Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a336361633a3a2f33322d313238203d3e20323636323238.roa
File:                     323830343a336361633a3a2f33322d313238203d3e20323636323238.roa (raw, json)
Hash identifier:          naaLeLPlNK+tm4KLtRyuQIZTZZiiAmhY8HWc5UyEeEU=
Subject key identifier:   B2:41:2A:E0:DF:07:5A:54:53:8A:A8:5C:43:E7:7C:DC:AB:53:44:D0
Certificate issuer:       /CN=7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015
Certificate serial:       51449C9A4312043DAEA35CBE02B70E85DFEB44B8
Authority key identifier: 7A:3B:C2:ED:B1:14:CE:DB:D2:03:1F:E0:CD:75:71:7F:31:FF:00:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a336361633a3a2f33322d313238203d3e20323636323238.roa
Signing time:             Sat 02 Nov 2024 19:26:02 +0000
ROA not before:           Sat 02 Nov 2024 19:21:02 +0000
ROA not after:            Sat 01 Nov 2025 19:26:02 +0000
asID:                     266228
IP address blocks:        2804:3cac::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:44:9c:9a:43:12:04:3d:ae:a3:5c:be:02:b7:0e:85:df:eb:44:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015
        Validity
            Not Before: Nov  2 19:21:02 2024 GMT
            Not After : Nov  1 19:26:02 2025 GMT
        Subject: CN=B2412AE0DF075A54538AA85C43E77CDCAB5344D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:2b:ee:bb:96:46:24:5f:fb:66:df:06:03:
                    0c:e8:73:75:d8:d9:e3:97:84:25:ab:78:3e:1c:29:
                    08:57:9e:02:74:35:b2:4d:48:48:31:eb:7f:32:83:
                    94:f6:a1:0d:ad:77:52:6e:1c:3e:4b:76:92:c1:60:
                    df:aa:25:4d:2f:f5:61:5d:a6:18:1e:6a:f9:9a:22:
                    07:11:97:c4:84:60:68:54:7c:d8:19:61:49:2f:e1:
                    e3:4a:c2:e5:f7:61:1d:46:92:a8:d8:1b:6c:5d:22:
                    dc:1f:88:9f:6b:5e:49:a1:f2:f3:80:a2:18:16:3a:
                    87:a9:e3:a3:aa:7d:29:e3:fc:3e:b0:82:83:6b:95:
                    cf:e9:1d:4a:c9:28:fb:73:ee:3f:35:21:c0:37:a0:
                    04:86:1e:a1:ad:37:92:64:f0:76:a5:80:14:9b:63:
                    10:dd:23:6b:c9:f6:8d:d3:6a:95:40:23:34:52:3a:
                    b5:4e:2c:7a:2d:75:15:c7:f8:34:54:94:54:54:10:
                    e4:57:48:7f:40:0b:16:2e:a4:86:78:d5:47:c6:ff:
                    f6:45:b5:26:75:0a:9d:f8:c1:9a:92:3f:01:a5:a6:
                    84:fe:73:99:34:0b:0a:c2:62:9a:26:8c:64:94:85:
                    bc:93:44:41:90:a2:64:58:71:1b:01:f3:68:84:4f:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:41:2A:E0:DF:07:5A:54:53:8A:A8:5C:43:E7:7C:DC:AB:53:44:D0
            X509v3 Authority Key Identifier:
                keyid:7A:3B:C2:ED:B1:14:CE:DB:D2:03:1F:E0:CD:75:71:7F:31:FF:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a336361633a3a2f33322d313238203d3e20323636323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3cac::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:df:59:2f:a4:ca:7e:6b:79:2c:2e:fb:92:34:16:3c:6a:52:
         d3:09:df:5e:bc:13:50:34:d1:83:9d:0d:f9:8b:58:fb:7a:da:
         63:7f:8d:cd:76:bd:97:c2:c6:25:fb:ce:17:44:3f:31:3e:b9:
         1a:49:4b:c4:62:d4:1e:d9:93:49:0e:2c:a8:49:49:dc:57:25:
         7b:0c:1a:9f:24:23:c5:20:5a:a4:24:3e:b1:3d:cd:f1:95:51:
         6d:ee:7f:fc:90:04:99:7a:71:a0:a1:25:f1:08:20:39:cb:3b:
         ae:f6:41:97:31:8a:29:fe:6e:35:a6:a3:54:a1:e5:6d:54:cd:
         be:3e:d8:c6:9e:62:d3:fd:08:a9:7b:db:48:ad:8f:33:90:79:
         36:8c:79:30:59:2c:76:cc:ae:20:79:62:98:c2:f4:4a:0e:f7:
         c1:1b:44:c4:b2:51:35:89:54:8c:a1:21:2a:82:1e:fc:3a:79:
         69:57:25:d1:5b:c9:07:d6:0d:ca:43:e9:d3:31:1f:d3:a6:4b:
         c8:8b:58:54:2b:ab:c3:70:a0:78:34:40:fc:cc:be:e1:4c:e7:
         af:4c:ec:46:62:63:40:84:ec:a2:37:80:54:00:f4:5b:3e:62:
         36:69:aa:50:04:9e:cc:13:e4:24:6e:4c:e4:0b:32:dc:ac:86:
         ca:bc:d5:0e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUUScmkMSBD2uo1y+ArcOhd/rRLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0EzQkMyRURCMTE0Q0VEQkQyMDMxRkUwQ0Q3NTcxN0Yz
MUZGMDAxNTAeFw0yNDExMDIxOTIxMDJaFw0yNTExMDExOTI2MDJaMDMxMTAvBgNV
BAMTKEIyNDEyQUUwREYwNzVBNTQ1MzhBQTg1QzQzRTc3Q0RDQUI1MzQ0RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6Svuu5ZGJF/7Zt8GAwzoc3XY
2eOXhCWreD4cKQhXngJ0NbJNSEgx638yg5T2oQ2td1JuHD5LdpLBYN+qJU0v9WFd
phgeavmaIgcRl8SEYGhUfNgZYUkv4eNKwuX3YR1GkqjYG2xdItwfiJ9rXkmh8vOA
ohgWOoep46OqfSnj/D6wgoNrlc/pHUrJKPtz7j81IcA3oASGHqGtN5Jk8HalgBSb
YxDdI2vJ9o3TapVAIzRSOrVOLHotdRXH+DRUlFRUEORXSH9ACxYupIZ41UfG//ZF
tSZ1Cp34wZqSPwGlpoT+c5k0CwrCYpomjGSUhbyTREGQomRYcRsB82iET0mnAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUskEq4N8HWlRTiqhcQ+d83KtTRNAwHwYDVR0j
BBgwFoAUejvC7bEUztvSAx/gzXVxfzH/ABUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ244dTVuU1JtNm9TdVZObmtKZ2hZQmNyWURac0JnYktDNENSWHNTU28y
dzkvMC83QTNCQzJFREIxMTRDRURCRDIwMzFGRTBDRDc1NzE3RjMxRkYwMDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBM0JDMkVEQjExNENFREJE
MjAzMUZFMENENzU3MTdGMzFGRjAwMTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NuOHU1blNSbTZvU3VWTm5rSmdoWUJjcllEWnNCZ2JLQzRDUlhzU1NvMnc5LzAv
MzIzODMwMzQzYTMzNjM2MTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMjMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDysMA0GCSqGSIb3DQEBCwUAA4IBAQAv31kv
pMp+a3ksLvuSNBY8alLTCd9evBNQNNGDnQ35i1j7etpjf43Ndr2XwsYl+84XRD8x
PrkaSUvEYtQe2ZNJDiyoSUncVyV7DBqfJCPFIFqkJD6xPc3xlVFt7n/8kASZenGg
oSXxCCA5yzuu9kGXMYop/m41pqNUoeVtVM2+PtjGnmLT/Qipe9tIrY8zkHk2jHkw
WSx2zK4geWKYwvRKDvfBG0TEslE1iVSMoSEqgh78OnlpVyXRW8kH1g3KQ+nTMR/T
pkvIi1hUK6vDcKB4NED8zL7hTOevTOxGYmNAhOyiN4BUAPRbPmI2aapQBJ7ME+Qk
bkzkCzLcrIbKvNUO
-----END CERTIFICATE-----
Generated at Sun Nov 3 22:07:16 2024 by rpki-client on console-ams.rpki-client.org