Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/323830343a366530343a3a2f33322d3332203d3e20323730353730.roa
File:                     323830343a366530343a3a2f33322d3332203d3e20323730353730.roa (raw, json)
Hash identifier:          n2+IEP49ltKkuciluLkzo7W1spEaRThVEpdR9NEjGnc=
Subject key identifier:   EF:9F:DA:9D:D0:6A:0A:35:46:5D:6E:AF:B5:5A:EF:FA:2A:3A:11:28
Certificate issuer:       /CN=09FD8C705CB193341D9B117D7146D563E0766012
Certificate serial:       112FF95023B1D09DEBA3968BC14302A846395C20
Authority key identifier: 09:FD:8C:70:5C:B1:93:34:1D:9B:11:7D:71:46:D5:63:E0:76:60:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/323830343a366530343a3a2f33322d3332203d3e20323730353730.roa
Signing time:             Thu 11 Apr 2024 11:06:49 +0000
ROA not before:           Thu 11 Apr 2024 11:01:49 +0000
ROA not after:            Thu 10 Apr 2025 11:06:49 +0000
asID:                     270570
IP address blocks:        2804:6e04::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2f:f9:50:23:b1:d0:9d:eb:a3:96:8b:c1:43:02:a8:46:39:5c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09FD8C705CB193341D9B117D7146D563E0766012
        Validity
            Not Before: Apr 11 11:01:49 2024 GMT
            Not After : Apr 10 11:06:49 2025 GMT
        Subject: CN=EF9FDA9DD06A0A35465D6EAFB55AEFFA2A3A1128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:83:5c:02:b7:50:03:03:e6:81:fa:cb:e5:
                    a7:75:ac:44:43:de:5c:cd:bb:55:89:90:fd:32:35:
                    14:20:e9:e5:aa:23:42:b2:3b:e8:fd:58:6f:e3:b2:
                    e1:b8:a6:18:e6:03:3d:12:f5:f6:67:d6:37:8d:f8:
                    94:e3:00:02:d2:97:02:d6:d3:1a:ce:87:9e:18:97:
                    ec:d7:17:8a:04:18:3d:26:ba:6f:fd:b5:42:ca:db:
                    1a:a9:e7:9b:51:62:73:33:37:8c:9d:22:09:68:eb:
                    a7:47:ea:9c:2c:42:7c:bf:26:07:29:82:f2:e3:d2:
                    5b:1b:13:12:94:02:d8:98:35:3c:95:04:2f:d6:84:
                    61:5d:ea:63:b9:ff:36:3d:4a:0f:8c:de:85:67:e6:
                    51:b0:41:08:a8:0c:8f:a9:ba:69:5f:dd:c8:29:64:
                    f3:8e:03:7f:ef:4d:78:61:dc:42:f2:de:14:5a:23:
                    15:8d:fa:01:30:eb:37:7f:ef:03:71:a7:c6:87:47:
                    b5:27:32:43:9e:5a:fa:00:47:6b:8c:00:9c:d6:ea:
                    4e:d6:2b:38:b5:c3:4d:12:28:dc:eb:11:e1:3c:42:
                    3a:4f:c7:72:cb:9c:41:42:16:35:13:fb:b4:3d:66:
                    bb:7a:c9:24:f5:99:79:2c:78:3a:31:aa:e9:cf:e3:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9F:DA:9D:D0:6A:0A:35:46:5D:6E:AF:B5:5A:EF:FA:2A:3A:11:28
            X509v3 Authority Key Identifier:
                keyid:09:FD:8C:70:5C:B1:93:34:1D:9B:11:7D:71:46:D5:63:E0:76:60:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/323830343a366530343a3a2f33322d3332203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e04::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:aa:41:b5:c1:95:e8:87:7b:cc:86:09:b1:e0:22:56:45:33:
         a9:1c:f7:43:8c:8e:bd:b0:d6:05:71:13:4d:7d:85:02:ad:b4:
         1f:36:6f:25:f0:27:13:d9:af:cf:4a:56:db:dc:21:4e:ae:19:
         19:76:96:32:66:9b:fc:d1:d8:ce:c7:98:e3:4a:43:89:fa:aa:
         cc:cc:d8:9c:44:15:a7:22:c2:bc:38:b0:3b:49:9c:68:01:c5:
         cf:db:8b:76:1c:ff:f7:c1:27:35:d6:06:7c:e9:58:28:d3:62:
         de:b4:ed:f7:07:d7:61:78:56:c8:d0:f3:48:b5:f0:53:fd:15:
         40:5a:c5:3a:6e:dc:58:20:a1:8b:5b:7a:7b:23:7f:1d:69:3a:
         63:b5:49:6a:c9:43:46:a3:90:5e:ed:ab:d8:54:5a:37:d0:3a:
         31:af:d3:f7:be:2b:36:cd:74:8e:95:eb:b3:e8:a0:b9:39:5b:
         39:4d:8c:d3:04:6a:85:22:b4:52:30:2f:8c:79:89:6b:20:9f:
         15:85:87:9b:84:0b:38:82:94:df:9e:e8:2c:07:ef:55:a4:2f:
         5a:66:16:39:15:e9:d6:14:7d:ce:85:1c:28:70:f4:52:1f:0a:
         6c:1c:a1:16:4e:29:f8:e0:83:a6:ef:56:20:8f:62:b5:9c:f2:
         b3:58:a1:21
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUES/5UCOx0J3ro5aLwUMCqEY5XCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlGRDhDNzA1Q0IxOTMzNDFEOUIxMTdENzE0NkQ1NjNF
MDc2NjAxMjAeFw0yNDA0MTExMTAxNDlaFw0yNTA0MTAxMTA2NDlaMDMxMTAvBgNV
BAMTKEVGOUZEQTlERDA2QTBBMzU0NjVENkVBRkI1NUFFRkZBMkEzQTExMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4X4NcArdQAwPmgfrL5ad1rERD
3lzNu1WJkP0yNRQg6eWqI0KyO+j9WG/jsuG4phjmAz0S9fZn1jeN+JTjAALSlwLW
0xrOh54Yl+zXF4oEGD0mum/9tULK2xqp55tRYnMzN4ydIglo66dH6pwsQny/Jgcp
gvLj0lsbExKUAtiYNTyVBC/WhGFd6mO5/zY9Sg+M3oVn5lGwQQioDI+pumlf3cgp
ZPOOA3/vTXhh3ELy3hRaIxWN+gEw6zd/7wNxp8aHR7UnMkOeWvoAR2uMAJzW6k7W
Kzi1w00SKNzrEeE8QjpPx3LLnEFCFjUT+7Q9Zrt6yST1mXkseDoxqunP4yttAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU75/andBqCjVGXW6vtVrv+io6ESgwHwYDVR0j
BBgwFoAUCf2McFyxkzQdmxF9cUbVY+B2YBIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTRqV2ZTVVg0cnMyQ3hmNTNHbTk1WExQVlNwUmNaQXNQVjFwMndRUWh4
d24vMS8wOUZEOEM3MDVDQjE5MzM0MUQ5QjExN0Q3MTQ2RDU2M0UwNzY2MDEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RkQ4QzcwNUNCMTkzMzQx
RDlCMTE3RDcxNDZENTYzRTA3NjYwMTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0aldmU1VYNHJzMkN4ZjUzR205NVhMUFZTcFJjWkFzUFYxcDJ3UVFoeHduLzEv
MzIzODMwMzQzYTM2NjUzMDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzUzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARuBDANBgkqhkiG9w0BAQsFAAOCAQEAdapBtcGV
6Id7zIYJseAiVkUzqRz3Q4yOvbDWBXETTX2FAq20HzZvJfAnE9mvz0pW29whTq4Z
GXaWMmab/NHYzseY40pDifqqzMzYnEQVpyLCvDiwO0mcaAHFz9uLdhz/98EnNdYG
fOlYKNNi3rTt9wfXYXhWyNDzSLXwU/0VQFrFOm7cWCChi1t6eyN/HWk6Y7VJaslD
RqOQXu2r2FRaN9A6Ma/T974rNs10jpXrs+iguTlbOU2M0wRqhSK0UjAvjHmJayCf
FYWHm4QLOIKU357oLAfvVaQvWmYWORXp1hR9zoUcKHD0Uh8KbByhFk4p+OCDpu9W
II9itZzys1ihIQ==
-----END CERTIFICATE-----