Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/323830343a323434303a3a2f33322d313238203d3e203532363836.roa
File:                     323830343a323434303a3a2f33322d313238203d3e203532363836.roa (raw, json)
Hash identifier:          JiBXkvkJz5muKQ5KCgLqeYWmyyvWt9G3/OBR3pKc/eM=
Subject key identifier:   41:69:0A:D9:3A:B7:85:D1:A5:61:16:BF:AB:80:00:3C:10:07:45:95
Certificate issuer:       /CN=846D7379C88D5AFBF7CDFD326168161333BA620A
Certificate serial:       23BFC9294419A06267F69C6B7676B4FF837E536D
Authority key identifier: 84:6D:73:79:C8:8D:5A:FB:F7:CD:FD:32:61:68:16:13:33:BA:62:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/846D7379C88D5AFBF7CDFD326168161333BA620A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/323830343a323434303a3a2f33322d313238203d3e203532363836.roa
Signing time:             Thu 03 Oct 2024 15:14:06 +0000
ROA not before:           Thu 03 Oct 2024 15:09:06 +0000
ROA not after:            Thu 02 Oct 2025 15:14:06 +0000
asID:                     52686
IP address blocks:        2804:2440::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bf:c9:29:44:19:a0:62:67:f6:9c:6b:76:76:b4:ff:83:7e:53:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846D7379C88D5AFBF7CDFD326168161333BA620A
        Validity
            Not Before: Oct  3 15:09:06 2024 GMT
            Not After : Oct  2 15:14:06 2025 GMT
        Subject: CN=41690AD93AB785D1A56116BFAB80003C10074595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:b2:bb:c3:1c:af:bb:4f:88:c1:13:8b:38:
                    44:7d:68:64:46:8e:f0:fa:b1:9f:fd:1c:25:37:59:
                    ff:35:61:13:15:4b:6c:48:a2:8b:ef:5b:b0:a0:65:
                    8c:78:73:28:08:ef:be:72:da:6b:db:07:68:60:f4:
                    a2:80:64:f5:0c:87:d2:f3:90:2f:33:91:f6:af:6c:
                    55:49:05:ae:c8:f6:38:87:7a:5f:35:e1:7f:6f:db:
                    e2:91:b8:17:09:cb:bf:e9:38:ea:dc:92:ca:0c:fe:
                    77:53:fc:61:17:bd:74:0c:75:cb:45:fe:33:6f:57:
                    41:68:7e:b4:8f:f4:3e:98:bb:b4:fc:2a:dd:93:1d:
                    99:79:74:4b:10:70:cf:67:be:c9:e6:56:55:ee:84:
                    1a:be:45:3a:eb:c7:e5:3f:01:4c:4d:d8:86:38:89:
                    ef:9c:f8:ad:89:42:5d:54:ff:5e:98:49:2e:aa:e7:
                    ee:b2:83:96:b4:c4:1f:c0:7c:b6:2a:a4:09:f7:7f:
                    bb:f1:01:63:df:1d:da:1a:3c:44:29:a7:2b:41:4d:
                    a2:15:79:f2:2a:ff:f5:7f:9f:2c:b8:cd:c5:8c:55:
                    7a:e2:0c:a0:62:53:7f:3a:88:47:39:da:9f:d9:77:
                    dd:82:43:a0:75:63:28:23:ca:75:c3:39:08:16:0c:
                    4d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:69:0A:D9:3A:B7:85:D1:A5:61:16:BF:AB:80:00:3C:10:07:45:95
            X509v3 Authority Key Identifier:
                keyid:84:6D:73:79:C8:8D:5A:FB:F7:CD:FD:32:61:68:16:13:33:BA:62:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/846D7379C88D5AFBF7CDFD326168161333BA620A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/846D7379C88D5AFBF7CDFD326168161333BA620A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/323830343a323434303a3a2f33322d313238203d3e203532363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2440::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:c1:00:69:b9:f0:3b:a9:1d:ee:80:b0:44:6f:d6:0f:03:79:
         b5:b3:18:b4:8d:76:b4:70:ea:e5:bf:a9:8b:88:3a:18:eb:ee:
         9e:af:de:13:ca:16:e6:df:64:29:41:c0:3f:db:05:1c:ab:d6:
         46:bf:b1:41:ff:e2:10:f9:aa:db:e6:91:04:86:1f:46:af:28:
         9f:4b:b3:46:8c:80:91:de:89:31:21:25:f7:e4:21:f0:5c:35:
         01:7b:a2:cd:6a:2c:86:e4:87:95:4a:1b:8e:24:3b:fb:53:e8:
         b7:08:df:39:6d:5c:7e:e4:10:84:84:cf:a3:23:05:d2:04:3c:
         54:a9:0c:6f:6a:de:55:fa:13:23:72:ed:04:41:f5:90:ee:af:
         6e:a9:ad:0f:1f:42:1e:3f:37:e1:9e:43:6b:1d:f1:8b:d6:61:
         e0:f6:e3:2e:14:0f:50:9e:b2:31:93:eb:eb:a6:8b:23:f9:8a:
         b5:b3:79:3a:33:0a:09:d7:85:6b:15:b5:96:48:a8:6a:f5:ca:
         69:3b:ee:84:83:78:40:ce:c5:fb:1f:33:cb:66:57:ce:b9:c3:
         5a:bd:b5:1c:e6:a4:1b:2d:0a:0d:0e:fa:fb:f7:a1:64:96:74:
         e2:b3:3d:ce:5e:e8:b5:a9:b1:68:df:09:55:82:d0:71:6a:44:
         a2:2a:44:d2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUI7/JKUQZoGJn9pxrdna0/4N+U20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ2RDczNzlDODhENUFGQkY3Q0RGRDMyNjE2ODE2MTMz
M0JBNjIwQTAeFw0yNDEwMDMxNTA5MDZaFw0yNTEwMDIxNTE0MDZaMDMxMTAvBgNV
BAMTKDQxNjkwQUQ5M0FCNzg1RDFBNTYxMTZCRkFCODAwMDNDMTAwNzQ1OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrA7K7wxyvu0+IwROLOER9aGRG
jvD6sZ/9HCU3Wf81YRMVS2xIoovvW7CgZYx4cygI775y2mvbB2hg9KKAZPUMh9Lz
kC8zkfavbFVJBa7I9jiHel814X9v2+KRuBcJy7/pOOrcksoM/ndT/GEXvXQMdctF
/jNvV0FofrSP9D6Yu7T8Kt2THZl5dEsQcM9nvsnmVlXuhBq+RTrrx+U/AUxN2IY4
ie+c+K2JQl1U/16YSS6q5+6yg5a0xB/AfLYqpAn3f7vxAWPfHdoaPEQppytBTaIV
efIq//V/nyy4zcWMVXriDKBiU386iEc52p/Zd92CQ6B1YygjynXDOQgWDE0ZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUQWkK2Tq3hdGlYRa/q4AAPBAHRZUwHwYDVR0j
BBgwFoAUhG1zeciNWvv3zf0yYWgWEzO6YgowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Wbzl4OFZlR2RuUXZ3VXRSdm12V1Vkc0trOFZaYXFBY2pRQk04UFZNSFA3
LzAvODQ2RDczNzlDODhENUFGQkY3Q0RGRDMyNjE2ODE2MTMzM0JBNjIwQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84NDZENzM3OUM4OEQ1QUZCRjdD
REZEMzI2MTY4MTYxMzMzQkE2MjBBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9W
bzl4OFZlR2RuUXZ3VXRSdm12V1Vkc0trOFZaYXFBY2pRQk04UFZNSFA3LzAvMzIz
ODMwMzQzYTMyMzQzNDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMyMzYz
ODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQkQDANBgkqhkiG9w0BAQsFAAOCAQEAb8EAabnwO6kd
7oCwRG/WDwN5tbMYtI12tHDq5b+pi4g6GOvunq/eE8oW5t9kKUHAP9sFHKvWRr+x
Qf/iEPmq2+aRBIYfRq8on0uzRoyAkd6JMSEl9+Qh8Fw1AXuizWoshuSHlUobjiQ7
+1PotwjfOW1cfuQQhITPoyMF0gQ8VKkMb2reVfoTI3LtBEH1kO6vbqmtDx9CHj83
4Z5Dax3xi9Zh4PbjLhQPUJ6yMZPr66aLI/mKtbN5OjMKCdeFaxW1lkioavXKaTvu
hIN4QM7F+x8zy2ZXzrnDWr21HOakGy0KDQ76+/ehZJZ04rM9zl7otamxaN8JVYLQ
cWpEoipE0g==
-----END CERTIFICATE-----
Generated at Thu Oct 24 10:40:05 2024 by rpki-client on console-fra.rpki-client.org