Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/323830343a373032633a3a2f33322d313238203d3e20323632393039.roa
File:                     323830343a373032633a3a2f33322d313238203d3e20323632393039.roa (raw, json)
Hash identifier:          lmNEMiM3GcMsyzZCQaNMUS9cAn3lQLpFxYVYJQbp3Ho=
Subject key identifier:   40:30:54:5A:77:BA:88:FD:96:26:6E:C6:EB:71:BF:48:83:3C:B0:A8
Certificate issuer:       /CN=7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3
Certificate serial:       5E68F7379767C36782D3CF5989EBD9C7201E562F
Authority key identifier: 7B:0E:E7:7F:36:E4:2B:60:3F:E6:14:63:C5:A6:E8:A8:75:CD:8A:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/323830343a373032633a3a2f33322d313238203d3e20323632393039.roa
Signing time:             Tue 25 Jun 2024 14:09:54 +0000
ROA not before:           Tue 25 Jun 2024 14:04:54 +0000
ROA not after:            Tue 24 Jun 2025 14:09:54 +0000
asID:                     262909
IP address blocks:        2804:702c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:68:f7:37:97:67:c3:67:82:d3:cf:59:89:eb:d9:c7:20:1e:56:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3
        Validity
            Not Before: Jun 25 14:04:54 2024 GMT
            Not After : Jun 24 14:09:54 2025 GMT
        Subject: CN=4030545A77BA88FD96266EC6EB71BF48833CB0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:68:82:4e:6c:ea:40:0c:a0:d5:45:46:cb:
                    94:e4:24:d8:e2:d3:89:92:2b:52:1e:1b:45:39:bb:
                    bd:99:96:c9:ba:bd:ba:01:bb:12:89:6c:24:21:e4:
                    4c:d9:8e:65:3c:5a:24:39:ee:f0:72:be:14:ea:cd:
                    b8:7d:c9:0d:2c:e4:e4:8b:19:a8:2a:d6:1c:3d:7e:
                    3d:7d:7b:e9:bc:b3:11:c2:a5:10:79:4e:20:0a:c1:
                    3f:75:03:00:13:ec:fd:4d:df:63:b6:a0:ca:60:b6:
                    f4:b5:4a:05:1e:6a:70:69:14:f5:04:77:96:15:05:
                    e9:8f:b6:82:33:99:38:80:53:8b:62:b5:5d:c5:a3:
                    71:df:f6:ce:b7:46:18:88:c8:d1:e6:45:7c:17:91:
                    6a:7a:91:c6:73:ca:86:3a:a1:c0:08:ec:84:aa:2e:
                    c1:50:c7:7b:15:ec:d7:a3:7f:4d:f0:d4:d4:50:d2:
                    4d:0c:3d:8e:5a:dd:6f:b4:19:a2:ff:e9:58:24:4e:
                    0c:4f:6a:45:66:3e:81:5c:a0:7e:0c:20:69:a3:a9:
                    0c:ab:9a:e2:96:3f:67:1d:7a:90:66:6d:1a:d3:8c:
                    f2:83:ae:2b:7d:da:2e:ea:74:5a:ab:40:df:81:8b:
                    2f:48:63:0a:88:dc:26:9e:ce:53:a7:df:d8:a8:b0:
                    52:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:30:54:5A:77:BA:88:FD:96:26:6E:C6:EB:71:BF:48:83:3C:B0:A8
            X509v3 Authority Key Identifier:
                keyid:7B:0E:E7:7F:36:E4:2B:60:3F:E6:14:63:C5:A6:E8:A8:75:CD:8A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/323830343a373032633a3a2f33322d313238203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:702c::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:ae:c8:a5:f0:c4:9d:48:40:d0:67:89:84:28:b8:e9:9a:3e:
         44:2b:e1:d1:94:87:59:54:bc:78:4d:65:6f:da:a9:b2:6d:d5:
         01:db:8f:d1:f0:6a:46:9e:37:72:b1:6a:ea:e4:b2:bc:28:dd:
         58:6a:0a:72:5e:3f:c7:5e:69:06:b7:37:03:83:79:d5:40:7b:
         6c:90:56:3a:15:52:03:dc:01:6e:73:84:cd:3b:2e:86:92:74:
         5b:72:4a:46:96:7d:a0:b5:08:a9:6f:09:62:37:13:28:2c:52:
         ba:2b:fe:78:36:4c:3e:34:7b:ed:dc:d7:03:b6:9d:8a:fc:6d:
         77:c4:f4:fd:d4:7d:13:b2:c0:aa:db:60:ba:46:7f:22:42:d4:
         26:93:f5:b1:26:02:e6:71:7b:56:8c:d1:d8:a5:9b:bc:69:4c:
         3b:c3:e8:66:72:a7:ae:db:0f:8f:f4:20:d7:4c:eb:45:1a:1e:
         26:86:37:84:6f:76:ed:57:b3:59:79:d4:b9:29:17:46:a7:fb:
         b6:6f:9f:81:9d:e9:7f:6e:a3:02:0d:b5:4a:5f:51:fb:5f:6f:
         9c:8e:29:10:75:76:76:bd:a4:ec:cd:e3:14:44:4c:da:be:8a:
         21:07:0b:34:8c:d3:e2:f2:eb:3b:ae:d8:95:9a:e8:5c:4a:34:
         60:66:8b:b3
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUXmj3N5dnw2eC089ZievZxyAeVi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IwRUU3N0YzNkU0MkI2MDNGRTYxNDYzQzVBNkU4QTg3
NUNEOEFBMzAeFw0yNDA2MjUxNDA0NTRaFw0yNTA2MjQxNDA5NTRaMDMxMTAvBgNV
BAMTKDQwMzA1NDVBNzdCQTg4RkQ5NjI2NkVDNkVCNzFCRjQ4ODMzQ0IwQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVpWiCTmzqQAyg1UVGy5TkJNji
04mSK1IeG0U5u72Zlsm6vboBuxKJbCQh5EzZjmU8WiQ57vByvhTqzbh9yQ0s5OSL
Gagq1hw9fj19e+m8sxHCpRB5TiAKwT91AwAT7P1N32O2oMpgtvS1SgUeanBpFPUE
d5YVBemPtoIzmTiAU4titV3Fo3Hf9s63RhiIyNHmRXwXkWp6kcZzyoY6ocAI7ISq
LsFQx3sV7Nejf03w1NRQ0k0MPY5a3W+0GaL/6VgkTgxPakVmPoFcoH4MIGmjqQyr
muKWP2cdepBmbRrTjPKDrit92i7qdFqrQN+Biy9IYwqI3CaezlOn39iosFITAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUQDBUWne6iP2WJm7G63G/SIM8sKgwHwYDVR0j
BBgwFoAUew7nfzbkK2A/5hRjxaboqHXNiqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndZRE1YVnljUkV2ZTZ1cjJxYm1wUVhmYkFpNWd1Q2duc3FTclhzVVVC
d3MvMC83QjBFRTc3RjM2RTQyQjYwM0ZFNjE0NjNDNUE2RThBODc1Q0Q4QUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCMEVFNzdGMzZFNDJCNjAz
RkU2MTQ2M0M1QTZFOEE4NzVDRDhBQTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3WURNWFZ5Y1JFdmU2dXIycWJtcFFYZmJBaTVndUNnbnNxU3JYc1VVQndzLzAv
MzIzODMwMzQzYTM3MzAzMjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzIzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHAsMA0GCSqGSIb3DQEBCwUAA4IBAQBBrsil
8MSdSEDQZ4mEKLjpmj5EK+HRlIdZVLx4TWVv2qmybdUB24/R8GpGnjdysWrq5LK8
KN1YagpyXj/HXmkGtzcDg3nVQHtskFY6FVID3AFuc4TNOy6GknRbckpGln2gtQip
bwliNxMoLFK6K/54Nkw+NHvt3NcDtp2K/G13xPT91H0TssCq22C6Rn8iQtQmk/Wx
JgLmcXtWjNHYpZu8aUw7w+hmcqeu2w+P9CDXTOtFGh4mhjeEb3btV7NZedS5KRdG
p/u2b5+Bnel/bqMCDbVKX1H7X2+cjikQdXZ2vaTszeMUREzavoohBws0jNPi8us7
rtiVmuhcSjRgZouz
-----END CERTIFICATE-----