Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/323830343a323766343a3a2f33322d313238203d3e20323633393331.roa
File:                     323830343a323766343a3a2f33322d313238203d3e20323633393331.roa (raw, json)
Hash identifier:          0jWCP3ix2icTqzZU/ybtKQJUdUML5ylV5yJeKYu8K/I=
Subject key identifier:   DB:3D:FA:D1:47:B9:02:ED:CF:8F:F0:21:52:0D:22:72:A3:5D:48:B8
Certificate issuer:       /CN=0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5
Certificate serial:       05891F1CE2A7E89B02763D7F466436156653FA16
Authority key identifier: 04:43:FC:FC:D1:3B:EA:6D:91:E1:CD:71:54:46:13:BD:4E:2A:69:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/323830343a323766343a3a2f33322d313238203d3e20323633393331.roa
Signing time:             Mon 19 Aug 2024 14:52:00 +0000
ROA not before:           Mon 19 Aug 2024 14:47:00 +0000
ROA not after:            Mon 18 Aug 2025 14:52:00 +0000
asID:                     263931
IP address blocks:        2804:27f4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:89:1f:1c:e2:a7:e8:9b:02:76:3d:7f:46:64:36:15:66:53:fa:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5
        Validity
            Not Before: Aug 19 14:47:00 2024 GMT
            Not After : Aug 18 14:52:00 2025 GMT
        Subject: CN=DB3DFAD147B902EDCF8FF021520D2272A35D48B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:50:05:e6:f5:62:d4:03:84:a2:40:ba:53:77:
                    bb:69:1a:c9:42:77:f6:f5:db:3d:9c:af:18:50:7a:
                    c1:18:12:15:00:bf:f9:41:10:29:1f:36:4c:a3:df:
                    9e:e3:38:d2:b3:f3:4b:18:a4:7b:31:dd:6e:a6:8d:
                    ae:d7:b0:d0:cc:63:89:9f:fa:ad:25:ea:f7:67:98:
                    6e:3c:39:85:ba:c6:8e:db:4e:d9:44:93:8a:7d:14:
                    e8:1b:c1:77:27:26:e8:ad:31:d5:10:15:8d:e8:1a:
                    02:ac:43:9f:b4:40:32:c3:85:17:76:58:c1:1c:6d:
                    73:69:4e:df:0a:44:4c:6e:27:78:a9:fc:03:b8:26:
                    e8:1f:d1:88:73:49:f3:88:5b:af:b6:c4:23:70:43:
                    30:10:b9:50:2c:36:79:9b:3d:6c:76:87:dc:7a:1b:
                    82:85:f1:3d:74:46:43:5f:6d:47:2d:fd:49:6d:e3:
                    a4:b1:a5:f4:3a:86:e0:ce:4f:37:d1:8d:51:4e:31:
                    74:fe:8d:0d:a9:e7:70:6d:27:cd:88:9f:71:8c:ff:
                    b7:6a:91:13:65:2f:cf:4b:b0:7f:cd:91:a6:dd:01:
                    70:00:a2:56:12:b8:12:b7:f9:fc:d5:d8:f1:68:81:
                    e0:66:00:68:31:8f:4e:2a:f8:13:0f:df:8c:b7:5b:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3D:FA:D1:47:B9:02:ED:CF:8F:F0:21:52:0D:22:72:A3:5D:48:B8
            X509v3 Authority Key Identifier:
                keyid:04:43:FC:FC:D1:3B:EA:6D:91:E1:CD:71:54:46:13:BD:4E:2A:69:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/323830343a323766343a3a2f33322d313238203d3e20323633393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:4b:d9:42:06:00:fe:94:23:48:f7:7c:68:d0:d8:18:9d:79:
         25:1d:73:8b:f2:a1:d0:09:bf:0a:4a:6d:50:82:f9:09:37:e6:
         d8:be:a6:4e:ae:68:b6:84:c6:c6:1e:d8:68:6d:0b:1c:c7:05:
         ed:74:c7:76:77:ce:f9:e8:54:56:eb:cc:37:7a:55:f9:1c:e7:
         4d:c8:61:09:a7:4b:5e:e8:02:3d:3e:5b:76:b6:d1:ad:4e:a6:
         6e:f9:5a:a6:fb:ca:e8:54:18:eb:80:a5:2d:10:fa:5b:d2:9f:
         7e:f9:6a:6f:fe:57:09:4c:34:da:35:ad:22:aa:41:c3:cb:b0:
         87:21:e3:ed:0f:03:df:ac:4a:07:96:47:67:20:e8:f6:79:61:
         ff:bb:75:b2:41:f6:72:63:f8:89:68:10:be:b7:ba:d1:cd:fc:
         48:10:73:80:48:48:64:bb:84:8f:8f:05:6e:6e:8e:86:38:fe:
         43:8e:c4:2c:76:96:1a:13:ea:07:65:a5:77:b9:04:da:67:21:
         a9:b9:6b:c9:1f:91:e6:b2:aa:df:51:69:5a:fc:c7:55:5e:28:
         ac:79:88:6a:bc:63:6a:f1:4f:01:56:2b:b3:e7:fd:d5:83:c5:
         38:96:28:28:1e:8b:46:96:0a:2d:ec:46:1a:49:59:53:89:8d:
         26:95:a7:a7
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUBYkfHOKn6JsCdj1/RmQ2FWZT+hYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ0M0ZDRkNEMTNCRUE2RDkxRTFDRDcxNTQ0NjEzQkQ0
RTJBNjlGNTAeFw0yNDA4MTkxNDQ3MDBaFw0yNTA4MTgxNDUyMDBaMDMxMTAvBgNV
BAMTKERCM0RGQUQxNDdCOTAyRURDRjhGRjAyMTUyMEQyMjcyQTM1RDQ4QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUAXm9WLUA4SiQLpTd7tpGslC
d/b12z2crxhQesEYEhUAv/lBECkfNkyj357jONKz80sYpHsx3W6mja7XsNDMY4mf
+q0l6vdnmG48OYW6xo7bTtlEk4p9FOgbwXcnJuitMdUQFY3oGgKsQ5+0QDLDhRd2
WMEcbXNpTt8KRExuJ3ip/AO4Jugf0YhzSfOIW6+2xCNwQzAQuVAsNnmbPWx2h9x6
G4KF8T10RkNfbUct/Ult46SxpfQ6huDOTzfRjVFOMXT+jQ2p53BtJ82In3GM/7dq
kRNlL89LsH/NkabdAXAAolYSuBK3+fzV2PFogeBmAGgxj04q+BMP34y3W1YzAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU2z360Ue5Au3Pj/AhUg0icqNdSLgwHwYDVR0j
BBgwFoAUBEP8/NE76m2R4c1xVEYTvU4qafUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzZ4TGVyVU1QV2o0U2loNjZOcXh3RVJpVFI1UTRCTGFkcWlvQ2h0ZUhE
bU0vMC8wNDQzRkNGQ0QxM0JFQTZEOTFFMUNENzE1NDQ2MTNCRDRFMkE2OUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0NDNGQ0ZDRDEzQkVBNkQ5
MUUxQ0Q3MTU0NDYxM0JENEUyQTY5RjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM2eExlclVNUFdqNFNpaDY2TnF4d0VSaVRSNVE0QkxhZHFpb0NodGVIRG1NLzAv
MzIzODMwMzQzYTMyMzc2NjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzOTMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCf0MA0GCSqGSIb3DQEBCwUAA4IBAQBNS9lC
BgD+lCNI93xo0NgYnXklHXOL8qHQCb8KSm1QgvkJN+bYvqZOrmi2hMbGHthobQsc
xwXtdMd2d8756FRW68w3elX5HOdNyGEJp0te6AI9Plt2ttGtTqZu+Vqm+8roVBjr
gKUtEPpb0p9++Wpv/lcJTDTaNa0iqkHDy7CHIePtDwPfrEoHlkdnIOj2eWH/u3Wy
QfZyY/iJaBC+t7rRzfxIEHOASEhku4SPjwVubo6GOP5DjsQsdpYaE+oHZaV3uQTa
ZyGpuWvJH5HmsqrfUWla/MdVXiiseYhqvGNq8U8BViuz5/3Vg8U4ligoHotGlgot
7EYaSVlTiY0mlaen
-----END CERTIFICATE-----