Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa
File:                     323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa (raw, json)
Hash identifier:          /DAMPUmUqEETKBUoyewsdglX5Dyk5by6X+1DL+KKtHw=
Subject key identifier:   C8:C8:6B:2D:F6:E7:38:37:A6:F2:F5:60:12:70:B4:56:D1:47:42:2D
Certificate issuer:       /CN=B4A507A3449B35297C2E0851F09576570269B539
Certificate serial:       02A6F1641C3369BF107C97F719DB921BA563268C
Authority key identifier: B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa
Signing time:             Mon 27 May 2024 21:13:16 +0000
ROA not before:           Mon 27 May 2024 21:08:16 +0000
ROA not after:            Mon 26 May 2025 21:13:16 +0000
asID:                     269508
IP address blocks:        2804:65b0:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a6:f1:64:1c:33:69:bf:10:7c:97:f7:19:db:92:1b:a5:63:26:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A507A3449B35297C2E0851F09576570269B539
        Validity
            Not Before: May 27 21:08:16 2024 GMT
            Not After : May 26 21:13:16 2025 GMT
        Subject: CN=C8C86B2DF6E73837A6F2F5601270B456D147422D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:d2:e1:d5:bc:56:8d:ce:4c:a4:0f:89:0e:
                    06:f6:da:47:5c:63:76:cb:01:d9:0a:8e:4c:e9:84:
                    f5:8f:5c:0b:05:8e:e5:d7:0f:48:11:62:ca:a5:ed:
                    96:c6:33:84:5a:56:72:fb:54:d0:04:71:60:9a:0d:
                    a5:75:e1:02:ec:e9:71:9e:b5:b3:2b:9a:40:b1:ec:
                    11:9e:53:93:2b:91:bd:7d:8d:6f:02:de:71:bc:08:
                    c8:50:28:51:b9:4c:29:3d:60:13:c1:22:50:5d:ec:
                    d3:5b:99:df:7b:01:62:13:b2:f7:c2:b0:b3:7c:73:
                    f0:69:d2:26:2b:b1:ba:65:b3:a0:06:8a:ea:38:81:
                    f0:d6:a6:e1:fa:16:52:37:32:78:14:9e:ca:ff:2c:
                    3a:2a:27:62:17:b7:da:63:cd:8e:2f:e1:83:2d:7e:
                    bb:d8:18:c9:c3:ac:32:41:cc:56:a9:ae:8e:2f:a3:
                    c7:b2:11:cb:24:27:7a:67:db:f1:89:35:a1:45:f9:
                    ae:fd:8f:e1:06:45:44:3a:20:6b:fe:b9:48:a6:34:
                    f3:cb:53:b0:4a:7d:97:61:eb:d4:9e:26:53:d2:9a:
                    c4:07:82:2a:4b:a6:05:fc:b9:4d:f4:7d:1e:0c:8e:
                    09:f9:26:b9:3e:09:e1:07:5d:48:9c:1e:33:54:4b:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C8:6B:2D:F6:E7:38:37:A6:F2:F5:60:12:70:B4:56:D1:47:42:2D
            X509v3 Authority Key Identifier:
                keyid:B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65b0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:89:7f:75:f4:12:d2:52:dc:c4:bf:bf:32:1e:8b:16:52:40:
         b2:62:62:59:ba:cd:1c:3c:24:99:79:c9:7c:62:7a:6b:9d:1c:
         93:4e:39:40:e9:ff:ac:57:64:56:7a:eb:30:65:21:83:f1:53:
         5d:42:62:36:db:06:92:0c:cd:76:5a:99:fd:94:2c:c5:80:0c:
         f9:e9:6f:f8:4e:6d:7e:3d:3e:16:d6:d7:81:b8:a2:25:82:dc:
         e1:31:ae:56:1d:0d:c1:b2:6d:4b:7e:93:74:d3:f5:36:3d:fc:
         cf:34:4e:5e:e6:7a:0a:34:3f:8f:40:94:23:ec:5a:6d:35:fe:
         0f:00:b7:56:98:c8:b1:2b:42:64:6e:87:b7:6b:23:3c:de:03:
         23:ed:d7:03:66:3a:5d:87:64:93:99:3c:1c:ab:06:82:67:97:
         5c:36:f6:89:58:09:e0:c9:06:5b:fe:ed:ed:4e:b4:cd:51:96:
         06:07:c1:7d:e7:d9:f2:40:e2:b6:28:ad:fa:8a:0e:90:8e:7f:
         07:41:cd:fd:22:e8:02:06:3b:16:c1:7c:5b:47:c5:52:a6:84:
         ff:2c:92:82:00:5d:b1:83:20:c7:64:1d:91:1f:52:4c:68:8e:
         e1:5f:be:1b:0f:00:f6:68:66:a1:2d:56:00:a6:65:b5:b1:5c:
         52:21:b8:19
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAqbxZBwzab8QfJf3GduSG6VjJowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRBNTA3QTM0NDlCMzUyOTdDMkUwODUxRjA5NTc2NTcw
MjY5QjUzOTAeFw0yNDA1MjcyMTA4MTZaFw0yNTA1MjYyMTEzMTZaMDMxMTAvBgNV
BAMTKEM4Qzg2QjJERjZFNzM4MzdBNkYyRjU2MDEyNzBCNDU2RDE0NzQyMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITNLh1bxWjc5MpA+JDgb22kdc
Y3bLAdkKjkzphPWPXAsFjuXXD0gRYsql7ZbGM4RaVnL7VNAEcWCaDaV14QLs6XGe
tbMrmkCx7BGeU5Mrkb19jW8C3nG8CMhQKFG5TCk9YBPBIlBd7NNbmd97AWITsvfC
sLN8c/Bp0iYrsbpls6AGiuo4gfDWpuH6FlI3MngUnsr/LDoqJ2IXt9pjzY4v4YMt
frvYGMnDrDJBzFapro4vo8eyEcskJ3pn2/GJNaFF+a79j+EGRUQ6IGv+uUimNPPL
U7BKfZdh69SeJlPSmsQHgipLpgX8uU30fR4Mjgn5Jrk+CeEHXUicHjNUSxt3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUyMhrLfbnODem8vVgEnC0VtFHQi0wHwYDVR0j
BBgwFoAUtKUHo0SbNSl8LghR8JV2VwJptTkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkU1elFVTWp1dzVXTFg3NUZLVGZOcTloOGtxZlpyNXo3RVFtZTdtYTg5
RGMvMC9CNEE1MDdBMzQ0OUIzNTI5N0MyRTA4NTFGMDk1NzY1NzAyNjlCNTM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0QTUwN0EzNDQ5QjM1Mjk3
QzJFMDg1MUYwOTU3NjU3MDI2OUI1MzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZFNXpRVU1qdXc1V0xYNzVGS1RmTnE5aDhrcWZacjV6N0VRbWU3bWE4OURjLzAv
MzIzODMwMzQzYTM2MzU2MjMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZbCAMA0GCSqGSIb3DQEBCwUA
A4IBAQBpiX919BLSUtzEv78yHosWUkCyYmJZus0cPCSZecl8YnprnRyTTjlA6f+s
V2RWeuswZSGD8VNdQmI22waSDM12Wpn9lCzFgAz56W/4Tm1+PT4W1teBuKIlgtzh
Ma5WHQ3Bsm1LfpN00/U2PfzPNE5e5noKND+PQJQj7FptNf4PALdWmMixK0Jkboe3
ayM83gMj7dcDZjpdh2STmTwcqwaCZ5dcNvaJWAngyQZb/u3tTrTNUZYGB8F959ny
QOK2KK36ig6Qjn8HQc39IugCBjsWwXxbR8VSpoT/LJKCAF2xgyDHZB2RH1JMaI7h
X74bDwD2aGahLVYApmW1sVxSIbgZ
-----END CERTIFICATE-----