Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33322d3332203d3e203532393434.roa
File:                     323830343a6232383a3a2f33322d3332203d3e203532393434.roa (raw, json)
Hash identifier:          xMXyksPj423DyL75dUUzHYiSU/hG3+IfkcRRBvu0HU8=
Subject key identifier:   06:8B:E4:47:38:5C:50:1E:34:BB:34:0D:A9:0F:C8:15:F1:4F:37:8E
Certificate issuer:       /CN=1733084816F181DADE66CFF006E96DDF853D8218
Certificate serial:       4F1FB038D60099200A3CAEE9FD41329F872C055F
Authority key identifier: 17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33322d3332203d3e203532393434.roa
Signing time:             Wed 04 Sep 2024 22:45:45 +0000
ROA not before:           Wed 04 Sep 2024 22:40:45 +0000
ROA not after:            Wed 03 Sep 2025 22:45:45 +0000
asID:                     52944
IP address blocks:        2804:b28::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1f:b0:38:d6:00:99:20:0a:3c:ae:e9:fd:41:32:9f:87:2c:05:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1733084816F181DADE66CFF006E96DDF853D8218
        Validity
            Not Before: Sep  4 22:40:45 2024 GMT
            Not After : Sep  3 22:45:45 2025 GMT
        Subject: CN=068BE447385C501E34BB340DA90FC815F14F378E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:58:d0:0f:56:54:11:5f:78:29:c6:77:a6:
                    14:ab:2d:44:37:75:9d:ca:91:05:54:8c:de:b9:5a:
                    75:a1:86:da:95:46:1f:65:51:a0:fb:b1:47:1e:a0:
                    3c:64:51:16:24:c8:c1:f7:a6:f8:21:c7:a3:63:6a:
                    04:b1:92:b8:6e:b7:72:32:8d:bb:ae:0e:03:af:c4:
                    75:68:e5:f5:93:91:9b:53:10:c3:07:77:bb:72:8f:
                    45:ab:d2:45:40:e7:e4:f7:38:20:31:3b:22:42:b2:
                    1e:40:87:05:c3:3a:2b:9a:6d:f6:3f:11:fe:03:4c:
                    a4:9b:81:19:f0:8f:e7:9e:7f:bc:89:e8:06:07:1e:
                    c5:06:22:b2:b0:6c:b7:d8:69:16:6e:01:02:30:cb:
                    e7:d3:5d:8a:c4:b7:3d:bf:b9:ab:1c:42:1a:5f:d3:
                    7f:5c:35:93:66:eb:f4:d4:18:ed:4d:a4:8f:03:55:
                    b5:8c:43:15:46:5d:15:78:c3:f4:5c:3d:fc:1c:23:
                    93:b9:9f:75:ef:8f:95:bf:e2:c5:d2:c4:ab:ac:c7:
                    19:20:fb:f0:aa:74:8c:f2:74:b4:ca:96:08:6a:96:
                    b3:85:04:93:3e:a2:6e:e9:86:0f:4b:51:8a:8a:46:
                    61:b3:2f:a1:86:05:d8:ad:24:80:c4:70:1f:ba:7c:
                    b4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8B:E4:47:38:5C:50:1E:34:BB:34:0D:A9:0F:C8:15:F1:4F:37:8E
            X509v3 Authority Key Identifier:
                keyid:17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/1733084816F181DADE66CFF006E96DDF853D8218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33322d3332203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b28::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:9e:5d:dd:87:ba:54:47:12:e5:9f:72:f1:62:ca:3e:28:59:
         47:a3:c4:48:00:78:1b:63:81:0a:ae:bd:89:be:0e:be:5c:a3:
         ed:35:fa:fd:49:18:1f:bb:f3:e4:19:6f:1d:f0:8b:99:25:64:
         83:9d:c1:5e:b0:b7:e0:ba:92:0e:d3:7a:93:03:25:80:99:af:
         86:71:6a:52:1b:4d:0e:54:1e:d6:41:0d:33:02:d1:b4:ab:d4:
         2a:5e:6d:ad:ba:a6:21:6a:54:17:39:65:dd:10:ff:d5:ac:c0:
         d5:ed:99:1a:bf:83:5a:3c:33:c9:e5:b6:60:c0:20:e7:95:5c:
         09:c7:c7:ff:60:fd:f7:69:87:93:95:c5:f4:11:ad:92:bb:86:
         fc:59:fa:d2:a4:cd:a2:b6:8b:2b:c4:b0:8c:28:bc:21:a7:e4:
         8c:9b:f6:be:39:d9:0e:73:6f:19:6c:c6:71:39:27:1a:a6:fa:
         c1:3e:ac:fc:fd:c8:2a:8b:b9:c0:84:87:31:e4:9c:a3:d2:cd:
         3c:25:f4:3f:4d:55:88:18:ae:7d:34:7a:40:c1:2e:a0:0e:1a:
         eb:0c:cb:77:b0:15:1c:53:55:f8:66:7e:83:f6:e8:bc:e9:00:
         c7:d7:91:8c:9f:9d:ce:03:c9:08:52:cc:c8:21:b5:45:88:be:
         c8:42:00:42
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUTx+wONYAmSAKPK7p/UEyn4csBV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTczMzA4NDgxNkYxODFEQURFNjZDRkYwMDZFOTZEREY4
NTNEODIxODAeFw0yNDA5MDQyMjQwNDVaFw0yNTA5MDMyMjQ1NDVaMDMxMTAvBgNV
BAMTKDA2OEJFNDQ3Mzg1QzUwMUUzNEJCMzQwREE5MEZDODE1RjE0RjM3OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWJVjQD1ZUEV94KcZ3phSrLUQ3
dZ3KkQVUjN65WnWhhtqVRh9lUaD7sUceoDxkURYkyMH3pvghx6NjagSxkrhut3Iy
jbuuDgOvxHVo5fWTkZtTEMMHd7tyj0Wr0kVA5+T3OCAxOyJCsh5AhwXDOiuabfY/
Ef4DTKSbgRnwj+eef7yJ6AYHHsUGIrKwbLfYaRZuAQIwy+fTXYrEtz2/uascQhpf
039cNZNm6/TUGO1NpI8DVbWMQxVGXRV4w/RcPfwcI5O5n3Xvj5W/4sXSxKusxxkg
+/CqdIzydLTKlghqlrOFBJM+om7phg9LUYqKRmGzL6GGBditJIDEcB+6fLS7AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUBovkRzhcUB40uzQNqQ/IFfFPN44wHwYDVR0j
BBgwFoAUFzMISBbxgdreZs/wBult34U9ghgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZ1TnNhTGphYTJYVGJRa3JiWmlnam5WeXM3UVpkQVRNUGlHamlyQVNX
ZmovMC8xNzMzMDg0ODE2RjE4MURBREU2NkNGRjAwNkU5NkRERjg1M0Q4MjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3MzMwODQ4MTZGMTgxREFE
RTY2Q0ZGMDA2RTk2RERGODUzRDgyMTguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWdU5zYUxqYWEyWFRiUWtyYlppZ2puVnlzN1FaZEFUTVBpR2ppckFTV2ZqLzAv
MzIzODMwMzQzYTYyMzIzODNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzOTM0
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAsoMA0GCSqGSIb3DQEBCwUAA4IBAQALnl3dh7pURxLl
n3LxYso+KFlHo8RIAHgbY4EKrr2Jvg6+XKPtNfr9SRgfu/PkGW8d8IuZJWSDncFe
sLfgupIO03qTAyWAma+GcWpSG00OVB7WQQ0zAtG0q9QqXm2tuqYhalQXOWXdEP/V
rMDV7Zkav4NaPDPJ5bZgwCDnlVwJx8f/YP33aYeTlcX0Ea2Su4b8WfrSpM2itosr
xLCMKLwhp+SMm/a+OdkOc28ZbMZxOScapvrBPqz8/cgqi7nAhIcx5Jyj0s08JfQ/
TVWIGK59NHpAwS6gDhrrDMt3sBUcU1X4Zn6D9ui86QDH15GMn53OA8kIUszIIbVF
iL7IQgBC
-----END CERTIFICATE-----