/Z620uM4OWb6LKFhuIC/03y5AdA
2iPuAGCeQgzlt3GRGfqCY1wTbSbUOD7rvIcar3csJngAdVxwG7ciEKD22OP+Qdwp
BguUd/DoJZNBorkxfIl62O0hSWvfkCzdE/gCc65+aD80PsMlKDG2n+v9SYtbMFcL
2OFuUHaJ+JmWF74BRbvIJrGw9sZQj/fqBWpYp1xTR2azID1u+wfEFMtaIxRVAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUbX7XWuY0xv8BqiMHY6qiYRHVYJYwHwYDVR0j
BBgwFoAU7aXophzBfA6rc/1uO50fJeQ0jMYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZYSFljcW1yVDVhMWhlbkpBdERpR0JDbkFhNGpYVHZqRGlLekIxY3E3
alUvMC9FREE1RThBNjFDQzE3QzBFQUI3M0ZENkUzQjlEMUYyNUU0MzQ4Q0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEQTVFOEE2MUNDMTdDMEVB
QjczRkQ2RTNCOUQxRjI1RTQzNDhDQzYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmWEhZY3FtclQ1YTFoZW5KQXREaUdCQ25BYTRqWFR2akRpS3pCMWNxN2pVLzAv
MzIzODMwMzQzYTM2MzQzODNhNjEzYTM1M2EzYTJmMzYzNDJkMzYzNDIwM2QzZTIw
MzUzMzMwMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEF
BQcBBwEB/wQVMBMwEQQCAAIwCwMJACgEBkgACgAFMA0GCSqGSIb3DQEBCwUAA4IB
AQCdwCvAsDXJ9lVcQCr8B2WYSH0ODFb3By3IhJcv/oI5iz3CTrM3UkfbU/IMjzsk
Ml44z3bNzuVa36cH83Btbj9gJfPYemp5QeBQ5aSZtpCQgttc1dMdP38UAe5Q1tMT
Iks9CbRQT61hmXilmVDNpU6SdnatNvgXp4dMSscmQO4LneQu7XkVmSZOazap41pf
g1Uhiy6S41pTwXByyIeaL5mMRmkWu/W7YyMrrui7wz3Z789fFpIanGkYgq6NdDMI
ZNETEDiTEbwjEVkFP/yV5bW2b+GOTJE+Txk6W+tG9yNmyqkCWdoFjWq8tsXmbYM+
Ls5jq1nyqbKkPaYSGuqjNAfl
-----END CERTIFICATE-----
Generated at Mon Nov 25 12:01:05 2024 by rpki-client on console-ams.rpki-client.org