Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a666630313a313a3a2f36342d3634203d3e203533303338.roa
File:                     323830343a3634383a666630313a313a3a2f36342d3634203d3e203533303338.roa (raw, json)
Hash identifier:          kaSr+7PNiLFf0EFPMDbRL++tvDUr5kCAvQ/z6ygg8Tg=
Subject key identifier:   E4:B2:8F:69:57:77:30:39:B6:23:B0:9A:A3:18:EB:6B:44:69:DB:2E
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       7D7F642F9B7B8857C1188FEE87F1DA46AD527A60
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a666630313a313a3a2f36342d3634203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:29 +0000
ROA not before:           Thu 07 Nov 2024 04:00:29 +0000
ROA not after:            Thu 06 Nov 2025 04:05:29 +0000
asID:                     53038
IP address blocks:        2804:648:ff01:1::/64 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7f:64:2f:9b:7b:88:57:c1:18:8f:ee:87:f1:da:46:ad:52:7a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:29 2024 GMT
            Not After : Nov  6 04:05:29 2025 GMT
        Subject: CN=E4B28F6957773039B623B09AA318EB6B4469DB2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:1d:c5:fa:28:e1:4b:e9:bf:b5:d0:7d:70:
                    aa:f8:33:8d:ae:95:ef:64:fe:1d:5c:4a:7f:c0:9f:
                    1d:21:4b:83:72:1f:c1:be:71:53:1c:0b:6c:85:d4:
                    55:3c:87:a3:cc:70:79:14:00:f3:ab:cf:de:be:76:
                    f6:81:e2:9c:b2:c4:ed:69:83:dd:47:f8:76:31:89:
                    70:03:45:71:65:9d:b6:c3:e5:2d:2b:4f:9b:8f:bf:
                    f1:92:97:b3:52:3c:0f:ca:bd:70:73:1c:ce:7e:f8:
                    34:e9:37:9f:38:f0:cb:df:4f:53:87:d6:0a:72:fe:
                    87:1f:7f:1b:e7:25:ca:43:16:fc:5a:5b:47:81:ed:
                    4f:5e:24:67:c0:b2:ea:fd:d5:c7:2c:a3:e4:e9:8d:
                    c8:b5:8b:a0:04:c2:17:da:cb:75:af:cb:33:28:78:
                    91:ba:9d:63:d8:d4:ec:d1:19:d5:b6:53:b6:dd:27:
                    a6:c0:10:50:c2:62:a9:52:f1:af:0c:dc:76:de:cf:
                    31:a3:c5:b8:93:e7:77:78:31:f5:be:ba:88:9a:65:
                    8f:a0:67:4a:3a:ed:f3:e2:9e:e6:3a:7a:8d:1d:ae:
                    a6:4c:7f:06:85:f1:13:9f:69:12:f0:d2:6a:a1:72:
                    0b:4c:ec:fe:08:ed:93:3b:e4:d6:46:52:b1:c0:3d:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B2:8F:69:57:77:30:39:B6:23:B0:9A:A3:18:EB:6B:44:69:DB:2E
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a666630313a313a3a2f36342d3634203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:648:ff01:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         0d:10:3f:43:18:c5:32:2d:8c:bc:4f:e0:48:17:43:35:e4:3c:
         68:3c:84:02:20:cc:cb:a8:5e:d9:b5:f1:c9:a7:77:10:e4:f2:
         2a:e6:85:fa:64:93:51:0f:f8:ab:f1:28:08:69:43:d3:d8:e6:
         82:fb:72:05:9e:45:b1:9f:53:35:75:8b:30:f0:db:c4:e9:52:
         bb:46:70:dc:59:36:07:ca:0d:df:3a:6e:4b:4a:3c:92:df:a1:
         e4:6b:6f:90:f2:cb:7d:a5:09:ec:68:1a:a6:33:1f:21:36:94:
         1e:f6:77:da:4e:86:9f:fe:69:51:8a:7c:9a:26:b8:0b:60:47:
         0c:97:25:75:bb:99:a6:a7:6f:0a:06:4e:16:88:80:09:3d:77:
         76:be:5e:cb:56:da:47:58:08:cd:b6:2b:5c:fd:e7:07:8b:84:
         e1:c2:77:c7:df:d4:d0:34:23:bc:f0:49:1c:c6:20:90:05:58:
         e1:c7:d7:05:88:47:54:7b:26:ec:46:4c:2b:46:9e:ac:62:7a:
         91:99:45:8d:d7:b2:ed:54:29:45:37:5d:53:49:7f:bd:6b:67:
         71:e7:4c:a3:70:5d:8a:3e:80:e5:0d:a9:62:13:77:ab:b8:6e:
         71:d9:d2:98:cc:1c:a4:87:6b:4f:44:16:c1:65:a6:bd:63:b5:
         4c:cd:f2:ea
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUfX9kL5t7iFfBGI/uh/HaRq1SemAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBNUU4QTYxQ0MxN0MwRUFCNzNGRDZFM0I5RDFGMjVF
NDM0OENDNjAeFw0yNDExMDcwNDAwMjlaFw0yNTExMDYwNDA1MjlaMDMxMTAvBgNV
BAMTKEU0QjI4RjY5NTc3NzMwMzlCNjIzQjA5QUEzMThFQjZCNDQ2OURCMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPR3F+ijhS+m/tdB9cKr4M42u
le9k/h1cSn/Anx0hS4NyH8G+cVMcC2yF1FU8h6PMcHkUAPOrz96+dvaB4pyyxO1p
g91H+HYxiXADRXFlnbbD5S0rT5uPv/GSl7NSPA/KvXBzHM5++DTpN5848MvfT1OH
1gpy/ocffxvnJcpDFvxaW0eB7U9eJGfAsur91ccso+Tpjci1i6AEwhfay3WvyzMo
eJG6nWPY1OzRGdW2U7bdJ6bAEFDCYqlS8a8M3HbezzGjxbiT53d4MfW+uoiaZY+g
Z0o67fPinuY6eo0drqZMfwaF8ROfaRLw0mqhcgtM7P4I7ZM75NZGUrHAPQXPAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQU5LKPaVd3MDm2I7Caoxjra0Rp2y4wHwYDVR0j
BBgwFoAU7aXophzBfA6rc/1uO50fJeQ0jMYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZYSFljcW1yVDVhMWhlbkpBdERpR0JDbkFhNGpYVHZqRGlLekIxY3E3
alUvMC9FREE1RThBNjFDQzE3QzBFQUI3M0ZENkUzQjlEMUYyNUU0MzQ4Q0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEQTVFOEE2MUNDMTdDMEVB
QjczRkQ2RTNCOUQxRjI1RTQzNDhDQzYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmWEhZY3FtclQ1YTFoZW5KQXREaUdCQ25BYTRqWFR2akRpS3pCMWNxN2pVLzAv
MzIzODMwMzQzYTM2MzQzODNhNjY2NjMwMzEzYTMxM2EzYTJmMzYzNDJkMzYzNDIw
M2QzZTIwMzUzMzMwMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAk
BggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJACgEBkj/AQABMA0GCSqGSIb3DQEB
CwUAA4IBAQANED9DGMUyLYy8T+BIF0M15DxoPIQCIMzLqF7ZtfHJp3cQ5PIq5oX6
ZJNRD/ir8SgIaUPT2OaC+3IFnkWxn1M1dYsw8NvE6VK7RnDcWTYHyg3fOm5LSjyS
36Hka2+Q8st9pQnsaBqmMx8hNpQe9nfaToaf/mlRinyaJrgLYEcMlyV1u5mmp28K
Bk4WiIAJPXd2vl7LVtpHWAjNtitc/ecHi4ThwnfH39TQNCO88EkcxiCQBVjhx9cF
iEdUeybsRkwrRp6sYnqRmUWN17LtVClFN11TSX+9a2dx50yjcF2KPoDlDaliE3er
uG5x2dKYzBykh2tPRBbBZaa9Y7VMzfLq
-----END CERTIFICATE-----
Generated at Mon Nov 25 11:55:28 2024 by rpki-client on console-fra.rpki-client.org