Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa
File:                     323830343a366663383a3a2f33322d3438203d3e20323730363834.roa (raw, json)
Hash identifier:          pK3XbwknLaVSe+plp6Y+J2rMyP6sK2u9UdmKQLxP/Xc=
Subject key identifier:   C7:86:0F:F2:C0:BC:1C:71:36:D6:86:EC:C8:DA:15:73:B3:69:A8:34
Certificate issuer:       /CN=18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5
Certificate serial:       3B5B19B28DAA258780F2B225D3AB22A4BE02B1C6
Authority key identifier: 18:C7:AE:0E:5E:CF:5E:5F:44:B8:24:90:8A:FB:21:AC:F1:30:53:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa
Signing time:             Wed 03 Apr 2024 22:55:32 +0000
ROA not before:           Wed 03 Apr 2024 22:50:32 +0000
ROA not after:            Wed 02 Apr 2025 22:55:32 +0000
asID:                     270684
IP address blocks:        2804:6fc8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5b:19:b2:8d:aa:25:87:80:f2:b2:25:d3:ab:22:a4:be:02:b1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5
        Validity
            Not Before: Apr  3 22:50:32 2024 GMT
            Not After : Apr  2 22:55:32 2025 GMT
        Subject: CN=C7860FF2C0BC1C7136D686ECC8DA1573B369A834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:64:29:56:32:53:65:3b:1d:31:dc:08:11:
                    9a:41:59:52:17:5c:3a:fb:6c:4b:95:83:5c:d1:ce:
                    68:ce:b9:f2:0c:cd:a4:85:fd:19:eb:31:34:f0:2d:
                    e6:9f:2b:fb:28:9a:55:41:5b:a6:7e:3f:56:8a:74:
                    03:bb:f1:46:1c:e0:c2:16:8b:50:08:37:f4:27:dd:
                    6e:65:5c:ef:ad:ec:ce:4d:19:ac:35:84:d2:93:ae:
                    80:25:2c:fa:f2:5c:f4:a9:eb:97:8f:8e:98:c9:29:
                    cc:67:25:7f:a2:86:35:d6:c0:4d:db:66:a8:fc:08:
                    ab:81:ae:c9:e6:80:96:16:a4:52:7b:17:09:9e:60:
                    ed:a1:19:fc:4e:77:07:e0:23:04:0f:ca:4d:b8:1f:
                    86:ac:6c:a1:05:1d:6f:01:d9:9e:b7:55:72:96:b0:
                    67:90:82:5d:ff:f8:f6:88:b2:e0:31:2d:eb:6b:f8:
                    80:ee:26:cb:3b:5f:5b:83:c6:5d:fc:e0:18:ae:a8:
                    d6:2d:16:3f:56:8d:21:d6:e6:b8:be:13:41:65:19:
                    6f:b2:e3:db:93:56:f5:1f:3c:61:e7:ae:18:1b:b8:
                    b0:04:98:1e:b6:d2:a9:c0:28:c7:83:62:e6:9c:22:
                    a5:06:4b:8b:54:af:2a:92:f3:99:eb:f3:13:75:d2:
                    8c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:86:0F:F2:C0:BC:1C:71:36:D6:86:EC:C8:DA:15:73:B3:69:A8:34
            X509v3 Authority Key Identifier:
                keyid:18:C7:AE:0E:5E:CF:5E:5F:44:B8:24:90:8A:FB:21:AC:F1:30:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:06:7b:ef:b1:3a:a7:e5:d3:6b:7c:b0:e7:20:b2:e8:12:e2:
         41:4b:02:99:64:13:76:31:6e:c5:76:99:9a:e4:de:c2:4e:fa:
         29:05:28:84:3f:34:18:48:dd:9d:29:43:01:b4:dc:df:e8:ba:
         5b:0b:72:72:c5:24:86:8e:9b:3e:ae:54:df:54:97:a7:b3:75:
         f0:9e:df:4c:6f:b1:22:51:30:0a:55:1f:02:e2:8b:b3:20:93:
         91:a2:7e:ca:28:0b:e8:fe:e5:91:35:4a:43:c5:8c:d8:a4:6b:
         e2:2c:15:8d:a7:da:13:f3:02:65:90:e4:d3:ff:cd:53:35:ec:
         65:54:d7:85:5b:eb:37:cb:1e:d0:74:0e:15:b1:d2:46:db:55:
         40:70:40:78:43:86:41:6a:d8:e0:c8:d2:92:3b:3f:fe:86:2f:
         a9:c9:10:ac:c0:84:29:92:b6:dd:b3:28:66:d6:0c:9a:47:e1:
         7d:65:df:99:4a:b1:79:99:b9:4a:d7:70:b3:6e:40:ca:cc:e7:
         74:4b:74:68:77:ac:e2:3e:8f:4c:1b:63:b7:88:9d:60:94:a2:
         6d:a9:27:95:44:da:35:67:61:de:26:37:3b:91:72:24:db:be:
         55:19:66:bb:78:c3:8f:5e:36:e8:f7:a7:c8:fb:54:d1:31:69:
         3b:14:3a:7a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO1sZso2qJYeA8rIl06sipL4CscYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThDN0FFMEU1RUNGNUU1RjQ0QjgyNDkwOEFGQjIxQUNG
MTMwNTNENTAeFw0yNDA0MDMyMjUwMzJaFw0yNTA0MDIyMjU1MzJaMDMxMTAvBgNV
BAMTKEM3ODYwRkYyQzBCQzFDNzEzNkQ2ODZFQ0M4REExNTczQjM2OUE4MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0N2QpVjJTZTsdMdwIEZpBWVIX
XDr7bEuVg1zRzmjOufIMzaSF/RnrMTTwLeafK/somlVBW6Z+P1aKdAO78UYc4MIW
i1AIN/Qn3W5lXO+t7M5NGaw1hNKTroAlLPryXPSp65ePjpjJKcxnJX+ihjXWwE3b
Zqj8CKuBrsnmgJYWpFJ7FwmeYO2hGfxOdwfgIwQPyk24H4asbKEFHW8B2Z63VXKW
sGeQgl3/+PaIsuAxLetr+IDuJss7X1uDxl384BiuqNYtFj9WjSHW5ri+E0FlGW+y
49uTVvUfPGHnrhgbuLAEmB620qnAKMeDYuacIqUGS4tUryqS85nr8xN10ox/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUx4YP8sC8HHE21obsyNoVc7NpqDQwHwYDVR0j
BBgwFoAUGMeuDl7PXl9EuCSQivshrPEwU9UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlhcTR1VFFLUXpMZHV5eHRSdXFucGZUMlF3QndOMmM1b2NMUXBZQnpp
NnYvMS8xOEM3QUUwRTVFQ0Y1RTVGNDRCODI0OTA4QUZCMjFBQ0YxMzA1M0Q1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4QzdBRTBFNUVDRjVFNUY0
NEI4MjQ5MDhBRkIyMUFDRjEzMDUzRDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZYXE0dVRRS1F6TGR1eXh0UnVxbnBmVDJRd0J3TjJjNW9jTFFwWUJ6aTZ2LzEv
MzIzODMwMzQzYTM2NjY2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzYzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARvyDANBgkqhkiG9w0BAQsFAAOCAQEAMwZ777E6
p+XTa3yw5yCy6BLiQUsCmWQTdjFuxXaZmuTewk76KQUohD80GEjdnSlDAbTc3+i6
WwtycsUkho6bPq5U31SXp7N18J7fTG+xIlEwClUfAuKLsyCTkaJ+yigL6P7lkTVK
Q8WM2KRr4iwVjafaE/MCZZDk0//NUzXsZVTXhVvrN8se0HQOFbHSRttVQHBAeEOG
QWrY4MjSkjs//oYvqckQrMCEKZK23bMoZtYMmkfhfWXfmUqxeZm5Stdws25Ayszn
dEt0aHes4j6PTBtjt4idYJSibaknlUTaNWdh3iY3O5FyJNu+VRlmu3jDj1426Pen
yPtU0TFpOxQ6eg==
-----END CERTIFICATE-----