Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a343030303a3a2f33342d3334203d3e203631363035.roa
File:                     323830343a376461343a343030303a3a2f33342d3334203d3e203631363035.roa (raw, json)
Hash identifier:          IaUOShndeufdBTDt6PIWrKLfFoR4QQnZJv4rk9DVhhY=
Subject key identifier:   5F:BF:23:55:11:E0:28:27:C9:49:49:F1:8E:6C:67:8C:85:3E:48:86
Certificate issuer:       /CN=95A9B935AF7391D649D034160A7150D2138ECFBC
Certificate serial:       3A997AB020E1F6A3B5FF597A79260C012502813F
Authority key identifier: 95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a343030303a3a2f33342d3334203d3e203631363035.roa
Signing time:             Wed 23 Oct 2024 18:55:35 +0000
ROA not before:           Wed 23 Oct 2024 18:50:35 +0000
ROA not after:            Wed 22 Oct 2025 18:55:35 +0000
asID:                     61605
IP address blocks:        2804:7da4:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:99:7a:b0:20:e1:f6:a3:b5:ff:59:7a:79:26:0c:01:25:02:81:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A9B935AF7391D649D034160A7150D2138ECFBC
        Validity
            Not Before: Oct 23 18:50:35 2024 GMT
            Not After : Oct 22 18:55:35 2025 GMT
        Subject: CN=5FBF235511E02827C94949F18E6C678C853E4886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:f6:ab:53:71:9f:39:37:d9:53:a7:32:70:
                    a0:b4:d7:65:87:b2:4c:d8:fd:75:84:93:41:90:98:
                    00:2f:b7:1c:ed:fd:c0:35:54:fa:ed:76:89:c1:86:
                    39:b8:5f:a7:7f:2d:32:51:4e:e6:8c:19:3d:6c:3e:
                    fa:6c:8f:d9:25:bd:af:f3:aa:9d:f5:04:9c:dd:63:
                    ea:8d:0a:27:ed:e0:a9:65:98:11:53:75:4d:bd:3e:
                    ea:3b:aa:be:54:0f:e2:76:71:06:32:51:5a:57:9e:
                    5c:6e:ab:40:a5:c6:2d:6b:b6:16:51:70:94:60:ba:
                    5c:16:49:b9:3c:73:2d:f7:32:cc:fe:35:93:4a:cf:
                    21:ac:ef:1c:18:70:a4:a6:63:b7:8c:06:26:3f:8a:
                    3a:d8:d1:d4:13:5a:d7:8b:41:5e:1a:1b:17:89:88:
                    2e:10:e6:ce:35:56:8b:2e:cf:da:16:b9:5f:01:5e:
                    58:66:53:71:c0:f5:a1:9c:51:ac:04:1e:b1:1b:e2:
                    5f:c4:0e:25:a2:5c:15:f5:5c:26:71:33:c7:43:50:
                    e5:a8:a8:87:7c:c2:77:1c:9c:3e:c7:b3:ca:4e:80:
                    e5:ab:16:6d:49:b5:76:5f:2e:a9:8c:f7:b8:ff:8e:
                    f8:f9:4a:4d:28:11:77:ea:a1:5c:ba:b1:79:89:95:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BF:23:55:11:E0:28:27:C9:49:49:F1:8E:6C:67:8C:85:3E:48:86
            X509v3 Authority Key Identifier:
                keyid:95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/95A9B935AF7391D649D034160A7150D2138ECFBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a343030303a3a2f33342d3334203d3e203631363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7da4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:99:ac:5a:b9:16:68:01:61:0e:24:b9:03:62:95:b7:35:1b:
         99:93:21:9d:87:ab:03:49:85:6b:ab:10:4b:b1:31:f5:cc:a7:
         bc:10:38:ee:f1:55:f3:92:4c:7e:6d:86:c9:10:93:df:f7:0c:
         67:02:36:c0:68:82:09:79:3e:ad:ad:da:4f:29:d2:23:d8:70:
         c6:68:e3:e7:23:f8:1d:92:84:1c:a1:22:c2:2d:68:19:54:20:
         4a:e5:03:23:ca:e1:17:e0:7a:d0:9e:f2:8b:48:a5:37:c1:25:
         dc:10:20:77:e4:ab:8e:5a:35:12:42:3e:6c:42:ae:97:96:91:
         a4:c4:09:d7:ae:4d:03:fc:60:93:f2:35:25:dc:50:62:c9:b2:
         f1:ca:f6:d9:7e:36:db:3d:21:7b:10:03:2a:03:c5:82:7a:66:
         06:24:b3:02:b9:af:bf:90:b2:05:6c:e1:1d:91:d2:31:f0:cd:
         92:eb:2d:a0:3d:9c:43:b5:d6:26:aa:cf:d4:49:72:37:05:df:
         58:32:56:d7:5f:b1:8a:bf:94:07:33:d7:2e:7f:22:19:96:0c:
         70:45:96:9d:1f:72:31:32:b3:45:a1:75:e0:ad:4f:bd:2d:d7:
         ca:24:7f:62:27:d0:25:26:8a:92:67:a0:36:2f:b6:b8:a4:87:
         ad:db:aa:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOpl6sCDh9qO1/1l6eSYMASUCgT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVBOUI5MzVBRjczOTFENjQ5RDAzNDE2MEE3MTUwRDIx
MzhFQ0ZCQzAeFw0yNDEwMjMxODUwMzVaFw0yNTEwMjIxODU1MzVaMDMxMTAvBgNV
BAMTKDVGQkYyMzU1MTFFMDI4MjdDOTQ5NDlGMThFNkM2NzhDODUzRTQ4ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs//arU3GfOTfZU6cycKC012WH
skzY/XWEk0GQmAAvtxzt/cA1VPrtdonBhjm4X6d/LTJRTuaMGT1sPvpsj9klva/z
qp31BJzdY+qNCift4KllmBFTdU29Puo7qr5UD+J2cQYyUVpXnlxuq0Clxi1rthZR
cJRgulwWSbk8cy33Msz+NZNKzyGs7xwYcKSmY7eMBiY/ijrY0dQTWteLQV4aGxeJ
iC4Q5s41Vosuz9oWuV8BXlhmU3HA9aGcUawEHrEb4l/EDiWiXBX1XCZxM8dDUOWo
qId8wnccnD7Hs8pOgOWrFm1JtXZfLqmM97j/jvj5Sk0oEXfqoVy6sXmJlbYPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUX78jVRHgKCfJSUnxjmxnjIU+SIYwHwYDVR0j
BBgwFoAUlam5Na9zkdZJ0DQWCnFQ0hOOz7wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUJMVXJ0ek1od3I1c3VRRjVhTG1VNDVFcmt2TEJMWFFYV1VRQVZaZ1Iz
YmovMC85NUE5QjkzNUFGNzM5MUQ2NDlEMDM0MTYwQTcxNTBEMjEzOEVDRkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1QTlCOTM1QUY3MzkxRDY0
OUQwMzQxNjBBNzE1MEQyMTM4RUNGQkMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlCTFVydHpNaHdyNXN1UUY1YUxtVTQ1RXJrdkxCTFhRWFdVUUFWWmdSM2JqLzAv
MzIzODMwMzQzYTM3NjQ2MTM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBH2kQDANBgkqhkiG9w0BAQsFAAOC
AQEAaZmsWrkWaAFhDiS5A2KVtzUbmZMhnYerA0mFa6sQS7Ex9cynvBA47vFV85JM
fm2GyRCT3/cMZwI2wGiCCXk+ra3aTynSI9hwxmjj5yP4HZKEHKEiwi1oGVQgSuUD
I8rhF+B60J7yi0ilN8El3BAgd+Srjlo1EkI+bEKul5aRpMQJ165NA/xgk/I1JdxQ
Ysmy8cr22X422z0hexADKgPFgnpmBiSzArmvv5CyBWzhHZHSMfDNkustoD2cQ7XW
JqrP1ElyNwXfWDJW11+xir+UBzPXLn8iGZYMcEWWnR9yMTKzRaF14K1PvS3XyiR/
YifQJSaKkmegNi+2uKSHrduq/w==
-----END CERTIFICATE-----