Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          4Wie/iSDPHitW9v9m88aJgsVmQUE15ZCNxO4EUnE3Vo=
Subject key identifier:   A5:F3:21:6F:B4:2A:D2:F6:C6:50:0C:E6:5C:7E:D3:80:17:49:04:8F
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       3E56E657F8264AF410DC9914B986331C03C0CAA6
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Thu 02 May 2024 13:16:52 +0000
ROA not before:           Thu 02 May 2024 13:11:52 +0000
ROA not after:            Thu 01 May 2025 13:16:52 +0000
asID:                     265393
IP address blocks:        2804:3364:ff00::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:56:e6:57:f8:26:4a:f4:10:dc:99:14:b9:86:33:1c:03:c0:ca:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: May  2 13:11:52 2024 GMT
            Not After : May  1 13:16:52 2025 GMT
        Subject: CN=A5F3216FB42AD2F6C6500CE65C7ED3801749048F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:c0:ef:48:83:d4:18:d7:6f:d3:c9:19:3f:
                    33:33:64:f9:71:cc:cd:dc:17:c2:3f:58:ad:84:5f:
                    af:de:24:dd:68:22:6c:b3:85:b9:ba:df:48:cf:bf:
                    54:af:91:0b:f4:ba:12:3c:d0:30:a8:e7:c2:c6:b7:
                    2f:41:59:d8:eb:1d:96:f6:a2:55:36:70:40:1f:a2:
                    33:45:45:cb:63:f3:de:7b:46:0d:3d:77:b4:e5:0b:
                    b1:d7:eb:72:0d:ba:9c:2f:87:6a:b0:89:ce:fb:e4:
                    73:6e:40:08:96:a4:69:79:a9:dd:ab:85:22:40:b6:
                    8d:c8:84:03:89:9c:aa:ec:79:09:12:d3:1b:9d:b5:
                    27:48:54:16:51:39:fd:bc:82:47:6f:63:28:a8:0d:
                    3a:e5:26:80:d3:61:c4:77:1d:2b:ae:8c:ec:7c:a9:
                    c0:ea:f1:f2:81:0e:1d:30:27:ca:f5:39:94:a2:22:
                    f4:3e:7a:4b:e4:36:22:16:20:84:43:39:7a:3b:68:
                    9a:04:17:9b:49:c9:19:82:62:71:4b:b3:35:35:7e:
                    48:ce:33:24:55:b4:d9:e5:64:87:0f:72:f3:81:9d:
                    57:aa:b5:d7:76:73:22:25:bb:22:33:80:bc:f9:16:
                    c3:57:58:81:2d:d3:7c:cb:c5:71:4e:3f:b3:74:6f:
                    ac:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F3:21:6F:B4:2A:D2:F6:C6:50:0C:E6:5C:7E:D3:80:17:49:04:8F
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:9a:f9:7a:94:87:db:63:65:f7:38:7d:ce:36:f8:9c:d3:79:
         2a:e8:34:78:eb:cb:cf:96:65:c6:54:bd:98:07:17:a3:1d:b6:
         8d:cd:48:da:8c:82:95:78:3e:84:52:15:c9:b5:95:84:49:4a:
         9c:02:fb:38:34:4b:82:79:29:f8:3b:67:b0:71:bc:7d:8b:98:
         f4:4a:76:b4:bd:a5:d4:e4:ce:f2:c3:2d:da:cb:cc:78:16:ae:
         88:a0:2e:16:c0:c9:39:58:8a:f0:9b:df:9a:8f:8e:2c:f4:8d:
         f8:9c:cb:d3:db:80:ad:7e:e0:77:bd:18:b5:17:75:df:ea:38:
         97:37:b4:77:eb:18:ee:2c:95:1a:0b:d3:79:4c:2a:65:46:90:
         e2:38:d1:c8:f2:e3:2d:29:95:cc:b8:f0:e1:ee:68:e8:83:8c:
         65:8d:c2:c3:32:fe:59:03:77:ca:bc:b3:d6:7e:e7:6a:69:67:
         b8:e6:8a:2c:15:3b:81:ab:19:ee:f0:2b:14:b9:66:34:71:ca:
         f4:c5:a7:fa:39:ed:cf:90:4f:cb:5a:3d:71:8f:6a:ae:70:fa:
         d7:f3:dd:57:09:00:6f:b8:53:ad:9c:36:57:0f:24:14:bb:13:
         8e:ab:8c:39:cf:9b:d9:c1:e1:ed:61:06:27:82:45:45:66:f5:
         62:fa:76:f5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPlbmV/gmSvQQ3JkUuYYzHAPAyqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ3REMzMDQ2RjkzRDdGMzZBN0YyNUU1Mzc5RjlBNUU4
RTU0MkRBRTAeFw0yNDA1MDIxMzExNTJaFw0yNTA1MDExMzE2NTJaMDMxMTAvBgNV
BAMTKEE1RjMyMTZGQjQyQUQyRjZDNjUwMENFNjVDN0VEMzgwMTc0OTA0OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWKsDvSIPUGNdv08kZPzMzZPlx
zM3cF8I/WK2EX6/eJN1oImyzhbm630jPv1SvkQv0uhI80DCo58LGty9BWdjrHZb2
olU2cEAfojNFRctj8957Rg09d7TlC7HX63INupwvh2qwic775HNuQAiWpGl5qd2r
hSJAto3IhAOJnKrseQkS0xudtSdIVBZROf28gkdvYyioDTrlJoDTYcR3HSuujOx8
qcDq8fKBDh0wJ8r1OZSiIvQ+ekvkNiIWIIRDOXo7aJoEF5tJyRmCYnFLszU1fkjO
MyRVtNnlZIcPcvOBnVeqtdd2cyIluyIzgLz5FsNXWIEt03zLxXFOP7N0b6yPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUpfMhb7Qq0vbGUAzmXH7TgBdJBI8wHwYDVR0j
BBgwFoAUZH3DBG+T1/NqfyXlN5+aXo5ULa4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMS82NDdEQzMwNDZGOTNEN0YzNkE3RjI1RTUzNzlGOUE1RThFNTQyREFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0N0RDMzA0NkY5M0Q3RjM2
QTdGMjVFNTM3OUY5QTVFOEU1NDJEQUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzEv
MzIzODMwMzQzYTMzMzMzNjM0M2E2NjY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNTMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEM2T/MA0GCSqGSIb3DQEBCwUA
A4IBAQBomvl6lIfbY2X3OH3ONvic03kq6DR468vPlmXGVL2YBxejHbaNzUjajIKV
eD6EUhXJtZWESUqcAvs4NEuCeSn4O2ewcbx9i5j0Sna0vaXU5M7ywy3ay8x4Fq6I
oC4WwMk5WIrwm9+aj44s9I34nMvT24CtfuB3vRi1F3Xf6jiXN7R36xjuLJUaC9N5
TCplRpDiONHI8uMtKZXMuPDh7mjog4xljcLDMv5ZA3fKvLPWfudqaWe45oosFTuB
qxnu8CsUuWY0ccr0xaf6Oe3PkE/LWj1xj2qucPrX891XCQBvuFOtnDZXDyQUuxOO
q4w5z5vZweHtYQYngkVFZvVi+nb1
-----END CERTIFICATE-----