Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a383030303a3a2f33342d3334203d3e20323639323239.roa
File:                     323830343a363135383a383030303a3a2f33342d3334203d3e20323639323239.roa (raw, json)
Hash identifier:          hfPM8WCB8jYXNDy8wbqJarfkZQwRc8PC04L62/cUuZs=
Subject key identifier:   1C:22:E6:D3:FE:94:79:D7:69:5B:77:BF:08:E6:F9:5E:CC:8A:AB:D9
Certificate issuer:       /CN=99195B0BAD2907DB1435914B0988FE263B3B10AE
Certificate serial:       56482AD253DB9DECD1FB127C7D0AB221C92C46D5
Authority key identifier: 99:19:5B:0B:AD:29:07:DB:14:35:91:4B:09:88:FE:26:3B:3B:10:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99195B0BAD2907DB1435914B0988FE263B3B10AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a383030303a3a2f33342d3334203d3e20323639323239.roa
Signing time:             Sat 09 Nov 2024 00:30:02 +0000
ROA not before:           Sat 09 Nov 2024 00:25:02 +0000
ROA not after:            Sat 08 Nov 2025 00:30:02 +0000
asID:                     269229
IP address blocks:        2804:6158:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:48:2a:d2:53:db:9d:ec:d1:fb:12:7c:7d:0a:b2:21:c9:2c:46:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99195B0BAD2907DB1435914B0988FE263B3B10AE
        Validity
            Not Before: Nov  9 00:25:02 2024 GMT
            Not After : Nov  8 00:30:02 2025 GMT
        Subject: CN=1C22E6D3FE9479D7695B77BF08E6F95ECC8AABD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:1c:5b:a9:90:17:5e:95:8b:47:11:b2:28:
                    ff:6e:40:ec:9e:81:a6:3b:b9:a2:33:98:2b:03:98:
                    e3:5d:21:10:c9:12:c4:19:4c:35:21:48:4d:1a:09:
                    aa:63:e0:01:64:a9:23:64:d6:3f:fb:84:78:9e:1a:
                    8c:b9:29:34:3e:62:46:21:e8:60:64:2d:b8:b2:b7:
                    d3:86:23:c3:22:cd:11:8f:e7:e7:9b:87:3a:78:23:
                    f9:a5:57:4e:18:85:19:42:9d:7b:75:18:df:96:af:
                    e3:41:94:cb:8b:e4:5c:b2:92:09:01:5b:75:29:b1:
                    3f:3c:c8:67:b3:7d:b1:78:5a:57:46:91:e3:00:c7:
                    4b:b3:1c:41:bc:48:46:c6:43:6d:87:d1:f8:c5:35:
                    f8:79:be:7c:79:e7:29:c0:dc:1e:dd:a3:a3:4d:c6:
                    d3:ce:80:c9:14:1c:4c:6d:fd:14:b0:87:4f:88:e9:
                    64:0d:f7:2e:ce:0d:5c:f6:fc:a9:bf:98:1e:51:b9:
                    c9:56:c4:05:47:80:0c:06:e1:f6:ac:1b:c6:d7:10:
                    a3:7f:9c:94:ca:92:19:a2:3b:c0:db:b8:7f:8d:44:
                    5d:98:85:89:29:5a:0d:20:8e:8d:b6:2f:80:7d:51:
                    48:44:bb:73:fa:67:ca:bf:86:a5:ac:00:83:1e:07:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:22:E6:D3:FE:94:79:D7:69:5B:77:BF:08:E6:F9:5E:CC:8A:AB:D9
            X509v3 Authority Key Identifier:
                keyid:99:19:5B:0B:AD:29:07:DB:14:35:91:4B:09:88:FE:26:3B:3B:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/99195B0BAD2907DB1435914B0988FE263B3B10AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99195B0BAD2907DB1435914B0988FE263B3B10AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a383030303a3a2f33342d3334203d3e20323639323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6158:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:05:57:34:89:fe:f9:1e:89:0e:70:2c:75:51:80:00:52:2d:
         2a:54:89:d0:b7:49:bb:ce:2e:8f:b0:0f:fc:a1:04:82:40:da:
         89:e5:54:b1:51:37:ae:f5:27:21:93:fb:ec:ca:ea:d9:fd:2d:
         f8:44:00:92:4b:17:15:eb:d9:de:b5:81:23:a3:60:80:c1:96:
         9c:c8:35:98:9a:f6:a2:c3:2e:09:3d:eb:db:69:d5:47:2a:c7:
         88:30:bf:24:61:5d:03:17:35:91:9c:2e:63:d9:fb:8d:42:b8:
         ed:de:02:b9:a0:e4:fa:22:23:bf:d7:38:bf:61:8b:d9:a5:bd:
         22:e3:2c:9e:fc:0f:4f:df:52:08:53:ab:f5:a0:92:ba:33:b9:
         38:99:6d:2d:d1:16:43:3c:d6:f5:2e:c4:b6:8a:e0:e5:97:18:
         c0:53:3a:09:64:e0:5d:5b:9b:9b:de:80:69:64:1b:3e:e7:3b:
         c3:f3:53:7b:c1:a3:8d:e2:89:99:75:48:49:86:8e:93:b6:64:
         f5:77:52:2d:7b:44:61:66:76:32:a4:d1:ce:ff:0d:36:3d:83:
         d8:d3:bc:9d:41:3a:a9:64:b1:38:c3:33:79:a1:6b:6f:f8:18:
         b5:d6:0a:85:49:ca:81:3e:32:f7:bd:26:3c:f9:4c:4f:ab:c0:
         3f:07:a2:d5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVkgq0lPbnezR+xJ8fQqyIcksRtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkxOTVCMEJBRDI5MDdEQjE0MzU5MTRCMDk4OEZFMjYz
QjNCMTBBRTAeFw0yNDExMDkwMDI1MDJaFw0yNTExMDgwMDMwMDJaMDMxMTAvBgNV
BAMTKDFDMjJFNkQzRkU5NDc5RDc2OTVCNzdCRjA4RTZGOTVFQ0M4QUFCRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XBxbqZAXXpWLRxGyKP9uQOye
gaY7uaIzmCsDmONdIRDJEsQZTDUhSE0aCapj4AFkqSNk1j/7hHieGoy5KTQ+YkYh
6GBkLbiyt9OGI8MizRGP5+ebhzp4I/mlV04YhRlCnXt1GN+Wr+NBlMuL5FyykgkB
W3UpsT88yGezfbF4WldGkeMAx0uzHEG8SEbGQ22H0fjFNfh5vnx55ynA3B7do6NN
xtPOgMkUHExt/RSwh0+I6WQN9y7ODVz2/Km/mB5RuclWxAVHgAwG4fasG8bXEKN/
nJTKkhmiO8DbuH+NRF2YhYkpWg0gjo22L4B9UUhEu3P6Z8q/hqWsAIMeB2DDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUHCLm0/6UeddpW3e/COb5XsyKq9kwHwYDVR0j
BBgwFoAUmRlbC60pB9sUNZFLCYj+Jjs7EK4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJCcVptYVlmWTFMUUoxZHVpVmI4NmNBdWtMZnAxMmJuYTZwOXpCemFQ
eVYvMC85OTE5NUIwQkFEMjkwN0RCMTQzNTkxNEIwOTg4RkUyNjNCM0IxMEFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MTk1QjBCQUQyOTA3REIx
NDM1OTE0QjA5ODhGRTI2M0IzQjEwQUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCQnFabWFZZlkxTFFKMWR1aVZiODZjQXVrTGZwMTJibmE2cDl6QnphUHlWLzAv
MzIzODMwMzQzYTM2MzEzNTM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTMyMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEYViAMA0GCSqGSIb3DQEBCwUA
A4IBAQAmBVc0if75HokOcCx1UYAAUi0qVInQt0m7zi6PsA/8oQSCQNqJ5VSxUTeu
9Schk/vsyurZ/S34RACSSxcV69netYEjo2CAwZacyDWYmvaiwy4JPevbadVHKseI
ML8kYV0DFzWRnC5j2fuNQrjt3gK5oOT6IiO/1zi/YYvZpb0i4yye/A9P31IIU6v1
oJK6M7k4mW0t0RZDPNb1LsS2iuDllxjAUzoJZOBdW5ub3oBpZBs+5zvD81N7waON
4omZdUhJho6TtmT1d1Ite0RhZnYypNHO/w02PYPY07ydQTqpZLE4wzN5oWtv+Bi1
1gqFScqBPjL3vSY8+UxPq8A/B6LV
-----END CERTIFICATE-----
Generated at Sun Nov 24 14:06:42 2024 by rpki-client on console-ams.rpki-client.org