Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/323830343a373439303a3a2f33322d3332203d3e20323730393839.roa
File:                     323830343a373439303a3a2f33322d3332203d3e20323730393839.roa (raw, json)
Hash identifier:          IoG5/IpVVNUyZUb/FPCETTII87nt/lSnkoIBvWW2zuc=
Subject key identifier:   E6:25:9E:A0:BF:7A:05:07:21:35:94:41:03:8C:04:BB:5A:82:FC:A2
Certificate issuer:       /CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
Certificate serial:       16631A65AAA6ECB010FB4B1E58367EC72CF2F823
Authority key identifier: BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/323830343a373439303a3a2f33322d3332203d3e20323730393839.roa
Signing time:             Fri 05 Apr 2024 03:46:43 +0000
ROA not before:           Fri 05 Apr 2024 03:41:43 +0000
ROA not after:            Fri 04 Apr 2025 03:46:43 +0000
asID:                     270989
IP address blocks:        2804:7490::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:63:1a:65:aa:a6:ec:b0:10:fb:4b:1e:58:36:7e:c7:2c:f2:f8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
        Validity
            Not Before: Apr  5 03:41:43 2024 GMT
            Not After : Apr  4 03:46:43 2025 GMT
        Subject: CN=E6259EA0BF7A050721359441038C04BB5A82FCA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:61:76:bc:ff:d3:c1:5e:0b:20:d0:e8:c1:f5:
                    b6:88:8e:b7:79:e1:e0:1c:b1:36:6c:1a:7b:d2:5c:
                    61:1c:32:c0:6a:a5:95:db:86:5e:62:c4:d6:6d:fe:
                    2f:16:84:f0:19:f6:ed:46:76:d6:8b:b9:1e:42:92:
                    76:97:0a:b1:24:7a:d3:4e:c8:36:1e:1e:d6:2e:ce:
                    29:a5:6f:89:fc:11:23:c0:7f:bc:a3:88:4e:bd:bd:
                    1c:a3:24:64:23:37:c5:16:f9:a6:57:3c:90:ab:04:
                    bf:24:d8:26:d9:2f:b1:03:58:a3:c8:92:58:93:95:
                    f3:88:14:8f:08:f2:83:94:0c:c7:95:0d:c2:0a:59:
                    f5:05:8a:5c:44:37:e0:04:c2:90:cf:b5:ec:55:fd:
                    34:36:84:8a:46:d4:d5:87:64:b4:d4:18:af:7d:bc:
                    6a:80:25:47:c0:8a:13:11:da:01:dc:6e:c2:10:0b:
                    13:eb:af:10:64:e4:78:9a:90:18:aa:bd:7b:be:3e:
                    8b:e2:75:b5:0a:c1:4b:94:8e:04:24:33:a1:ef:59:
                    b9:e1:d4:84:29:bc:79:d0:9f:3b:35:ec:87:97:40:
                    81:76:37:07:88:92:b0:ea:c7:8c:d9:91:e4:5b:a3:
                    d4:39:2f:8f:68:91:91:37:1a:aa:71:6b:4b:c8:82:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:25:9E:A0:BF:7A:05:07:21:35:94:41:03:8C:04:BB:5A:82:FC:A2
            X509v3 Authority Key Identifier:
                keyid:BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/323830343a373439303a3a2f33322d3332203d3e20323730393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7490::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:a8:f1:43:75:07:e9:7c:e4:ec:1d:78:d2:60:3a:a9:cf:8b:
         50:af:ca:dd:cc:cd:b9:ea:71:8b:84:85:9f:ca:f7:54:0e:dc:
         18:90:15:05:d7:fe:84:be:dc:be:86:17:ca:13:1e:eb:55:83:
         59:5c:82:01:7a:17:f0:2f:eb:11:37:4d:b4:90:0b:90:c3:e1:
         c0:ec:e6:2c:58:63:60:b3:21:cc:09:b1:4c:4b:52:53:97:cf:
         4c:1c:47:83:d6:56:0b:8d:08:15:93:3c:d9:e8:00:c6:ba:d0:
         92:f9:0d:08:25:5e:63:f1:f8:67:84:11:ea:38:21:63:2e:bd:
         19:c3:18:3b:27:26:21:d9:ed:3c:b4:8e:38:9f:a9:49:e9:75:
         75:03:76:ed:10:dd:8a:18:07:97:24:79:d4:66:9c:b3:89:f5:
         49:5f:81:d8:ea:c8:ee:52:4b:da:df:cb:49:0e:70:4f:30:5c:
         55:84:33:3c:ab:30:f7:f2:51:2d:ff:29:2c:0a:77:7f:24:6a:
         a0:db:38:2c:52:41:56:2c:f0:60:84:17:60:69:c5:d4:58:8a:
         a3:30:ff:84:38:ee:e4:45:0b:9f:9c:d3:92:75:da:37:82:aa:
         13:51:5c:89:13:4d:ab:74:b3:8c:df:41:d2:46:1e:97:d4:bc:
         c3:60:03:f4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFmMaZaqm7LAQ+0seWDZ+xyzy+CMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFBMzA1NzY4OTZERUI3RkYzNURBMDU4REVDNTEwNjAw
RENDMUE5OTAeFw0yNDA0MDUwMzQxNDNaFw0yNTA0MDQwMzQ2NDNaMDMxMTAvBgNV
BAMTKEU2MjU5RUEwQkY3QTA1MDcyMTM1OTQ0MTAzOEMwNEJCNUE4MkZDQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YXa8/9PBXgsg0OjB9baIjrd5
4eAcsTZsGnvSXGEcMsBqpZXbhl5ixNZt/i8WhPAZ9u1GdtaLuR5CknaXCrEketNO
yDYeHtYuzimlb4n8ESPAf7yjiE69vRyjJGQjN8UW+aZXPJCrBL8k2CbZL7EDWKPI
kliTlfOIFI8I8oOUDMeVDcIKWfUFilxEN+AEwpDPtexV/TQ2hIpG1NWHZLTUGK99
vGqAJUfAihMR2gHcbsIQCxPrrxBk5HiakBiqvXu+PovidbUKwUuUjgQkM6HvWbnh
1IQpvHnQnzs17IeXQIF2NweIkrDqx4zZkeRbo9Q5L49okZE3Gqpxa0vIgs1bAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU5iWeoL96BQchNZRBA4wEu1qC/KIwHwYDVR0j
BBgwFoAUuqMFdolt63/zXaBY3sUQYA3MGpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHdvMlpFdUhHR2dpQkJYdlNWelV1b25DS3Q3ejhEZk0zamhSYjQ1OTV5
eDQvMS9CQUEzMDU3Njg5NkRFQjdGRjM1REEwNThERUM1MTA2MDBEQ0MxQTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBQTMwNTc2ODk2REVCN0ZG
MzVEQTA1OERFQzUxMDYwMERDQzFBOTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR3bzJaRXVIR0dnaUJCWHZTVnpVdW9uQ0t0N3o4RGZNM2poUmI0NTk1eXg0LzEv
MzIzODMwMzQzYTM3MzQzOTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzkzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR0kDANBgkqhkiG9w0BAQsFAAOCAQEAUajxQ3UH
6Xzk7B140mA6qc+LUK/K3czNuepxi4SFn8r3VA7cGJAVBdf+hL7cvoYXyhMe61WD
WVyCAXoX8C/rETdNtJALkMPhwOzmLFhjYLMhzAmxTEtSU5fPTBxHg9ZWC40IFZM8
2egAxrrQkvkNCCVeY/H4Z4QR6jghYy69GcMYOycmIdntPLSOOJ+pSel1dQN27RDd
ihgHlyR51Gacs4n1SV+B2OrI7lJL2t/LSQ5wTzBcVYQzPKsw9/JRLf8pLAp3fyRq
oNs4LFJBVizwYIQXYGnF1FiKozD/hDju5EULn5zTknXaN4KqE1FciRNNq3SzjN9B
0kYel9S8w2AD9A==
-----END CERTIFICATE-----