Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/323830343a6666383a633030303a3a2f33342d3334203d3e20323633363131.roa
File:                     323830343a6666383a633030303a3a2f33342d3334203d3e20323633363131.roa (raw, json)
Hash identifier:          kRInQMeL6XWgikJXPUQGduEMhRbWSvZx50CtDxI0zq8=
Subject key identifier:   B9:DE:CD:A4:58:75:0C:A8:C3:ED:32:70:30:6E:E3:4E:9F:96:F4:A3
Certificate issuer:       /CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
Certificate serial:       10E6FDD3FB7B148AC301CAE54730B7DCE412ADCC
Authority key identifier: 6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/323830343a6666383a633030303a3a2f33342d3334203d3e20323633363131.roa
Signing time:             Thu 04 Apr 2024 11:00:16 +0000
ROA not before:           Thu 04 Apr 2024 10:55:16 +0000
ROA not after:            Thu 03 Apr 2025 11:00:16 +0000
asID:                     263611
IP address blocks:        2804:ff8:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e6:fd:d3:fb:7b:14:8a:c3:01:ca:e5:47:30:b7:dc:e4:12:ad:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
        Validity
            Not Before: Apr  4 10:55:16 2024 GMT
            Not After : Apr  3 11:00:16 2025 GMT
        Subject: CN=B9DECDA458750CA8C3ED3270306EE34E9F96F4A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1b:c0:24:00:c9:65:cf:6e:9c:53:18:3d:93:
                    ec:97:76:e5:4f:32:a4:1a:dd:9b:4f:c8:6c:c1:f2:
                    2e:c4:dd:e8:f9:dc:0c:ca:28:88:40:c4:73:90:f7:
                    de:61:6c:20:cb:52:5e:dd:de:38:f4:6f:9a:20:f7:
                    10:26:a3:43:52:6b:0c:67:07:da:7b:14:bb:a9:7f:
                    4b:48:52:e1:2b:65:bc:e0:94:14:4f:77:69:ea:74:
                    d4:10:ad:20:c8:61:5f:53:9a:59:3f:1c:a2:a9:90:
                    40:27:4f:9c:4d:f1:2c:b6:4a:42:45:da:10:47:f0:
                    27:e3:cf:c2:a7:d3:5e:dc:4b:66:f3:0a:72:18:7f:
                    3c:88:f6:0b:36:79:6c:a0:21:0f:65:85:9f:2c:91:
                    b6:6a:76:8c:ea:6d:e1:a0:3f:74:1c:37:78:c3:d6:
                    a1:6a:f7:41:66:29:16:99:40:87:96:d4:be:55:44:
                    03:69:12:02:22:b9:30:0e:9f:3d:91:d1:05:ae:31:
                    16:01:a1:28:2b:09:3f:a8:56:f3:1b:09:83:e7:1b:
                    80:14:24:45:06:35:58:73:ca:19:b5:f6:ef:62:a0:
                    69:84:30:6d:39:3e:14:c2:ca:2e:95:4b:81:1e:87:
                    3c:aa:87:b4:75:7a:07:57:7e:66:52:23:49:26:be:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DE:CD:A4:58:75:0C:A8:C3:ED:32:70:30:6E:E3:4E:9F:96:F4:A3
            X509v3 Authority Key Identifier:
                keyid:6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/323830343a6666383a633030303a3a2f33342d3334203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ff8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         e6:cd:fb:d8:64:4e:5f:06:de:22:02:f6:01:70:b6:14:fb:1d:
         fe:8c:cd:fc:6c:65:dc:5f:b7:b7:60:ce:e0:a0:47:31:ce:9c:
         9a:8d:f1:9b:bc:59:88:c5:ed:8e:ff:f7:f4:8d:b0:76:67:90:
         8b:26:e4:15:f0:77:59:7c:16:13:cf:c1:57:c9:72:cd:fa:f0:
         9d:cf:02:31:30:5f:7e:1a:27:35:c1:70:10:51:9f:e7:33:6b:
         b7:26:e0:95:f6:36:68:b5:b6:5d:68:9f:04:7d:8b:23:c3:29:
         7d:06:c1:de:bc:23:97:0f:3f:65:d4:c4:b9:df:f5:7c:57:cf:
         e1:01:56:77:db:73:71:bc:9e:5a:88:9d:2f:8f:76:e0:2b:5f:
         18:ff:b9:fd:5e:ba:43:32:fd:a0:2c:c5:33:09:31:bb:b3:cf:
         84:ca:9a:3b:d4:3c:eb:3d:9f:0f:91:4b:8d:d4:56:f7:a9:77:
         ce:a0:fe:ac:36:70:ea:cb:e1:d8:0a:2e:9f:3c:eb:77:8b:bf:
         4e:93:fc:98:63:40:2d:31:9c:33:ce:d3:99:5c:55:bc:08:91:
         cf:23:2e:5b:8d:47:07:59:fa:8c:cb:b2:2b:26:f0:f2:ab:cf:
         d3:2a:64:3d:93:ad:4d:19:d5:3d:15:cc:06:c0:bc:99:44:e1:
         44:7b:d6:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEOb90/t7FIrDAcrlRzC33OQSrcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFGOTNEMDZERTg2MDI3MDhGQzkxRTQ0NDI0M0U1QUND
NDQ3OEYwMjAeFw0yNDA0MDQxMDU1MTZaFw0yNTA0MDMxMTAwMTZaMDMxMTAvBgNV
BAMTKEI5REVDREE0NTg3NTBDQThDM0VEMzI3MDMwNkVFMzRFOUY5NkY0QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvG8AkAMllz26cUxg9k+yXduVP
MqQa3ZtPyGzB8i7E3ej53AzKKIhAxHOQ995hbCDLUl7d3jj0b5og9xAmo0NSawxn
B9p7FLupf0tIUuErZbzglBRPd2nqdNQQrSDIYV9Tmlk/HKKpkEAnT5xN8Sy2SkJF
2hBH8Cfjz8Kn017cS2bzCnIYfzyI9gs2eWygIQ9lhZ8skbZqdozqbeGgP3QcN3jD
1qFq90FmKRaZQIeW1L5VRANpEgIiuTAOnz2R0QWuMRYBoSgrCT+oVvMbCYPnG4AU
JEUGNVhzyhm19u9ioGmEMG05PhTCyi6VS4Eehzyqh7R1egdXfmZSI0kmvqnHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUud7NpFh1DKjD7TJwMG7jTp+W9KMwHwYDVR0j
BBgwFoAUavk9Bt6GAnCPyR5EQkPlrMRHjwIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUoyYjFWbTc0dUFNWmdSSGlMd0VDM0dTcjhnZGl3bVo0SmNYeDl0VFNQ
QWkvMS82QUY5M0QwNkRFODYwMjcwOEZDOTFFNDQ0MjQzRTVBQ0M0NDc4RjAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBRjkzRDA2REU4NjAyNzA4
RkM5MUU0NDQyNDNFNUFDQzQ0NzhGMDIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVKMmIxVm03NHVBTVpnUkhpTHdFQzNHU3I4Z2Rpd21aNEpjWHg5dFRTUEFpLzEv
MzIzODMwMzQzYTY2NjYzODNhNjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzMzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA/4wDANBgkqhkiG9w0BAQsFAAOC
AQEA5s372GROXwbeIgL2AXC2FPsd/ozN/Gxl3F+3t2DO4KBHMc6cmo3xm7xZiMXt
jv/39I2wdmeQiybkFfB3WXwWE8/BV8lyzfrwnc8CMTBffhonNcFwEFGf5zNrtybg
lfY2aLW2XWifBH2LI8MpfQbB3rwjlw8/ZdTEud/1fFfP4QFWd9tzcbyeWoidL492
4CtfGP+5/V66QzL9oCzFMwkxu7PPhMqaO9Q86z2fD5FLjdRW96l3zqD+rDZw6svh
2Aounzzrd4u/TpP8mGNALTGcM87TmVxVvAiRzyMuW41HB1n6jMuyKybw8qvP0ypk
PZOtTRnVPRXMBsC8mUThRHvWIw==
-----END CERTIFICATE-----