Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/323830343a363465383a3a2f33332d3333203d3e20323639343537.roa
File:                     323830343a363465383a3a2f33332d3333203d3e20323639343537.roa (raw, json)
Hash identifier:          dqp9iawvI13UiS5lqOliLhq+5QqpQASo8OOefCupbnc=
Subject key identifier:   FF:E3:03:1E:BA:AD:C7:37:9B:26:2D:03:4B:FF:97:E1:04:54:F9:10
Certificate issuer:       /CN=3361B78662C4F4994A60931D16B5383E3AB4E319
Certificate serial:       12F2AB65A4A301A33BC5CDD75717A9E6B9EBE993
Authority key identifier: 33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/323830343a363465383a3a2f33332d3333203d3e20323639343537.roa
Signing time:             Thu 06 Jun 2024 12:49:25 +0000
ROA not before:           Thu 06 Jun 2024 12:44:25 +0000
ROA not after:            Thu 05 Jun 2025 12:49:25 +0000
asID:                     269457
IP address blocks:        2804:64e8::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f2:ab:65:a4:a3:01:a3:3b:c5:cd:d7:57:17:a9:e6:b9:eb:e9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3361B78662C4F4994A60931D16B5383E3AB4E319
        Validity
            Not Before: Jun  6 12:44:25 2024 GMT
            Not After : Jun  5 12:49:25 2025 GMT
        Subject: CN=FFE3031EBAADC7379B262D034BFF97E10454F910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:78:5b:0e:3d:e4:f2:59:34:30:fb:c3:30:
                    1a:8a:f1:df:5c:cf:b8:f9:bc:a4:ab:06:41:d3:2c:
                    bf:7b:bb:47:88:60:e5:17:fe:ef:8c:6e:b7:0b:6c:
                    b3:0e:77:36:34:98:56:45:bb:d7:0d:4e:3d:3a:07:
                    f2:af:a4:01:2b:e5:49:7e:78:a5:87:cd:fa:2d:4e:
                    a3:0e:0f:cd:c2:1a:04:97:10:33:25:14:59:41:62:
                    e0:b9:d8:fa:92:20:ac:57:6f:a3:e6:d8:cc:67:2b:
                    aa:75:2f:db:4f:0a:db:7f:22:5c:4c:31:d7:11:7d:
                    59:bf:af:f7:fc:76:8a:80:91:2a:9a:28:1a:74:ed:
                    d8:86:76:39:59:8c:87:fa:63:cb:ca:c8:09:0f:6f:
                    a2:fb:04:fb:b6:28:bf:ea:ec:e3:10:dd:6a:67:df:
                    ca:a0:3e:8a:96:60:cb:73:f1:60:0f:fd:4f:83:68:
                    e5:bb:fc:82:d9:f3:c4:2a:52:75:bb:d7:e7:63:0d:
                    b2:3f:98:a5:ce:fa:32:e7:5f:42:fb:d3:2e:fd:0c:
                    4c:8f:5d:ed:8e:74:56:b9:3a:cc:e6:0b:4f:d4:c0:
                    48:6f:64:e0:05:e6:45:57:e1:a6:84:b6:14:eb:d4:
                    ad:36:b8:cc:7c:d2:80:fc:18:90:f9:a3:9b:03:9b:
                    e1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E3:03:1E:BA:AD:C7:37:9B:26:2D:03:4B:FF:97:E1:04:54:F9:10
            X509v3 Authority Key Identifier:
                keyid:33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/3361B78662C4F4994A60931D16B5383E3AB4E319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/323830343a363465383a3a2f33332d3333203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64e8::/33

    Signature Algorithm: sha256WithRSAEncryption
         aa:35:7a:72:3e:43:4e:cc:b1:f0:1a:11:f2:ae:ee:7c:ba:96:
         fb:eb:ab:43:81:ec:93:be:45:f6:1f:3b:47:19:e3:47:60:08:
         e5:d4:23:6b:60:5d:19:a0:69:1a:1e:0a:50:bf:ba:72:c6:17:
         29:03:a7:38:d0:69:04:b0:b2:c5:a3:80:37:43:55:3f:0e:b6:
         7a:46:63:f1:a6:a8:be:ed:30:dc:29:57:9f:a2:9c:4a:44:d8:
         b1:72:2c:a7:6e:0c:51:06:cf:ab:01:dc:b7:36:37:fb:02:6f:
         d4:2c:38:39:c1:8d:c5:4a:f7:cf:d6:a8:ac:fd:c5:a9:01:2c:
         41:3f:74:4b:4e:7f:0b:d5:90:ec:31:f4:a4:b8:b0:fc:5c:fb:
         86:f7:b8:5a:fc:32:f4:3b:93:18:63:0b:af:51:d7:f4:ef:0e:
         e0:3d:08:5c:5c:b9:1e:93:bc:bc:04:fd:bf:61:c1:2e:93:65:
         4b:cc:5a:81:5d:f3:e6:73:a1:a1:53:68:b9:cf:e1:0c:40:f3:
         be:75:ed:f9:0a:2a:dd:42:b8:4d:94:03:e9:a0:e8:87:d6:d8:
         85:7f:d1:6b:e7:35:89:e9:fe:c2:9a:b4:5d:e9:1a:16:45:dc:
         d8:34:63:35:cb:bb:4f:23:4b:47:aa:0a:ae:43:b6:7f:77:d3:
         32:6c:a0:82
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEvKrZaSjAaM7xc3XVxep5rnr6ZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM2MUI3ODY2MkM0RjQ5OTRBNjA5MzFEMTZCNTM4M0Uz
QUI0RTMxOTAeFw0yNDA2MDYxMjQ0MjVaFw0yNTA2MDUxMjQ5MjVaMDMxMTAvBgNV
BAMTKEZGRTMwMzFFQkFBREM3Mzc5QjI2MkQwMzRCRkY5N0UxMDQ1NEY5MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/nhbDj3k8lk0MPvDMBqK8d9c
z7j5vKSrBkHTLL97u0eIYOUX/u+MbrcLbLMOdzY0mFZFu9cNTj06B/KvpAEr5Ul+
eKWHzfotTqMOD83CGgSXEDMlFFlBYuC52PqSIKxXb6Pm2MxnK6p1L9tPCtt/IlxM
MdcRfVm/r/f8doqAkSqaKBp07diGdjlZjIf6Y8vKyAkPb6L7BPu2KL/q7OMQ3Wpn
38qgPoqWYMtz8WAP/U+DaOW7/ILZ88QqUnW71+djDbI/mKXO+jLnX0L70y79DEyP
Xe2OdFa5OszmC0/UwEhvZOAF5kVX4aaEthTr1K02uMx80oD8GJD5o5sDm+GnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/+MDHrqtxzebJi0DS/+X4QRU+RAwHwYDVR0j
BBgwFoAUM2G3hmLE9JlKYJMdFrU4Pjq04xkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RhOUczaXJUM1g5VVEzYzJaNFlRdUN0bUxVek5xN1NzUFR1ZGQ2V2dl
V0MvMS8zMzYxQjc4NjYyQzRGNDk5NEE2MDkzMUQxNkI1MzgzRTNBQjRFMzE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNjFCNzg2NjJDNEY0OTk0
QTYwOTMxRDE2QjUzODNFM0FCNEUzMTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNkYTlHM2lyVDNYOVVRM2MyWjRZUXVDdG1MVXpOcTdTc1BUdWRkNldnZVdDLzEv
MzIzODMwMzQzYTM2MzQ2NTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzQzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARk6AAwDQYJKoZIhvcNAQELBQADggEBAKo1enI+
Q07MsfAaEfKu7ny6lvvrq0OB7JO+RfYfO0cZ40dgCOXUI2tgXRmgaRoeClC/unLG
FykDpzjQaQSwssWjgDdDVT8OtnpGY/GmqL7tMNwpV5+inEpE2LFyLKduDFEGz6sB
3Lc2N/sCb9QsODnBjcVK98/WqKz9xakBLEE/dEtOfwvVkOwx9KS4sPxc+4b3uFr8
MvQ7kxhjC69R1/TvDuA9CFxcuR6TvLwE/b9hwS6TZUvMWoFd8+ZzoaFTaLnP4QxA
87517fkKKt1CuE2UA+mg6IfW2IV/0WvnNYnp/sKatF3pGhZF3Ng0YzXLu08jS0eq
Cq5Dtn930zJsoII=
-----END CERTIFICATE-----