Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/323830343a363533303a3a2f33322d313238203d3e20323639343734.roa
File:                     323830343a363533303a3a2f33322d313238203d3e20323639343734.roa (raw, json)
Hash identifier:          7KoaLGe7LRYqcwlmHxuqIPGvrC/iwKMeuKZnyW9cNA0=
Subject key identifier:   7C:D3:76:08:C4:6F:F6:F6:5C:36:35:04:FC:DA:51:BC:15:82:E0:3A
Certificate issuer:       /CN=9599D6E8C704E2A5F423FC8C639E17E2E032C535
Certificate serial:       7E3C382B04F732A306924CC14D1E8041B39ED38B
Authority key identifier: 95:99:D6:E8:C7:04:E2:A5:F4:23:FC:8C:63:9E:17:E2:E0:32:C5:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9599D6E8C704E2A5F423FC8C639E17E2E032C535.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/323830343a363533303a3a2f33322d313238203d3e20323639343734.roa
Signing time:             Fri 05 Apr 2024 21:48:47 +0000
ROA not before:           Fri 05 Apr 2024 21:43:47 +0000
ROA not after:            Fri 04 Apr 2025 21:48:47 +0000
asID:                     269474
IP address blocks:        2804:6530::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3c:38:2b:04:f7:32:a3:06:92:4c:c1:4d:1e:80:41:b3:9e:d3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9599D6E8C704E2A5F423FC8C639E17E2E032C535
        Validity
            Not Before: Apr  5 21:43:47 2024 GMT
            Not After : Apr  4 21:48:47 2025 GMT
        Subject: CN=7CD37608C46FF6F65C363504FCDA51BC1582E03A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:2d:e4:7f:6e:db:cd:43:2d:15:a9:9d:26:
                    a0:32:cf:8a:4c:c2:29:24:7f:1b:0a:84:f8:ad:1f:
                    24:7f:e9:aa:0e:92:95:38:67:84:80:64:61:f7:66:
                    bf:2d:03:c7:1b:75:2b:0d:af:fe:b1:9f:43:23:48:
                    82:62:15:d3:9b:c8:7b:23:fb:60:1e:e3:81:72:8c:
                    eb:71:61:44:03:2e:b7:09:e7:76:bd:54:3f:d5:a2:
                    a1:f0:3a:8e:8d:5f:de:ab:4f:59:33:9e:3b:1f:cd:
                    72:7e:a6:a1:29:d3:d2:cf:c8:91:b6:ba:0d:86:3d:
                    d2:2a:92:fe:4e:57:f5:0a:5c:bb:d0:77:c3:a0:6d:
                    56:c6:57:76:7d:38:06:07:73:40:8e:ba:1b:c2:b7:
                    5f:52:8f:7c:ed:3e:28:e9:ae:65:7b:f0:6b:ce:e8:
                    c9:de:2e:1a:4f:4f:a2:1e:3e:9e:ed:c5:67:33:2c:
                    7d:c1:be:26:61:ee:42:4f:bc:c5:20:ce:4f:dc:42:
                    04:ef:bf:4e:35:25:b1:03:2d:86:49:4a:21:20:d4:
                    b4:a3:70:bd:37:48:46:83:0f:e6:c5:a5:8c:12:08:
                    88:a3:c5:f0:eb:fa:66:f8:08:1c:97:d0:26:51:85:
                    64:6f:88:10:8a:9a:eb:c1:88:b8:4a:6c:4e:87:c2:
                    95:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D3:76:08:C4:6F:F6:F6:5C:36:35:04:FC:DA:51:BC:15:82:E0:3A
            X509v3 Authority Key Identifier:
                keyid:95:99:D6:E8:C7:04:E2:A5:F4:23:FC:8C:63:9E:17:E2:E0:32:C5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/9599D6E8C704E2A5F423FC8C639E17E2E032C535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9599D6E8C704E2A5F423FC8C639E17E2E032C535.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/323830343a363533303a3a2f33322d313238203d3e20323639343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6530::/32

    Signature Algorithm: sha256WithRSAEncryption
         ea:f4:f8:6e:8c:3a:2f:f7:b3:42:45:2c:fc:a3:14:19:82:9f:
         73:43:e1:30:bc:3e:54:b5:1d:de:22:3f:a4:3a:1f:7b:23:73:
         4c:60:cb:35:64:01:49:08:9e:80:8d:16:14:6a:74:bc:41:86:
         9a:36:ee:9b:ff:5c:c6:4a:e7:17:27:dd:0f:5d:34:79:b8:7a:
         e1:9b:18:e2:30:07:c1:49:e0:ed:3f:94:2d:d4:3a:b0:6d:62:
         ba:b7:9c:23:83:b6:66:81:8c:50:06:2f:37:75:ee:27:92:73:
         9e:36:1a:ed:fb:56:e9:f6:92:23:a3:c8:7a:ca:1e:8a:ab:60:
         86:f9:a1:2d:89:5c:8b:db:b3:97:fc:28:44:0a:97:50:ee:b7:
         28:b2:f4:a9:4d:ca:69:5c:df:0f:6d:68:f6:c2:ef:6c:1d:df:
         e6:63:77:8c:fe:3b:f8:af:8e:e8:9f:c3:68:23:e6:bc:47:32:
         27:0e:1a:21:e7:a5:40:11:c5:e4:f2:e0:08:3a:0d:fd:97:ee:
         d9:53:05:bb:0d:14:d3:27:36:95:b7:fc:6e:c9:81:8c:cf:eb:
         da:93:cb:fe:e1:4f:d9:f7:dd:58:fc:90:8c:9a:c9:fb:0a:3e:
         7d:6a:2e:ab:07:9f:34:0e:ef:15:2b:6b:9a:7c:75:0c:51:c6:
         d5:ec:db:13
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUfjw4KwT3MqMGkkzBTR6AQbOe04swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU5OUQ2RThDNzA0RTJBNUY0MjNGQzhDNjM5RTE3RTJF
MDMyQzUzNTAeFw0yNDA0MDUyMTQzNDdaFw0yNTA0MDQyMTQ4NDdaMDMxMTAvBgNV
BAMTKDdDRDM3NjA4QzQ2RkY2RjY1QzM2MzUwNEZDREE1MUJDMTU4MkUwM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbC3kf27bzUMtFamdJqAyz4pM
wikkfxsKhPitHyR/6aoOkpU4Z4SAZGH3Zr8tA8cbdSsNr/6xn0MjSIJiFdObyHsj
+2Ae44FyjOtxYUQDLrcJ53a9VD/VoqHwOo6NX96rT1kznjsfzXJ+pqEp09LPyJG2
ug2GPdIqkv5OV/UKXLvQd8OgbVbGV3Z9OAYHc0COuhvCt19Sj3ztPijprmV78GvO
6MneLhpPT6IePp7txWczLH3BviZh7kJPvMUgzk/cQgTvv041JbEDLYZJSiEg1LSj
cL03SEaDD+bFpYwSCIijxfDr+mb4CByX0CZRhWRviBCKmuvBiLhKbE6HwpVbAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUfNN2CMRv9vZcNjUE/NpRvBWC4DowHwYDVR0j
BBgwFoAUlZnW6McE4qX0I/yMY54X4uAyxTUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWliOVZxNEtQSjllOUZIZFBWU2pjenp4cmhNRzI1Q2Z0TU51RjQ2WGRB
NW0vMC85NTk5RDZFOEM3MDRFMkE1RjQyM0ZDOEM2MzlFMTdFMkUwMzJDNTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1OTlENkU4QzcwNEUyQTVG
NDIzRkM4QzYzOUUxN0UyRTAzMkM1MzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVpYjlWcTRLUEo5ZTlGSGRQVlNqY3p6eHJoTUcyNUNmdE1OdUY0NlhkQTVtLzAv
MzIzODMwMzQzYTM2MzUzMzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzNDM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGUwMA0GCSqGSIb3DQEBCwUAA4IBAQDq9Phu
jDov97NCRSz8oxQZgp9zQ+EwvD5UtR3eIj+kOh97I3NMYMs1ZAFJCJ6AjRYUanS8
QYaaNu6b/1zGSucXJ90PXTR5uHrhmxjiMAfBSeDtP5Qt1DqwbWK6t5wjg7ZmgYxQ
Bi83de4nknOeNhrt+1bp9pIjo8h6yh6Kq2CG+aEtiVyL27OX/ChECpdQ7rcosvSp
TcppXN8PbWj2wu9sHd/mY3eM/jv4r47on8NoI+a8RzInDhoh56VAEcXk8uAIOg39
l+7ZUwW7DRTTJzaVt/xuyYGMz+vak8v+4U/Z991Y/JCMmsn7Cj59ai6rB580Du8V
K2uafHUMUcbV7NsT
-----END CERTIFICATE-----