Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/323830343a353361343a3a2f33322d313238203d3e20323638353937.roa
File:                     323830343a353361343a3a2f33322d313238203d3e20323638353937.roa (raw, json)
Hash identifier:          u2Ohl9sVX1IeQpxDT6AkC6sqaCPuCNeNOvvQ2Dcc1KE=
Subject key identifier:   36:68:F1:C0:58:DE:88:F2:46:59:29:86:8E:D3:18:E0:A2:4E:B7:B1
Certificate issuer:       /CN=0B38A59F2FDDDE45684F6171EE1D68D2EE29F528
Certificate serial:       6C3624F3F78A77E4BB94E75C4E54F8F39D1A3377
Authority key identifier: 0B:38:A5:9F:2F:DD:DE:45:68:4F:61:71:EE:1D:68:D2:EE:29:F5:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/323830343a353361343a3a2f33322d313238203d3e20323638353937.roa
Signing time:             Thu 01 Aug 2024 15:12:12 +0000
ROA not before:           Thu 01 Aug 2024 15:07:12 +0000
ROA not after:            Thu 31 Jul 2025 15:12:12 +0000
asID:                     268597
IP address blocks:        2804:53a4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:36:24:f3:f7:8a:77:e4:bb:94:e7:5c:4e:54:f8:f3:9d:1a:33:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B38A59F2FDDDE45684F6171EE1D68D2EE29F528
        Validity
            Not Before: Aug  1 15:07:12 2024 GMT
            Not After : Jul 31 15:12:12 2025 GMT
        Subject: CN=3668F1C058DE88F2465929868ED318E0A24EB7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:cd:4a:f4:fa:37:cc:44:34:ec:b1:4f:5d:
                    d0:3c:b9:0a:1f:8a:71:63:d0:51:b8:c2:8b:71:b4:
                    83:ef:05:4c:34:cd:84:8a:c5:eb:4f:5c:22:07:35:
                    7f:c7:34:4e:f0:88:f8:45:9a:15:c9:23:51:b8:24:
                    92:2a:ce:1d:30:2b:f9:16:5d:8d:38:f0:73:2c:6c:
                    e7:39:48:b7:f8:21:fc:d9:ab:ce:5f:7b:04:52:3e:
                    5a:7b:3a:95:f5:ca:e8:87:df:92:61:36:83:15:0a:
                    ac:a8:b3:6f:a9:6b:a9:75:ee:6c:e6:dc:86:63:df:
                    34:e7:43:32:05:68:84:f8:f5:10:7e:98:25:c1:c6:
                    4e:1d:48:40:7d:f6:26:57:7c:6d:d8:0b:bd:15:a6:
                    7b:ea:68:c4:e1:0d:7a:77:76:61:7e:2b:4e:f0:7a:
                    06:4e:16:1b:c9:8d:a3:f5:6c:9c:9d:26:a9:58:1f:
                    55:88:10:30:06:64:2b:1e:57:93:72:25:c4:c9:f7:
                    0d:53:c6:9f:a6:da:c4:33:a9:31:6f:a8:71:c7:6c:
                    db:a0:59:c0:51:d2:3f:ae:91:e5:c8:2d:4c:12:bb:
                    e7:d5:dd:f6:79:50:92:57:8e:32:83:c4:17:08:60:
                    b4:a6:b1:1f:0c:88:b6:43:0b:ab:e3:f8:86:98:bc:
                    46:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:68:F1:C0:58:DE:88:F2:46:59:29:86:8E:D3:18:E0:A2:4E:B7:B1
            X509v3 Authority Key Identifier:
                keyid:0B:38:A5:9F:2F:DD:DE:45:68:4F:61:71:EE:1D:68:D2:EE:29:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/323830343a353361343a3a2f33322d313238203d3e20323638353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:1f:0a:04:7c:6c:96:95:ea:a7:f4:28:11:54:3f:da:55:c1:
         49:93:01:c5:5f:b3:86:c7:76:44:27:69:2d:d9:8b:00:78:27:
         73:03:78:57:51:4d:16:66:44:67:e9:cd:ce:ef:34:c0:23:e7:
         3d:0f:e5:ad:ea:05:c1:78:0f:07:9b:90:b0:60:56:20:98:55:
         2f:1d:ae:9d:c0:26:0b:85:d7:33:3d:12:48:2e:8d:b1:39:96:
         b4:1c:5b:6a:80:27:2d:46:73:33:77:41:2c:ab:42:b1:cf:e8:
         16:7d:85:40:bc:dd:a5:80:ef:a9:58:7b:b8:0a:0f:77:fe:a9:
         c4:e9:0f:4f:db:9b:16:ed:7e:0c:b1:22:78:13:28:55:7b:72:
         fc:c6:71:1e:fc:1b:03:09:75:92:5d:db:ed:1c:d9:7e:1d:74:
         7f:17:ea:a0:90:60:7b:d3:7c:d5:4f:42:e5:30:69:d8:51:2f:
         46:ec:7b:4e:19:a0:88:87:95:a7:1a:76:1b:bd:66:5d:f5:09:
         9e:1e:2b:be:8c:f4:22:4c:22:7a:04:83:b8:f1:c4:64:09:b7:
         72:95:53:37:50:d8:4d:79:83:ba:ef:64:72:83:c8:5b:92:b6:
         8c:35:b6:f7:9e:3c:c1:f6:5b:38:3a:e1:5d:32:54:99:33:9d:
         7e:5a:d1:4b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUbDYk8/eKd+S7lOdcTlT4850aM3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIzOEE1OUYyRkREREU0NTY4NEY2MTcxRUUxRDY4RDJF
RTI5RjUyODAeFw0yNDA4MDExNTA3MTJaFw0yNTA3MzExNTEyMTJaMDMxMTAvBgNV
BAMTKDM2NjhGMUMwNThERTg4RjI0NjU5Mjk4NjhFRDMxOEUwQTI0RUI3QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjL81K9Po3zEQ07LFPXdA8uQof
inFj0FG4wotxtIPvBUw0zYSKxetPXCIHNX/HNE7wiPhFmhXJI1G4JJIqzh0wK/kW
XY048HMsbOc5SLf4IfzZq85fewRSPlp7OpX1yuiH35JhNoMVCqyos2+pa6l17mzm
3IZj3zTnQzIFaIT49RB+mCXBxk4dSEB99iZXfG3YC70VpnvqaMThDXp3dmF+K07w
egZOFhvJjaP1bJydJqlYH1WIEDAGZCseV5NyJcTJ9w1Txp+m2sQzqTFvqHHHbNug
WcBR0j+ukeXILUwSu+fV3fZ5UJJXjjKDxBcIYLSmsR8MiLZDC6vj+IaYvEY7AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUNmjxwFjeiPJGWSmGjtMY4KJOt7EwHwYDVR0j
BBgwFoAUCzilny/d3kVoT2Fx7h1o0u4p9SgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhDcGYzd295WnVvaWJnR0pGNnB4NHZaWFZldnY4cnJ4UjNlUURMY3p0
bUMvMC8wQjM4QTU5RjJGRERERTQ1Njg0RjYxNzFFRTFENjhEMkVFMjlGNTI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMzhBNTlGMkZERERFNDU2
ODRGNjE3MUVFMUQ2OEQyRUUyOUY1MjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYQ3BmM3dveVp1b2liZ0dKRjZweDR2WlhWZXZ2OHJyeFIzZVFETGN6dG1DLzAv
MzIzODMwMzQzYTM1MzM2MTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFOkMA0GCSqGSIb3DQEBCwUAA4IBAQBjHwoE
fGyWleqn9CgRVD/aVcFJkwHFX7OGx3ZEJ2kt2YsAeCdzA3hXUU0WZkRn6c3O7zTA
I+c9D+Wt6gXBeA8Hm5CwYFYgmFUvHa6dwCYLhdczPRJILo2xOZa0HFtqgCctRnMz
d0Esq0Kxz+gWfYVAvN2lgO+pWHu4Cg93/qnE6Q9P25sW7X4MsSJ4EyhVe3L8xnEe
/BsDCXWSXdvtHNl+HXR/F+qgkGB703zVT0LlMGnYUS9G7HtOGaCIh5WnGnYbvWZd
9QmeHiu+jPQiTCJ6BIO48cRkCbdylVM3UNhNeYO672Ryg8hbkraMNbb3njzB9ls4
OuFdMlSZM51+WtFL
-----END CERTIFICATE-----
Generated at Sat Aug 10 14:50:05 2024 by rpki-client on console-ams.rpki-client.org