Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3232383a3a2f34352d313238203d3e20323638353634.roa
File:                     323830343a353331633a3232383a3a2f34352d313238203d3e20323638353634.roa (raw, json)
Hash identifier:          1ksNh/bpHdgbM/KiNl9PW3J8J8rIOzuR3BOCUx9NJTA=
Subject key identifier:   BF:35:64:4A:EC:0B:19:AA:0C:FD:99:4B:42:73:C1:FC:1C:EB:8D:B3
Certificate issuer:       /CN=4B36F6F61A74C627935F4971F2A9C165761A178A
Certificate serial:       2650C4BD57B7952D70CEE32BE64395B5AB06CFD7
Authority key identifier: 4B:36:F6:F6:1A:74:C6:27:93:5F:49:71:F2:A9:C1:65:76:1A:17:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B36F6F61A74C627935F4971F2A9C165761A178A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3232383a3a2f34352d313238203d3e20323638353634.roa
Signing time:             Thu 19 Sep 2024 14:21:48 +0000
ROA not before:           Thu 19 Sep 2024 14:16:48 +0000
ROA not after:            Thu 18 Sep 2025 14:21:48 +0000
asID:                     268564
IP address blocks:        2804:531c:228::/45 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:50:c4:bd:57:b7:95:2d:70:ce:e3:2b:e6:43:95:b5:ab:06:cf:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B36F6F61A74C627935F4971F2A9C165761A178A
        Validity
            Not Before: Sep 19 14:16:48 2024 GMT
            Not After : Sep 18 14:21:48 2025 GMT
        Subject: CN=BF35644AEC0B19AA0CFD994B4273C1FC1CEB8DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:68:e0:19:c8:5d:8a:33:01:3a:fd:a8:ba:55:
                    90:28:a1:f8:ef:32:47:c3:c6:d1:84:2e:6f:c6:2e:
                    cf:80:18:82:d7:48:f1:08:d6:31:67:15:55:52:32:
                    80:6e:aa:c3:d5:9c:06:95:4e:da:7e:e2:6f:5d:58:
                    ea:25:15:0d:53:23:d8:e9:1f:70:15:a1:f2:a2:9a:
                    e4:f5:fd:78:9d:6f:36:fc:0a:f0:8f:b7:b5:35:e6:
                    4f:be:19:f2:fb:a7:5d:aa:81:78:54:6e:df:57:70:
                    47:3b:33:48:a4:bb:09:90:b5:fe:43:8b:af:8e:94:
                    37:dc:e8:47:77:a1:b0:67:e5:cd:4b:85:82:ec:db:
                    5c:54:70:6b:ce:bf:4d:53:2b:b2:f5:6a:d7:11:c8:
                    ec:a0:e1:73:13:b7:be:5f:37:eb:fc:b2:8f:38:02:
                    85:fb:ac:ee:01:1e:3a:6b:fd:08:0f:29:a7:86:b0:
                    e6:99:9b:bf:e4:b8:67:6b:9a:6c:03:d0:1a:e2:6f:
                    2f:d9:ec:e3:a8:34:cf:82:4b:cf:2a:8d:1a:51:83:
                    3a:b6:80:0b:60:63:59:81:43:ef:3d:a0:67:67:16:
                    6a:eb:38:83:4b:2c:1d:d7:f8:40:f1:61:d6:77:1f:
                    0f:48:fe:7b:e9:9e:6e:d8:e8:8e:77:09:d6:9b:01:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:35:64:4A:EC:0B:19:AA:0C:FD:99:4B:42:73:C1:FC:1C:EB:8D:B3
            X509v3 Authority Key Identifier:
                keyid:4B:36:F6:F6:1A:74:C6:27:93:5F:49:71:F2:A9:C1:65:76:1A:17:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/4B36F6F61A74C627935F4971F2A9C165761A178A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B36F6F61A74C627935F4971F2A9C165761A178A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3232383a3a2f34352d313238203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:531c:228::/45

    Signature Algorithm: sha256WithRSAEncryption
         a6:8a:8a:a2:31:6f:b9:54:e5:14:92:32:e1:4d:13:a1:fa:a1:
         f3:bb:53:34:62:ea:41:74:8a:55:b5:71:14:bc:9a:94:17:32:
         46:67:9c:f1:85:bd:84:21:99:a1:2f:07:ef:5a:c9:26:27:70:
         4e:ad:86:90:1f:cd:e8:71:60:2e:a9:6c:81:5a:e4:43:2e:77:
         88:cf:13:6d:ed:78:c0:0e:e4:93:b6:06:c8:12:07:13:dc:24:
         91:c2:1a:55:15:c9:78:c5:81:c4:17:79:bc:1e:bc:e5:8e:8b:
         d5:8e:5c:27:61:c8:5b:69:63:14:67:df:d5:05:6d:df:c1:b6:
         2b:03:6c:6b:2a:13:35:b1:42:0c:83:1f:ac:e9:69:74:94:16:
         b5:e7:d4:72:09:dc:96:b6:e8:7f:0c:7a:2c:3e:86:f3:2b:8e:
         bf:ed:60:1e:ec:3d:33:62:eb:b8:a4:99:00:45:7a:77:28:ed:
         0b:ec:bb:06:65:62:5b:8a:8b:48:de:0a:c5:2c:97:44:ae:4a:
         19:89:87:30:cf:09:69:18:a6:3a:09:f6:6c:1c:be:1d:bd:d9:
         22:85:7d:d2:92:cc:f4:28:cc:45:36:27:62:01:fc:81:20:cd:
         a8:19:2f:e4:4b:f6:b7:c3:b3:91:83:ff:d1:26:01:94:26:24:
         b6:c3:0c:0d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUJlDEvVe3lS1wzuMr5kOVtasGz9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIzNkY2RjYxQTc0QzYyNzkzNUY0OTcxRjJBOUMxNjU3
NjFBMTc4QTAeFw0yNDA5MTkxNDE2NDhaFw0yNTA5MTgxNDIxNDhaMDMxMTAvBgNV
BAMTKEJGMzU2NDRBRUMwQjE5QUEwQ0ZEOTk0QjQyNzNDMUZDMUNFQjhEQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwaOAZyF2KMwE6/ai6VZAoofjv
MkfDxtGELm/GLs+AGILXSPEI1jFnFVVSMoBuqsPVnAaVTtp+4m9dWOolFQ1TI9jp
H3AVofKimuT1/Xidbzb8CvCPt7U15k++GfL7p12qgXhUbt9XcEc7M0ikuwmQtf5D
i6+OlDfc6Ed3obBn5c1LhYLs21xUcGvOv01TK7L1atcRyOyg4XMTt75fN+v8so84
AoX7rO4BHjpr/QgPKaeGsOaZm7/kuGdrmmwD0Briby/Z7OOoNM+CS88qjRpRgzq2
gAtgY1mBQ+89oGdnFmrrOINLLB3X+EDxYdZ3Hw9I/nvpnm7Y6I53CdabAX/1AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUvzVkSuwLGaoM/ZlLQnPB/BzrjbMwHwYDVR0j
BBgwFoAUSzb29hp0xieTX0lx8qnBZXYaF4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdo
YW4vMC80QjM2RjZGNjFBNzRDNjI3OTM1RjQ5NzFGMkE5QzE2NTc2MUExNzhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMzZGNkY2MUE3NEM2Mjc5
MzVGNDk3MUYyQTlDMTY1NzYxQTE3OEEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0TFhVY2RZU2Q2N2k3b0N5SnBWVEhVMWZ5QjU5SkttaHU5MlRqcDFnaGFuLzAv
MzIzODMwMzQzYTM1MzMzMTYzM2EzMjMyMzgzYTNhMmYzNDM1MmQzMTMyMzgyMDNk
M2UyMDMyMzYzODM1MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAygEUxwCKDANBgkqhkiG9w0BAQsF
AAOCAQEApoqKojFvuVTlFJIy4U0Tofqh87tTNGLqQXSKVbVxFLyalBcyRmec8YW9
hCGZoS8H71rJJidwTq2GkB/N6HFgLqlsgVrkQy53iM8Tbe14wA7kk7YGyBIHE9wk
kcIaVRXJeMWBxBd5vB685Y6L1Y5cJ2HIW2ljFGff1QVt38G2KwNsayoTNbFCDIMf
rOlpdJQWtefUcgnclrbofwx6LD6G8yuOv+1gHuw9M2LruKSZAEV6dyjtC+y7BmVi
W4qLSN4KxSyXRK5KGYmHMM8JaRimOgn2bBy+Hb3ZIoV90pLM9CjMRTYnYgH8gSDN
qBkv5Ev2t8OzkYP/0SYBlCYktsMMDQ==
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:34 2024 by rpki-client on console-fra.rpki-client.org