Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/323830343a323139383a3a2f33322d3438203d3e203532383037.roa
File:                     323830343a323139383a3a2f33322d3438203d3e203532383037.roa (raw, json)
Hash identifier:          vLIG15x9Oq45ycQs/Axm6HaLp+7Mn6qUJ6rM/kG/YYk=
Subject key identifier:   EF:86:DE:AA:CF:84:54:37:6D:1D:C0:AB:3D:D9:4B:42:E3:BD:2A:91
Certificate issuer:       /CN=39313F2AB6C925F73DAC9060D3007FA7884B584C
Certificate serial:       289A48A79048BA2D13B771F77834F529F41F9C68
Authority key identifier: 39:31:3F:2A:B6:C9:25:F7:3D:AC:90:60:D3:00:7F:A7:88:4B:58:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/323830343a323139383a3a2f33322d3438203d3e203532383037.roa
Signing time:             Wed 10 Apr 2024 13:29:12 +0000
ROA not before:           Wed 10 Apr 2024 13:24:12 +0000
ROA not after:            Wed 09 Apr 2025 13:29:12 +0000
asID:                     52807
IP address blocks:        2804:2198::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9a:48:a7:90:48:ba:2d:13:b7:71:f7:78:34:f5:29:f4:1f:9c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39313F2AB6C925F73DAC9060D3007FA7884B584C
        Validity
            Not Before: Apr 10 13:24:12 2024 GMT
            Not After : Apr  9 13:29:12 2025 GMT
        Subject: CN=EF86DEAACF8454376D1DC0AB3DD94B42E3BD2A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:e1:4d:72:82:98:32:a4:f6:85:8b:51:4c:
                    86:d9:3c:8d:f0:6c:89:99:02:3b:2c:e6:3a:5c:07:
                    ba:10:cb:8f:1c:c9:30:29:38:d2:26:0a:27:ce:94:
                    55:5e:23:5c:ff:ba:e2:8d:71:c5:42:9b:27:4a:f8:
                    dc:66:cc:74:8c:d9:70:b3:7b:66:95:d5:a4:a2:bd:
                    0b:88:f6:fe:ec:1b:f0:31:37:d2:ed:5a:14:7b:72:
                    13:f0:88:96:b1:a5:a3:74:87:c9:03:47:db:0b:e1:
                    77:a2:23:c9:32:23:96:94:2a:dd:3d:19:76:68:e5:
                    ca:70:32:f9:f0:93:ed:87:4d:e9:ca:bd:8a:fc:98:
                    86:08:90:f8:7c:8a:cc:d9:03:55:77:f0:44:6f:97:
                    1b:c7:92:8b:ce:24:b7:c1:18:82:66:15:b5:e2:05:
                    2a:a0:cb:3d:2d:66:76:60:d1:cd:a9:4d:66:e6:99:
                    71:f1:e3:d4:2e:8b:de:6c:17:9e:3f:f8:b2:f9:2b:
                    76:7c:ae:1d:a5:aa:50:35:ba:2c:ea:77:19:70:6c:
                    70:bc:53:ea:8d:37:c1:b2:d7:da:a1:5d:45:41:6a:
                    85:4c:7a:72:f3:6f:53:45:35:cc:67:1d:f4:a1:c1:
                    e9:67:1f:46:e1:a9:fc:3d:4c:25:f9:23:dd:04:a9:
                    cc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:86:DE:AA:CF:84:54:37:6D:1D:C0:AB:3D:D9:4B:42:E3:BD:2A:91
            X509v3 Authority Key Identifier:
                keyid:39:31:3F:2A:B6:C9:25:F7:3D:AC:90:60:D3:00:7F:A7:88:4B:58:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/323830343a323139383a3a2f33322d3438203d3e203532383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2198::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:33:55:db:5a:aa:9d:1a:2b:92:ce:e8:8d:db:87:26:74:df:
         fa:9a:20:de:9c:be:b9:9e:d9:36:4a:39:ac:7a:11:28:75:38:
         2a:95:f8:e5:40:5a:67:72:6e:09:c9:2a:d2:d0:55:fa:01:f7:
         7f:0f:0f:4e:8b:92:41:d8:20:8c:25:4a:6d:81:51:9f:41:8d:
         49:be:98:91:9f:bf:9a:48:c1:6c:21:8c:05:40:44:61:26:1e:
         ff:45:43:e3:bc:55:68:7d:34:48:76:97:e5:25:e6:3e:66:d0:
         a8:10:ea:70:01:2f:c0:82:23:80:6c:3f:25:33:c0:77:61:59:
         b3:a1:0e:c8:12:bb:07:cc:6c:f0:5c:d2:e8:81:55:23:43:94:
         6e:1d:39:71:66:6a:fa:d9:4e:a1:ab:12:70:35:df:a6:9a:c1:
         ce:d2:80:cd:41:db:1e:a6:6e:11:fa:2c:89:03:d3:37:fb:1b:
         d0:f5:98:d4:53:df:71:84:50:ba:5b:51:84:20:12:45:61:fe:
         3a:09:92:1c:67:87:61:84:ce:e0:c4:25:04:a6:05:08:3d:43:
         9d:90:0f:e4:16:31:31:5b:1c:df:a9:a2:41:75:f1:f0:ce:6a:
         67:89:e7:b9:8a:be:c5:e9:1c:05:71:0d:94:6f:88:6b:4d:cb:
         e5:35:1c:41
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUKJpIp5BIui0Tt3H3eDT1KfQfnGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkzMTNGMkFCNkM5MjVGNzNEQUM5MDYwRDMwMDdGQTc4
ODRCNTg0QzAeFw0yNDA0MTAxMzI0MTJaFw0yNTA0MDkxMzI5MTJaMDMxMTAvBgNV
BAMTKEVGODZERUFBQ0Y4NDU0Mzc2RDFEQzBBQjNERDk0QjQyRTNCRDJBOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXOFNcoKYMqT2hYtRTIbZPI3w
bImZAjss5jpcB7oQy48cyTApONImCifOlFVeI1z/uuKNccVCmydK+NxmzHSM2XCz
e2aV1aSivQuI9v7sG/AxN9LtWhR7chPwiJaxpaN0h8kDR9sL4XeiI8kyI5aUKt09
GXZo5cpwMvnwk+2HTenKvYr8mIYIkPh8iszZA1V38ERvlxvHkovOJLfBGIJmFbXi
BSqgyz0tZnZg0c2pTWbmmXHx49Qui95sF54/+LL5K3Z8rh2lqlA1uizqdxlwbHC8
U+qNN8Gy19qhXUVBaoVMenLzb1NFNcxnHfShwelnH0bhqfw9TCX5I90Eqcy3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU74beqs+EVDdtHcCrPdlLQuO9KpEwHwYDVR0j
BBgwFoAUOTE/KrbJJfc9rJBg0wB/p4hLWEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRBcTFtanNiUUNUdDdzNXpKQURmaVo0YlV2VVFweHFoV2ZuWlZSWGJO
dzIvMS8zOTMxM0YyQUI2QzkyNUY3M0RBQzkwNjBEMzAwN0ZBNzg4NEI1ODRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MzEzRjJBQjZDOTI1Rjcz
REFDOTA2MEQzMDA3RkE3ODg0QjU4NEMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkQXExbWpzYlFDVHQ3czV6SkFEZmlaNGJVdlVRcHhxaFdmblpWUlhiTncyLzEv
MzIzODMwMzQzYTMyMzEzOTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMjM4
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEIZgwDQYJKoZIhvcNAQELBQADggEBAA8zVdtaqp0a
K5LO6I3bhyZ03/qaIN6cvrme2TZKOax6ESh1OCqV+OVAWmdybgnJKtLQVfoB938P
D06LkkHYIIwlSm2BUZ9BjUm+mJGfv5pIwWwhjAVARGEmHv9FQ+O8VWh9NEh2l+Ul
5j5m0KgQ6nABL8CCI4BsPyUzwHdhWbOhDsgSuwfMbPBc0uiBVSNDlG4dOXFmavrZ
TqGrEnA136aawc7SgM1B2x6mbhH6LIkD0zf7G9D1mNRT33GEULpbUYQgEkVh/joJ
khxnh2GEzuDEJQSmBQg9Q52QD+QWMTFbHN+pokF18fDOameJ57mKvsXpHAVxDZRv
iGtNy+U1HEE=
-----END CERTIFICATE-----