Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/323830343a326264633a3a2f33322d3332203d3e20323635313831.roa
File:                     323830343a326264633a3a2f33322d3332203d3e20323635313831.roa (raw, json)
Hash identifier:          XGHPIhN/hf7tF1ep8uFdMxvpcB8J6opucbLQzwmQ1AE=
Subject key identifier:   56:56:8F:66:86:F2:B7:30:88:3E:A4:40:A6:7E:A2:A6:5E:2E:45:FF
Certificate issuer:       /CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
Certificate serial:       0620832B80D25CC82A6CD587069FB7648BC2E50C
Authority key identifier: 6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/323830343a326264633a3a2f33322d3332203d3e20323635313831.roa
Signing time:             Thu 04 Apr 2024 03:52:23 +0000
ROA not before:           Thu 04 Apr 2024 03:47:23 +0000
ROA not after:            Thu 03 Apr 2025 03:52:23 +0000
asID:                     265181
IP address blocks:        2804:2bdc::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:20:83:2b:80:d2:5c:c8:2a:6c:d5:87:06:9f:b7:64:8b:c2:e5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
        Validity
            Not Before: Apr  4 03:47:23 2024 GMT
            Not After : Apr  3 03:52:23 2025 GMT
        Subject: CN=56568F6686F2B730883EA440A67EA2A65E2E45FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:d9:e8:a8:a0:b2:df:73:0a:2e:6f:fd:38:
                    e8:ca:cc:9e:80:f5:c2:d6:04:c4:8c:ed:b4:f6:45:
                    53:1b:4b:ee:d4:c4:40:76:a6:1f:a7:45:e3:ac:6e:
                    41:38:70:b2:75:b1:cb:49:28:1c:d5:ef:a1:be:e8:
                    d4:18:be:bb:0d:5b:b8:11:09:14:20:2c:e0:f1:e2:
                    b5:8f:cc:09:56:77:0a:76:d9:fd:f4:fe:6b:af:01:
                    cd:8d:d6:da:bf:a6:6d:9a:e4:6e:82:7e:57:ca:9d:
                    05:67:8f:3a:b6:1f:bf:a0:03:a9:a6:41:5a:df:b0:
                    6d:6e:c0:5e:56:b2:00:0f:ce:90:ee:ac:c3:29:f8:
                    97:a4:64:40:7b:8e:b9:07:ae:7a:80:00:97:13:2a:
                    fb:d7:2a:84:cc:d9:49:8c:90:7b:2e:4b:67:9a:9d:
                    42:0a:98:fb:26:bb:b2:7c:09:a3:92:43:8f:2b:1c:
                    32:77:1f:41:8b:37:8a:c1:fb:d2:56:ce:1d:98:3d:
                    bf:cc:ad:5c:4c:e4:34:98:d5:51:6a:04:8d:e1:b7:
                    70:50:b2:28:b5:3d:3e:a8:cb:5a:5f:39:a2:1a:c4:
                    e5:15:c5:20:b7:4d:a3:0f:7a:6e:95:10:5f:5b:e8:
                    2b:49:d6:4a:df:cb:a2:3a:36:27:3b:d6:b4:34:60:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:56:8F:66:86:F2:B7:30:88:3E:A4:40:A6:7E:A2:A6:5E:2E:45:FF
            X509v3 Authority Key Identifier:
                keyid:6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/323830343a326264633a3a2f33322d3332203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:53:58:9b:c4:a1:c0:6b:11:fc:b9:c6:d7:9a:5f:a4:a9:dd:
         4a:71:27:48:bf:8a:10:9b:68:88:fd:cc:6f:61:72:d5:5f:42:
         ec:fb:b8:5d:55:33:ef:30:7a:c7:89:38:2c:b1:67:01:6b:bb:
         aa:3d:bd:b2:30:7d:8b:95:a9:f1:35:fb:10:36:22:88:d3:c5:
         36:fe:a9:5e:ba:65:82:66:9d:26:94:18:1e:bd:aa:b6:c4:d1:
         ef:2c:36:73:57:ba:5f:36:f0:e5:aa:fc:f4:63:db:5b:34:03:
         c8:3d:1b:27:17:a4:cb:d8:65:53:8a:5e:17:38:87:3d:3a:d2:
         83:2c:37:d7:01:ef:d7:38:49:44:93:c0:7f:5b:92:6f:1f:63:
         89:91:3d:ef:ed:f0:ef:7f:e8:ad:1c:61:f3:87:9e:c7:de:13:
         b0:ba:6e:5a:0a:a8:69:d7:70:80:a3:21:cf:72:1a:95:ff:e5:
         f9:98:d6:fa:07:87:f1:2d:30:6f:2f:6f:40:1e:46:8d:4c:3b:
         d8:23:b1:b8:21:13:c7:de:f2:97:11:95:01:b6:1a:5f:04:a2:
         48:7a:d2:d8:db:b2:9b:01:96:41:e0:2a:b8:93:1d:ff:d6:2d:
         1e:c1:07:3e:25:90:c9:8f:5c:1b:8d:b2:5c:d4:47:2c:0b:57:
         55:e4:6d:ed
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBiCDK4DSXMgqbNWHBp+3ZIvC5QwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNEMEFENDQzMUNDMjIxNzUwRDhGMkMwRUM5RUYzMDU0
M0I3RDI0NDAeFw0yNDA0MDQwMzQ3MjNaFw0yNTA0MDMwMzUyMjNaMDMxMTAvBgNV
BAMTKDU2NTY4RjY2ODZGMkI3MzA4ODNFQTQ0MEE2N0VBMkE2NUUyRTQ1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmaNnoqKCy33MKLm/9OOjKzJ6A
9cLWBMSM7bT2RVMbS+7UxEB2ph+nReOsbkE4cLJ1sctJKBzV76G+6NQYvrsNW7gR
CRQgLODx4rWPzAlWdwp22f30/muvAc2N1tq/pm2a5G6CflfKnQVnjzq2H7+gA6mm
QVrfsG1uwF5WsgAPzpDurMMp+JekZEB7jrkHrnqAAJcTKvvXKoTM2UmMkHsuS2ea
nUIKmPsmu7J8CaOSQ48rHDJ3H0GLN4rB+9JWzh2YPb/MrVxM5DSY1VFqBI3ht3BQ
sii1PT6oy1pfOaIaxOUVxSC3TaMPem6VEF9b6CtJ1krfy6I6Nic71rQ0YOCXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUVlaPZobytzCIPqRApn6ipl4uRf8wHwYDVR0j
BBgwFoAUbNCtRDHMIhdQ2PLA7J7zBUO30kQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtoNG9Ma2RDS2JLYXE1Z3VrTWhLZFR3c21pb1JHdjVKTWNUWnN0U0x5
d3cvMS82Q0QwQUQ0NDMxQ0MyMjE3NTBEOEYyQzBFQzlFRjMwNTQzQjdEMjQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDRDBBRDQ0MzFDQzIyMTc1
MEQ4RjJDMEVDOUVGMzA1NDNCN0QyNDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhraDRvTGtkQ0tiS2FxNWd1a01oS2RUd3NtaW9SR3Y1Sk1jVFpzdFNMeXd3LzEv
MzIzODMwMzQzYTMyNjI2NDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzEzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQr3DANBgkqhkiG9w0BAQsFAAOCAQEAwFNYm8Sh
wGsR/LnG15pfpKndSnEnSL+KEJtoiP3Mb2Fy1V9C7Pu4XVUz7zB6x4k4LLFnAWu7
qj29sjB9i5Wp8TX7EDYiiNPFNv6pXrplgmadJpQYHr2qtsTR7yw2c1e6Xzbw5ar8
9GPbWzQDyD0bJxeky9hlU4peFziHPTrSgyw31wHv1zhJRJPAf1uSbx9jiZE97+3w
73/orRxh84eex94TsLpuWgqoaddwgKMhz3Ialf/l+ZjW+geH8S0wby9vQB5GjUw7
2COxuCETx97ylxGVAbYaXwSiSHrS2NuymwGWQeAquJMd/9YtHsEHPiWQyY9cG42y
XNRHLAtXVeRt7Q==
-----END CERTIFICATE-----