Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/1/323830343a343135383a3a2f33322d3332203d3e20323637343237.roa
File:                     323830343a343135383a3a2f33322d3332203d3e20323637343237.roa (raw, json)
Hash identifier:          GVno+CpLChNxXB01vTDdDl5s04umwvqaY2zsqAgP4ec=
Subject key identifier:   17:0C:51:15:6A:1C:78:23:03:C8:27:9A:49:78:BC:84:11:C8:76:7B
Certificate issuer:       /CN=B7926A9DB608C6944F9364A81239EC10CF5E2752
Certificate serial:       657DEE71A906072EB5FF16984B891F787511ED0C
Authority key identifier: B7:92:6A:9D:B6:08:C6:94:4F:93:64:A8:12:39:EC:10:CF:5E:27:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7926A9DB608C6944F9364A81239EC10CF5E2752.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/1/323830343a343135383a3a2f33322d3332203d3e20323637343237.roa
Signing time:             Thu 04 Apr 2024 04:51:17 +0000
ROA not before:           Thu 04 Apr 2024 04:46:17 +0000
ROA not after:            Thu 03 Apr 2025 04:51:17 +0000
asID:                     267427
IP address blocks:        2804:4158::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7d:ee:71:a9:06:07:2e:b5:ff:16:98:4b:89:1f:78:75:11:ed:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7926A9DB608C6944F9364A81239EC10CF5E2752
        Validity
            Not Before: Apr  4 04:46:17 2024 GMT
            Not After : Apr  3 04:51:17 2025 GMT
        Subject: CN=170C51156A1C782303C8279A4978BC8411C8767B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:e4:85:e2:18:89:b9:56:76:2a:4f:2f:be:
                    d7:61:56:1f:17:69:90:8f:bf:86:7f:4d:80:8d:5c:
                    cb:0a:26:7c:8e:b9:f0:81:dc:fa:36:47:9a:99:47:
                    0e:4d:09:de:ab:26:c6:c9:77:c4:a8:6f:85:39:8e:
                    9c:07:ae:78:ad:1c:db:d0:b4:07:a0:c7:b8:5e:9f:
                    12:4f:37:11:34:43:af:30:7f:a7:3e:04:96:ed:f7:
                    93:0b:42:75:42:7e:21:39:d6:b3:84:a3:e4:f7:43:
                    9b:45:2b:1a:28:85:c3:a3:ba:4b:d7:77:f2:a0:3b:
                    fa:16:64:47:f1:58:c4:cf:d8:91:54:f7:f9:5b:6b:
                    20:c5:1f:06:f5:39:9a:db:54:58:af:07:a1:90:44:
                    6b:34:8b:b8:59:47:b2:39:58:68:74:cd:74:8e:bc:
                    25:86:2c:ad:44:b3:77:be:45:c0:16:0c:bc:f7:77:
                    e1:fd:61:76:00:53:00:77:d6:b9:f2:99:de:3f:1d:
                    98:66:25:b9:64:48:01:ea:1c:a3:fb:6e:c0:16:81:
                    cd:2b:e6:80:ac:5b:ac:2c:80:fa:4f:20:83:0f:a2:
                    e9:e7:dc:05:78:cc:76:ad:84:a4:df:cf:e8:b1:ba:
                    d3:63:f0:08:fc:03:50:3d:c5:4e:12:71:e4:ce:28:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0C:51:15:6A:1C:78:23:03:C8:27:9A:49:78:BC:84:11:C8:76:7B
            X509v3 Authority Key Identifier:
                keyid:B7:92:6A:9D:B6:08:C6:94:4F:93:64:A8:12:39:EC:10:CF:5E:27:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/1/B7926A9DB608C6944F9364A81239EC10CF5E2752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7926A9DB608C6944F9364A81239EC10CF5E2752.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/1/323830343a343135383a3a2f33322d3332203d3e20323637343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4158::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:4e:18:f9:c6:a8:b5:67:c1:5f:08:c0:88:83:2c:7d:6d:93:
         d6:cd:3f:9b:bc:17:bb:68:a3:f0:5c:39:96:6e:6f:cb:68:26:
         a7:0d:ed:2e:f6:31:6b:49:40:22:24:49:fa:7d:3c:9a:73:75:
         b8:ba:a5:e7:fd:86:bf:37:3f:09:fe:16:3d:3a:de:80:7d:41:
         c8:df:9e:d8:2a:6d:6f:df:6c:69:a6:f1:9a:f9:32:f6:f8:e8:
         35:82:b0:08:6f:ca:3a:43:a0:ba:23:bb:b1:a4:3c:e8:d3:a4:
         e5:3f:0a:95:b6:61:30:70:f3:ff:59:03:70:ec:4d:a1:88:cf:
         18:bb:16:70:a6:7b:29:c1:20:5a:05:d6:cb:9d:f8:38:d5:96:
         8d:83:cc:d1:96:22:b3:08:3d:1f:46:8a:69:43:37:bc:b8:9a:
         85:e4:e5:6e:d7:bf:ad:44:83:8c:ad:44:2f:07:c2:e5:57:15:
         7c:23:1e:bc:0c:a7:84:59:e5:de:a3:a9:06:92:a7:c3:f8:01:
         de:f5:2c:fe:08:d0:65:ac:f9:ef:65:77:69:77:97:59:db:57:
         92:b8:7b:a9:ff:ae:bb:9a:2d:48:30:fa:bf:b1:96:7c:64:52:
         d3:50:a7:30:58:99:ca:8c:19:7f:30:ef:e5:c6:f4:04:52:1f:
         53:19:09:cf
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZX3ucakGBy61/xaYS4kfeHUR7QwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc5MjZBOURCNjA4QzY5NDRGOTM2NEE4MTIzOUVDMTBD
RjVFMjc1MjAeFw0yNDA0MDQwNDQ2MTdaFw0yNTA0MDMwNDUxMTdaMDMxMTAvBgNV
BAMTKDE3MEM1MTE1NkExQzc4MjMwM0M4Mjc5QTQ5NzhCQzg0MTFDODc2N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh3OSF4hiJuVZ2Kk8vvtdhVh8X
aZCPv4Z/TYCNXMsKJnyOufCB3Po2R5qZRw5NCd6rJsbJd8Sob4U5jpwHrnitHNvQ
tAegx7henxJPNxE0Q68wf6c+BJbt95MLQnVCfiE51rOEo+T3Q5tFKxoohcOjukvX
d/KgO/oWZEfxWMTP2JFU9/lbayDFHwb1OZrbVFivB6GQRGs0i7hZR7I5WGh0zXSO
vCWGLK1Es3e+RcAWDLz3d+H9YXYAUwB31rnymd4/HZhmJblkSAHqHKP7bsAWgc0r
5oCsW6wsgPpPIIMPounn3AV4zHathKTfz+ixutNj8Aj8A1A9xU4SceTOKH3bAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFwxRFWoceCMDyCeaSXi8hBHIdnswHwYDVR0j
BBgwFoAUt5JqnbYIxpRPk2SoEjnsEM9eJ1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGNqZTRxNWtIOFJuQXVlOHc0TmkybzNFTDZZOTZrc3NmaXBDZUF5empt
bTEvMS9CNzkyNkE5REI2MDhDNjk0NEY5MzY0QTgxMjM5RUMxMENGNUUyNzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3OTI2QTlEQjYwOEM2OTQ0
RjkzNjRBODEyMzlFQzEwQ0Y1RTI3NTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhjamU0cTVrSDhSbkF1ZTh3NE5pMm8zRUw2WTk2a3NzZmlwQ2VBeXpqbW0xLzEv
MzIzODMwMzQzYTM0MzEzNTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARBWDANBgkqhkiG9w0BAQsFAAOCAQEAbU4Y+cao
tWfBXwjAiIMsfW2T1s0/m7wXu2ij8Fw5lm5vy2gmpw3tLvYxa0lAIiRJ+n08mnN1
uLql5/2Gvzc/Cf4WPTregH1ByN+e2Cptb99saabxmvky9vjoNYKwCG/KOkOguiO7
saQ86NOk5T8KlbZhMHDz/1kDcOxNoYjPGLsWcKZ7KcEgWgXWy534ONWWjYPM0ZYi
swg9H0aKaUM3vLiaheTlbte/rUSDjK1ELwfC5VcVfCMevAynhFnl3qOpBpKnw/gB
3vUs/gjQZaz572V3aXeXWdtXkrh7qf+uu5otSDD6v7GWfGRS01CnMFiZyowZfzDv
5cb0BFIfUxkJzw==
-----END CERTIFICATE-----