Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a3a2f33322d3332203d3e20323731333533.roa
File:                     323830343a376133303a3a2f33322d3332203d3e20323731333533.roa (raw, json)
Hash identifier:          sQLW+GfD6h8DdB1p8QVrG1XPX9dV2yhHJMcy81Hxzog=
Subject key identifier:   E8:DA:A2:35:AB:1D:AD:27:00:5E:68:26:9B:65:05:36:2A:FF:66:9C
Certificate issuer:       /CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
Certificate serial:       70EF39D00F7DF8599D53091D884A216E775B8F98
Authority key identifier: 63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a3a2f33322d3332203d3e20323731333533.roa
Signing time:             Thu 04 Apr 2024 20:55:46 +0000
ROA not before:           Thu 04 Apr 2024 20:50:46 +0000
ROA not after:            Thu 03 Apr 2025 20:55:46 +0000
asID:                     271353
IP address blocks:        2804:7a30::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ef:39:d0:0f:7d:f8:59:9d:53:09:1d:88:4a:21:6e:77:5b:8f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
        Validity
            Not Before: Apr  4 20:50:46 2024 GMT
            Not After : Apr  3 20:55:46 2025 GMT
        Subject: CN=E8DAA235AB1DAD27005E68269B6505362AFF669C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:dc:f7:bd:fc:6a:fa:dd:85:2f:89:c8:ca:
                    ef:4d:8a:71:39:53:ef:28:32:31:01:e2:b8:b3:d5:
                    28:34:7a:41:20:1f:7e:91:be:1a:bb:ce:ec:c2:4a:
                    82:80:c3:11:be:9a:d2:12:21:14:88:a9:d6:03:6e:
                    12:9c:60:08:d2:37:7c:b3:4e:48:bb:c3:81:f1:9b:
                    da:93:de:ee:04:08:89:ba:54:87:8a:7e:98:44:ab:
                    7e:22:44:d0:1d:45:18:84:06:9c:d7:d3:ed:75:a8:
                    43:48:c0:f8:98:0f:a7:8c:f6:6f:aa:a9:3a:eb:d2:
                    0e:a4:56:62:57:6f:d5:83:c8:91:e8:40:ea:96:3f:
                    7f:8b:a8:59:4f:5f:44:0d:fb:83:e5:68:72:79:8a:
                    35:c9:7a:8c:ed:a1:5f:47:5a:39:cd:65:1f:16:25:
                    7f:e6:78:3c:78:e5:a0:25:a8:7a:b7:69:5c:67:6a:
                    86:df:73:6c:3c:08:e9:04:73:1a:74:fe:8f:1e:9a:
                    5a:d5:60:f3:09:bc:68:39:b1:a4:99:2c:5f:06:6f:
                    b6:40:c2:c4:a2:88:27:3e:e5:cd:2a:52:73:89:26:
                    f6:39:b6:be:7f:d0:46:7a:df:65:74:c1:81:17:9c:
                    47:9a:74:8c:05:f5:f3:fd:32:2d:24:f8:dc:b3:0d:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DA:A2:35:AB:1D:AD:27:00:5E:68:26:9B:65:05:36:2A:FF:66:9C
            X509v3 Authority Key Identifier:
                keyid:63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/323830343a376133303a3a2f33322d3332203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:63:a1:e8:f1:16:61:58:d1:29:3d:94:f1:43:20:b3:62:10:
         db:56:3a:35:c6:ed:6b:2e:04:93:a1:a5:c7:2b:38:3d:63:67:
         58:61:56:d1:68:9e:38:bd:41:c9:6f:fb:a5:fe:f2:1e:24:9c:
         8d:ad:ae:c9:59:0e:a5:d3:1c:3a:c7:5c:b2:b4:59:1c:a8:30:
         28:f0:d9:c0:e3:46:31:1d:61:e9:a0:35:ed:8b:0d:04:64:3b:
         15:a1:cc:7b:ac:0d:fb:45:6c:7c:21:bc:62:a0:ea:28:12:38:
         04:ea:ee:ca:ac:22:78:43:39:cb:3d:12:eb:71:b8:f2:77:63:
         c8:ed:cf:7a:6f:63:26:f0:bf:00:be:40:9b:34:9f:94:5b:5d:
         ed:f5:52:b6:8d:19:9e:3e:bc:a2:fe:de:ae:a1:f1:ca:16:d9:
         67:0f:79:97:95:bb:61:f1:a7:3a:24:d8:d3:d5:57:04:8d:b2:
         80:f0:e7:87:fe:49:c4:23:e8:a0:9f:93:24:90:87:d8:08:0e:
         29:d6:9a:69:ca:40:1a:5b:5c:8e:c3:c3:8e:72:bb:a8:0c:b2:
         86:86:67:03:81:3a:bc:17:e1:90:a1:92:11:94:1b:9f:77:e9:
         f4:9d:a0:f4:62:11:88:7b:2e:00:1b:bd:04:cd:76:50:de:58:
         44:21:ea:1b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcO850A99+FmdUwkdiEohbndbj5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMwQkRDNzQ4QzBDM0I4RjEwNTFFNEREODQ5MjQ2MTQ4
OTZCRkEwNzAeFw0yNDA0MDQyMDUwNDZaFw0yNTA0MDMyMDU1NDZaMDMxMTAvBgNV
BAMTKEU4REFBMjM1QUIxREFEMjcwMDVFNjgyNjlCNjUwNTM2MkFGRjY2OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/dz3vfxq+t2FL4nIyu9NinE5
U+8oMjEB4riz1Sg0ekEgH36Rvhq7zuzCSoKAwxG+mtISIRSIqdYDbhKcYAjSN3yz
Tki7w4Hxm9qT3u4ECIm6VIeKfphEq34iRNAdRRiEBpzX0+11qENIwPiYD6eM9m+q
qTrr0g6kVmJXb9WDyJHoQOqWP3+LqFlPX0QN+4PlaHJ5ijXJeoztoV9HWjnNZR8W
JX/meDx45aAlqHq3aVxnaobfc2w8COkEcxp0/o8emlrVYPMJvGg5saSZLF8Gb7ZA
wsSiiCc+5c0qUnOJJvY5tr5/0EZ632V0wYEXnEeadIwF9fP9Mi0k+NyzDbD9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6NqiNasdrScAXmgmm2UFNir/ZpwwHwYDVR0j
BBgwFoAUYwvcdIwMO48QUeTdhJJGFIlr+gcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNjYnUxRnRjTUNqSEJ1bzVoQ285RFBDYUhYZFgxV2NSMVhXelZwdW5S
VjMvMS82MzBCREM3NDhDMEMzQjhGMTA1MUU0REQ4NDkyNDYxNDg5NkJGQTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMEJEQzc0OEMwQzNCOEYx
MDUxRTRERDg0OTI0NjE0ODk2QkZBMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzY2J1MUZ0Y01DakhCdW81aENvOURQQ2FIWGRYMVdjUjFYV3pWcHVuUlYzLzEv
MzIzODMwMzQzYTM3NjEzMzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzMzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR6MDANBgkqhkiG9w0BAQsFAAOCAQEAUWOh6PEW
YVjRKT2U8UMgs2IQ21Y6Ncbtay4Ek6Glxys4PWNnWGFW0WieOL1ByW/7pf7yHiSc
ja2uyVkOpdMcOsdcsrRZHKgwKPDZwONGMR1h6aA17YsNBGQ7FaHMe6wN+0VsfCG8
YqDqKBI4BOruyqwieEM5yz0S63G48ndjyO3Pem9jJvC/AL5AmzSflFtd7fVSto0Z
nj68ov7erqHxyhbZZw95l5W7YfGnOiTY09VXBI2ygPDnh/5JxCPooJ+TJJCH2AgO
KdaaacpAGltcjsPDjnK7qAyyhoZnA4E6vBfhkKGSEZQbn3fp9J2g9GIRiHsuABu9
BM12UN5YRCHqGw==
-----END CERTIFICATE-----