Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/323830343a3362633a3a2f33322d313238203d3e203238363234.roa
File:                     323830343a3362633a3a2f33322d313238203d3e203238363234.roa (raw, json)
Hash identifier:          XzTT8Q7fCstuw5LeJqn6i5yaIUgZ5n2KlzRwYT6ZaLc=
Subject key identifier:   BC:2A:FC:46:10:BC:0A:44:9F:77:75:3A:6C:A3:A9:AA:F8:1A:E9:05
Certificate issuer:       /CN=817F44DF70A1D14D9825D4B258089BFBB4A6B04C
Certificate serial:       79A3E98EC7B31B4ACFB68E5B7B9011B29A05C6C7
Authority key identifier: 81:7F:44:DF:70:A1:D1:4D:98:25:D4:B2:58:08:9B:FB:B4:A6:B0:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/323830343a3362633a3a2f33322d313238203d3e203238363234.roa
Signing time:             Wed 03 Apr 2024 19:58:59 +0000
ROA not before:           Wed 03 Apr 2024 19:53:59 +0000
ROA not after:            Wed 02 Apr 2025 19:58:59 +0000
asID:                     28624
IP address blocks:        2804:3bc::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a3:e9:8e:c7:b3:1b:4a:cf:b6:8e:5b:7b:90:11:b2:9a:05:c6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F44DF70A1D14D9825D4B258089BFBB4A6B04C
        Validity
            Not Before: Apr  3 19:53:59 2024 GMT
            Not After : Apr  2 19:58:59 2025 GMT
        Subject: CN=BC2AFC4610BC0A449F77753A6CA3A9AAF81AE905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:24:5c:d7:b4:94:96:4f:fc:0a:19:32:bc:
                    0a:8b:2f:4e:61:29:2a:5a:b9:81:a8:82:0d:16:a2:
                    ba:f0:8e:82:44:e8:ea:51:32:0b:95:3f:5e:a0:05:
                    2f:cb:ee:94:a9:cb:44:27:f5:8c:12:b6:9a:e2:19:
                    63:f7:ff:73:31:4c:35:0a:cd:6c:6f:70:d8:fe:ba:
                    ac:d0:ca:19:a9:d9:fc:8f:3e:1a:46:e2:37:bd:c3:
                    4c:b2:79:3a:a4:c5:b0:dd:e9:88:d3:60:42:82:f8:
                    a6:1d:7f:3f:1b:99:aa:fa:bd:27:b3:08:f1:36:69:
                    31:72:6a:ec:d7:a0:92:4d:e0:00:b6:99:c5:18:b1:
                    b9:c9:73:03:cf:29:a4:98:57:15:bc:5f:af:23:59:
                    fc:3a:b3:68:a4:81:30:41:db:b7:0c:3e:24:b3:21:
                    32:50:75:fb:bc:9d:1c:52:9a:7b:86:91:17:d7:10:
                    75:20:16:8d:8e:6f:b9:0f:3a:9d:64:a3:65:87:da:
                    2c:f7:09:24:a2:1f:69:11:42:c0:01:e8:cc:e0:8a:
                    9f:45:db:4e:0a:23:e1:ff:0c:42:9d:2d:78:5c:6d:
                    5f:a9:8c:49:76:46:65:52:1a:16:1d:07:72:77:e3:
                    c0:04:5d:63:fb:06:91:3e:f9:0d:4d:96:1f:88:fc:
                    a8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2A:FC:46:10:BC:0A:44:9F:77:75:3A:6C:A3:A9:AA:F8:1A:E9:05
            X509v3 Authority Key Identifier:
                keyid:81:7F:44:DF:70:A1:D1:4D:98:25:D4:B2:58:08:9B:FB:B4:A6:B0:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/323830343a3362633a3a2f33322d313238203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:32:af:b8:84:81:97:7b:d1:c6:f0:20:ab:a7:b2:6d:7e:de:
         1e:c1:e0:fd:ab:28:92:35:b4:5a:b8:5a:0c:02:e9:76:07:b5:
         d4:84:04:8f:4d:10:d9:b6:23:b3:e3:cc:68:0b:44:aa:f8:fc:
         05:f5:4e:86:e1:b4:5f:d6:29:8d:60:3c:fd:90:90:63:f6:67:
         dc:ac:92:7b:da:6f:ea:1a:cb:ee:55:01:47:5a:91:fe:bc:83:
         b4:e8:b7:66:5b:11:d9:6f:e2:64:3f:8c:59:9a:cc:8c:ab:43:
         03:77:7f:69:af:20:5d:f3:d4:2a:d8:67:e3:69:ee:ed:b7:33:
         df:b3:8c:33:6f:52:3f:24:07:3e:c3:9d:9b:ca:a5:3a:0b:01:
         78:af:30:1d:59:c9:d5:a4:6f:ff:a4:b2:78:34:f5:f6:e9:ba:
         28:a0:ba:10:d9:47:5d:d2:f5:75:9d:f5:b1:48:09:a6:94:ec:
         16:31:a9:d0:be:e8:d0:37:52:d6:0e:ea:fe:10:d6:03:47:c2:
         8f:35:7f:cd:04:bf:d4:fa:a9:da:1a:52:24:86:02:62:d4:a4:
         7f:da:fb:03:2a:26:77:72:d6:53:ed:ec:d5:ad:fc:c0:d7:b2:
         e1:a5:2a:a3:ad:77:45:3d:17:42:65:88:b0:6b:02:a3:42:55:
         85:84:3c:50
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUeaPpjsezG0rPto5be5ARspoFxscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3RjQ0REY3MEExRDE0RDk4MjVENEIyNTgwODlCRkJC
NEE2QjA0QzAeFw0yNDA0MDMxOTUzNTlaFw0yNTA0MDIxOTU4NTlaMDMxMTAvBgNV
BAMTKEJDMkFGQzQ2MTBCQzBBNDQ5Rjc3NzUzQTZDQTNBOUFBRjgxQUU5MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjbSRc17SUlk/8ChkyvAqLL05h
KSpauYGogg0WorrwjoJE6OpRMguVP16gBS/L7pSpy0Qn9YwStpriGWP3/3MxTDUK
zWxvcNj+uqzQyhmp2fyPPhpG4je9w0yyeTqkxbDd6YjTYEKC+KYdfz8bmar6vSez
CPE2aTFyauzXoJJN4AC2mcUYsbnJcwPPKaSYVxW8X68jWfw6s2ikgTBB27cMPiSz
ITJQdfu8nRxSmnuGkRfXEHUgFo2Ob7kPOp1ko2WH2iz3CSSiH2kRQsAB6Mzgip9F
204KI+H/DEKdLXhcbV+pjEl2RmVSGhYdB3J348AEXWP7BpE++Q1Nlh+I/KjNAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUvCr8RhC8CkSfd3U6bKOpqvga6QUwHwYDVR0j
BBgwFoAUgX9E33Ch0U2YJdSyWAib+7SmsEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxjNmR5OWl3d1d0MmE4VzNBcXhhN21lNDRVRzJ2b21nZ000Wm11MlF2
S3EvMS84MTdGNDRERjcwQTFEMTREOTgyNUQ0QjI1ODA4OUJGQkI0QTZCMDRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxN0Y0NERGNzBBMUQxNEQ5
ODI1RDRCMjU4MDg5QkZCQjRBNkIwNEMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMYzZkeTlpd3dXdDJhOFczQXF4YTdtZTQ0VUcydm9tZ2dNNFptdTJRdktxLzEv
MzIzODMwMzQzYTMzNjI2MzNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzODM2
MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEA7wwDQYJKoZIhvcNAQELBQADggEBACgyr7iEgZd7
0cbwIKunsm1+3h7B4P2rKJI1tFq4WgwC6XYHtdSEBI9NENm2I7PjzGgLRKr4/AX1
TobhtF/WKY1gPP2QkGP2Z9ysknvab+oay+5VAUdakf68g7Tot2ZbEdlv4mQ/jFma
zIyrQwN3f2mvIF3z1CrYZ+Np7u23M9+zjDNvUj8kBz7DnZvKpToLAXivMB1ZydWk
b/+ksng09fbpuiiguhDZR13S9XWd9bFICaaU7BYxqdC+6NA3UtYO6v4Q1gNHwo81
f80Ev9T6qdoaUiSGAmLUpH/a+wMqJndy1lPt7NWt/MDXsuGlKqOtd0U9F0JliLBr
AqNCVYWEPFA=
-----END CERTIFICATE-----