Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/1/323830343a323535303a3a2f33322d3438203d3e20323634323733.roa
File:                     323830343a323535303a3a2f33322d3438203d3e20323634323733.roa (raw, json)
Hash identifier:          r6ao/FGR1yD28CMgLsKWVEval8aSzsq/X2sEB+x08v8=
Subject key identifier:   39:3C:F9:C9:FC:52:2D:17:86:93:36:D4:43:C9:FB:02:4E:EC:FE:C4
Certificate issuer:       /CN=61439C6B374499CD367F3A3160983AD24FB789C1
Certificate serial:       7C5DD4E9BA8C2AC052D302DFFDB5231DA9B4A2D1
Authority key identifier: 61:43:9C:6B:37:44:99:CD:36:7F:3A:31:60:98:3A:D2:4F:B7:89:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61439C6B374499CD367F3A3160983AD24FB789C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/1/323830343a323535303a3a2f33322d3438203d3e20323634323733.roa
Signing time:             Tue 06 Aug 2024 14:06:48 +0000
ROA not before:           Tue 06 Aug 2024 14:01:48 +0000
ROA not after:            Tue 05 Aug 2025 14:06:48 +0000
asID:                     264273
IP address blocks:        2804:2550::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5d:d4:e9:ba:8c:2a:c0:52:d3:02:df:fd:b5:23:1d:a9:b4:a2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61439C6B374499CD367F3A3160983AD24FB789C1
        Validity
            Not Before: Aug  6 14:01:48 2024 GMT
            Not After : Aug  5 14:06:48 2025 GMT
        Subject: CN=393CF9C9FC522D17869336D443C9FB024EECFEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:89:ef:35:7c:77:15:4e:03:9f:29:96:1e:
                    5c:0f:57:a2:50:49:f8:29:c9:5f:8d:42:ea:f8:90:
                    30:00:6e:0f:bd:85:61:73:34:12:9a:6a:4b:c9:ab:
                    60:8a:e1:4d:17:5b:f9:53:2b:e1:ed:a6:a5:b3:42:
                    e6:03:11:04:0c:cf:91:9a:d4:b3:bd:56:8b:7d:d6:
                    a3:88:4c:d0:fa:17:8d:9b:18:75:cc:ab:c4:6e:9d:
                    da:15:5e:a2:c7:85:fd:ab:20:13:0c:a8:96:68:a3:
                    f5:06:a9:29:43:d7:52:51:41:15:c1:cd:55:8e:cc:
                    0f:4b:dc:45:16:f1:57:f3:29:4d:32:9e:b5:a7:a3:
                    56:88:72:df:38:e8:54:e9:26:58:90:e9:65:fd:ce:
                    f4:16:fd:18:84:7e:9f:61:65:e0:6a:d4:98:0d:04:
                    7a:76:81:a6:35:ba:7c:8f:13:7b:44:06:be:0f:10:
                    22:ef:15:8c:44:70:56:76:4e:8d:85:3f:a6:f0:3b:
                    83:61:85:93:d4:d4:0e:55:a7:ab:15:94:09:c3:91:
                    fc:29:35:eb:af:40:d7:a4:2f:58:3f:6b:0a:1c:dc:
                    b6:03:e2:ba:0f:03:96:14:6c:d0:dc:8f:43:48:23:
                    0f:41:36:e9:be:9e:8d:5b:0c:88:87:67:32:cc:61:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3C:F9:C9:FC:52:2D:17:86:93:36:D4:43:C9:FB:02:4E:EC:FE:C4
            X509v3 Authority Key Identifier:
                keyid:61:43:9C:6B:37:44:99:CD:36:7F:3A:31:60:98:3A:D2:4F:B7:89:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/1/61439C6B374499CD367F3A3160983AD24FB789C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61439C6B374499CD367F3A3160983AD24FB789C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/1/323830343a323535303a3a2f33322d3438203d3e20323634323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2550::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:2e:94:91:35:aa:9e:5e:ab:c0:e0:b3:c6:b6:1d:a8:89:4e:
         d3:a1:4b:b0:df:4f:e9:c0:1d:cb:b5:c9:27:47:38:00:1f:2c:
         3c:c3:19:a3:93:b6:a4:01:e7:0a:8a:2f:54:b5:c4:93:10:31:
         a9:fa:b0:87:44:e1:78:72:22:f6:01:f3:b6:36:f4:3f:cb:27:
         14:ce:22:9a:3d:5b:77:44:a0:21:29:26:e4:1e:f4:f5:e1:49:
         b0:e4:ef:7e:a0:9c:e8:e7:9d:ae:4e:89:63:53:7b:c0:10:68:
         fd:cb:77:47:36:38:84:35:37:87:cd:91:b2:13:97:37:de:de:
         95:65:c1:55:80:20:82:77:ce:4f:e1:28:77:6d:33:df:f8:84:
         9c:2f:7c:17:ce:ea:5a:5d:44:49:2a:e3:3a:00:78:92:38:3f:
         41:4e:4c:e2:87:31:69:3e:50:54:1b:34:4c:eb:04:7e:f5:4c:
         8c:50:81:2b:d7:b4:2f:1e:5e:18:2e:0c:d2:75:d4:63:90:5d:
         64:e7:86:28:11:04:ae:37:52:e4:09:8a:26:a5:70:ec:e2:c4:
         5f:3e:da:f8:ee:ff:49:ba:ac:d9:ab:5f:98:35:1f:ec:b0:d7:
         72:df:83:35:d0:02:e0:be:06:cd:0a:d3:20:b4:5f:5a:9c:23:
         ce:c4:e8:bd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfF3U6bqMKsBS0wLf/bUjHam0otEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE0MzlDNkIzNzQ0OTlDRDM2N0YzQTMxNjA5ODNBRDI0
RkI3ODlDMTAeFw0yNDA4MDYxNDAxNDhaFw0yNTA4MDUxNDA2NDhaMDMxMTAvBgNV
BAMTKDM5M0NGOUM5RkM1MjJEMTc4NjkzMzZENDQzQzlGQjAyNEVFQ0ZFQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ZInvNXx3FU4DnymWHlwPV6JQ
SfgpyV+NQur4kDAAbg+9hWFzNBKaakvJq2CK4U0XW/lTK+HtpqWzQuYDEQQMz5Ga
1LO9Vot91qOITND6F42bGHXMq8RundoVXqLHhf2rIBMMqJZoo/UGqSlD11JRQRXB
zVWOzA9L3EUW8VfzKU0ynrWno1aIct846FTpJliQ6WX9zvQW/RiEfp9hZeBq1JgN
BHp2gaY1unyPE3tEBr4PECLvFYxEcFZ2To2FP6bwO4NhhZPU1A5Vp6sVlAnDkfwp
NeuvQNekL1g/awoc3LYD4roPA5YUbNDcj0NIIw9BNum+no1bDIiHZzLMYYh3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOTz5yfxSLReGkzbUQ8n7Ak7s/sQwHwYDVR0j
BBgwFoAUYUOcazdEmc02fzoxYJg60k+3icEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzFNVm5Rbmk5OXZ3QTdIcjZqV25ORXc0a1d0blQ0R1A5ZWZnWW5IbTVn
MlkvMS82MTQzOUM2QjM3NDQ5OUNEMzY3RjNBMzE2MDk4M0FEMjRGQjc4OUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxNDM5QzZCMzc0NDk5Q0Qz
NjdGM0EzMTYwOTgzQUQyNEZCNzg5QzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMxTVZuUW5pOTl2d0E3SHI2alduTkV3NGtXdG5UNEdQOWVmZ1luSG01ZzJZLzEv
MzIzODMwMzQzYTMyMzUzNTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzIzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQlUDANBgkqhkiG9w0BAQsFAAOCAQEAOi6UkTWq
nl6rwOCzxrYdqIlO06FLsN9P6cAdy7XJJ0c4AB8sPMMZo5O2pAHnCoovVLXEkxAx
qfqwh0TheHIi9gHztjb0P8snFM4imj1bd0SgISkm5B709eFJsOTvfqCc6Oedrk6J
Y1N7wBBo/ct3RzY4hDU3h82RshOXN97elWXBVYAggnfOT+Eod20z3/iEnC98F87q
Wl1ESSrjOgB4kjg/QU5M4ocxaT5QVBs0TOsEfvVMjFCBK9e0Lx5eGC4M0nXUY5Bd
ZOeGKBEErjdS5AmKJqVw7OLEXz7a+O7/Sbqs2atfmDUf7LDXct+DNdAC4L4GzQrT
ILRfWpwjzsTovQ==
-----END CERTIFICATE-----