Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/323830343a343133303a3a2f33322d313238203d3e20323636303039.roa
File:                     323830343a343133303a3a2f33322d313238203d3e20323636303039.roa (raw, json)
Hash identifier:          6vCkdV5jGiyfe84eABLgwnpttQ1RIut/j9Ibt+5Unos=
Subject key identifier:   FD:E0:D9:78:81:46:81:1E:B9:64:88:77:7C:9A:90:02:A6:3B:62:33
Certificate issuer:       /CN=E33158FC471B5D009E830B8F6FF0E98385BA5815
Certificate serial:       0C89E45496EA3BB03DA94DC5EE511DAE06B41489
Authority key identifier: E3:31:58:FC:47:1B:5D:00:9E:83:0B:8F:6F:F0:E9:83:85:BA:58:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/323830343a343133303a3a2f33322d313238203d3e20323636303039.roa
Signing time:             Fri 13 Sep 2024 17:49:43 +0000
ROA not before:           Fri 13 Sep 2024 17:44:43 +0000
ROA not after:            Fri 12 Sep 2025 17:49:43 +0000
asID:                     266009
IP address blocks:        2804:4130::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:89:e4:54:96:ea:3b:b0:3d:a9:4d:c5:ee:51:1d:ae:06:b4:14:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E33158FC471B5D009E830B8F6FF0E98385BA5815
        Validity
            Not Before: Sep 13 17:44:43 2024 GMT
            Not After : Sep 12 17:49:43 2025 GMT
        Subject: CN=FDE0D9788146811EB96488777C9A9002A63B6233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:01:94:d9:0d:c8:93:10:3d:3c:61:86:c4:
                    31:8f:88:9a:31:91:7f:e2:a2:74:e4:89:73:7e:54:
                    9d:0b:0a:bf:ec:0e:de:14:5d:d9:e2:bd:2a:ab:46:
                    d1:55:2a:78:e8:d5:93:a0:11:f4:3b:09:38:5b:43:
                    ce:54:c5:fa:69:30:c5:6b:df:b2:d7:ab:01:d6:d0:
                    2a:03:6a:0a:2f:7c:b4:4a:98:01:36:64:f1:d3:00:
                    8e:1f:be:7e:cf:50:53:9a:01:b1:dc:c2:14:88:22:
                    a3:d8:0f:c9:f2:31:83:e3:f7:b5:74:8f:76:a0:22:
                    29:97:ab:7a:5f:0c:bd:b5:39:e4:b0:77:0c:e5:e1:
                    3c:a5:b7:bd:02:a1:a3:50:f6:cf:f6:03:70:2d:2c:
                    3f:b3:9b:20:25:59:b7:2f:be:2a:09:4d:bf:92:77:
                    d1:e8:f1:3b:d6:78:c8:8e:c3:39:51:6e:be:6a:f1:
                    f8:d6:78:c0:56:0f:87:33:a6:0f:2f:a4:69:e0:23:
                    ce:6b:cb:3b:2b:c4:de:2c:df:93:71:70:88:85:bc:
                    48:51:cf:97:82:a0:19:0d:7c:fd:f4:28:61:8c:56:
                    bc:ea:e7:00:00:3b:e4:35:c4:b9:58:96:f9:80:40:
                    55:e2:de:54:bd:f0:f1:7f:e9:63:fd:5b:9f:b1:d3:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E0:D9:78:81:46:81:1E:B9:64:88:77:7C:9A:90:02:A6:3B:62:33
            X509v3 Authority Key Identifier:
                keyid:E3:31:58:FC:47:1B:5D:00:9E:83:0B:8F:6F:F0:E9:83:85:BA:58:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/323830343a343133303a3a2f33322d313238203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4130::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:b0:29:4d:7a:a3:97:57:a9:dd:74:9f:38:54:49:07:cc:
         7c:d1:f7:b6:c3:46:39:f9:7d:0e:bd:c6:d4:b2:cc:87:ca:d3:
         b1:85:dd:6f:14:bb:73:93:aa:2b:ac:be:e1:3f:ae:1b:fb:f2:
         89:3f:2b:a7:f7:1b:9a:bb:21:ec:58:3e:d1:fd:04:8f:68:1b:
         c3:ba:26:a3:f3:bd:7d:f0:89:03:2b:ce:78:c4:bc:4e:e6:fe:
         3f:32:74:4f:ff:c3:5d:ab:90:b8:f7:c8:1d:21:ed:ba:9d:7d:
         d5:11:b4:91:e7:28:52:a7:cf:3c:18:8d:6d:41:1a:d6:6e:2c:
         0a:9d:10:fa:50:c4:6d:f8:af:30:a7:09:42:1c:cf:be:ab:2e:
         b1:31:35:0f:8d:73:23:79:0d:76:16:e1:b5:c5:31:83:e2:1c:
         29:4c:fd:be:72:9b:06:77:58:c9:51:fe:58:6f:0b:88:16:ac:
         b4:93:14:9f:44:fa:52:28:9a:46:51:f6:47:89:a2:37:fb:d2:
         68:af:43:96:da:f4:b8:b8:94:51:18:81:47:61:02:84:8f:5c:
         97:83:d3:92:75:2f:ce:72:3f:f2:cb:fa:43:21:ff:1b:e3:a0:
         0e:31:ca:37:8f:38:42:68:2b:c6:10:b1:8b:93:77:25:b7:07:
         cc:0f:0e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----