Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/1/323830343a323866303a3a2f33322d3332203d3e20323633393838.roa
File:                     323830343a323866303a3a2f33322d3332203d3e20323633393838.roa (raw, json)
Hash identifier:          6EucWMTvSSLBuflRtG+RBe4fhcWlC2EUhzTmOumdytg=
Subject key identifier:   A0:65:BA:0E:EB:CA:B4:7B:39:6B:9B:C8:34:8E:C9:DC:B7:43:A4:D2
Certificate issuer:       /CN=342948E5982CDA2084F137CA767229C586B23DE6
Certificate serial:       411658D0C77C6F77540881A7E091818A149806F8
Authority key identifier: 34:29:48:E5:98:2C:DA:20:84:F1:37:CA:76:72:29:C5:86:B2:3D:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342948E5982CDA2084F137CA767229C586B23DE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/1/323830343a323866303a3a2f33322d3332203d3e20323633393838.roa
Signing time:             Thu 04 Apr 2024 13:55:10 +0000
ROA not before:           Thu 04 Apr 2024 13:50:10 +0000
ROA not after:            Thu 03 Apr 2025 13:55:10 +0000
asID:                     263988
IP address blocks:        2804:28f0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:16:58:d0:c7:7c:6f:77:54:08:81:a7:e0:91:81:8a:14:98:06:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342948E5982CDA2084F137CA767229C586B23DE6
        Validity
            Not Before: Apr  4 13:50:10 2024 GMT
            Not After : Apr  3 13:55:10 2025 GMT
        Subject: CN=A065BA0EEBCAB47B396B9BC8348EC9DCB743A4D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:19:db:3a:79:b0:40:1c:15:07:05:ef:5d:4a:
                    a2:9f:be:88:df:d1:ee:20:59:ef:1e:57:bf:f5:cf:
                    da:d9:93:38:8b:69:9b:0f:d2:01:c1:2b:0a:35:18:
                    b8:bd:fc:c2:8e:a9:7f:63:30:43:8a:33:3d:e4:f1:
                    7e:c5:93:f8:72:f2:72:82:ec:8a:de:aa:7d:4c:aa:
                    5b:b5:3c:f0:dd:72:76:bf:38:53:75:c7:89:02:98:
                    06:1c:24:bb:71:35:7a:be:ef:e1:07:46:fa:df:c4:
                    a4:29:ea:a5:bb:57:8c:6a:e4:0e:1c:8c:b6:10:c1:
                    86:dd:8d:76:cf:c6:b6:b7:08:e3:ff:e5:0b:d7:47:
                    d4:97:a3:c4:72:18:ed:0e:03:84:27:40:bd:88:8d:
                    46:e0:31:55:1c:2a:3b:3f:57:84:34:e1:e1:6e:9c:
                    94:6a:98:d1:46:73:9a:09:af:81:ff:0a:95:b9:7b:
                    a6:a4:3e:83:2d:0e:ca:2a:4b:6b:2c:35:db:c3:1c:
                    d9:b8:a4:b1:3a:1c:2e:24:86:33:8a:e4:40:bf:12:
                    59:ca:64:a0:3c:27:78:a7:71:16:06:48:28:21:2e:
                    47:51:bf:28:77:c6:b9:34:c8:1c:95:b6:2e:e2:57:
                    ad:ec:ca:53:ce:8f:85:c5:f7:27:58:86:6e:dc:77:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:65:BA:0E:EB:CA:B4:7B:39:6B:9B:C8:34:8E:C9:DC:B7:43:A4:D2
            X509v3 Authority Key Identifier:
                keyid:34:29:48:E5:98:2C:DA:20:84:F1:37:CA:76:72:29:C5:86:B2:3D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/1/342948E5982CDA2084F137CA767229C586B23DE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342948E5982CDA2084F137CA767229C586B23DE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/1/323830343a323866303a3a2f33322d3332203d3e20323633393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:00:0f:d4:74:a3:9a:1c:1e:3e:8d:ec:fe:7b:e1:d0:d4:
         ec:5f:26:ba:74:20:13:a4:47:2a:70:4f:30:cf:50:ba:87:e3:
         e9:35:a8:c3:d8:25:ae:ed:ee:0e:1a:dc:3f:66:46:67:27:0c:
         d2:0d:96:40:19:43:cf:65:2b:05:d6:0f:eb:0e:72:b1:46:49:
         2a:ae:54:fe:50:be:c9:75:fb:85:0a:11:ce:ce:c0:9c:62:18:
         12:84:64:4d:c3:a5:21:88:cd:2f:a8:19:de:73:e5:86:e9:53:
         d3:26:2a:09:84:8b:c1:33:9d:35:3a:c4:83:1f:1b:76:01:e7:
         98:da:d0:33:de:52:9b:da:29:e0:5c:1b:0e:d4:6e:e4:97:52:
         9c:8d:42:f1:ed:6a:2f:e7:18:39:b9:83:32:80:4e:56:cc:40:
         c1:5c:5a:95:4e:c0:f3:be:0c:3e:7a:0d:cf:56:60:1f:6d:28:
         b6:de:56:26:76:06:b4:d1:79:00:fe:ec:1a:78:f1:b6:53:80:
         3d:0f:53:83:be:72:84:e1:b6:d4:2a:81:a5:af:2a:9d:c9:68:
         81:78:3c:53:10:05:75:5f:6d:9d:7c:4d:8f:92:89:f7:68:48:
         f5:3c:fa:0b:24:99:75:66:a2:46:99:ef:f6:6e:0a:38:5d:03:
         33:d4:14:c5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQRZY0Md8b3dUCIGn4JGBihSYBvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQyOTQ4RTU5ODJDREEyMDg0RjEzN0NBNzY3MjI5QzU4
NkIyM0RFNjAeFw0yNDA0MDQxMzUwMTBaFw0yNTA0MDMxMzU1MTBaMDMxMTAvBgNV
BAMTKEEwNjVCQTBFRUJDQUI0N0IzOTZCOUJDODM0OEVDOURDQjc0M0E0RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgGds6ebBAHBUHBe9dSqKfvojf
0e4gWe8eV7/1z9rZkziLaZsP0gHBKwo1GLi9/MKOqX9jMEOKMz3k8X7Fk/hy8nKC
7Ireqn1Mqlu1PPDdcna/OFN1x4kCmAYcJLtxNXq+7+EHRvrfxKQp6qW7V4xq5A4c
jLYQwYbdjXbPxra3COP/5QvXR9SXo8RyGO0OA4QnQL2IjUbgMVUcKjs/V4Q04eFu
nJRqmNFGc5oJr4H/CpW5e6akPoMtDsoqS2ssNdvDHNm4pLE6HC4khjOK5EC/ElnK
ZKA8J3incRYGSCghLkdRvyh3xrk0yByVti7iV63sylPOj4XF9ydYhm7cdwoLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUoGW6DuvKtHs5a5vINI7J3LdDpNIwHwYDVR0j
BBgwFoAUNClI5Zgs2iCE8TfKdnIpxYayPeYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk5Dd3FZUEhjQVVFUGVhbW9TN205WEMzVUppOUxrdHU1djlReXdYRnRI
QXMvMS8zNDI5NDhFNTk4MkNEQTIwODRGMTM3Q0E3NjcyMjlDNTg2QjIzREU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0Mjk0OEU1OTgyQ0RBMjA4
NEYxMzdDQTc2NzIyOUM1ODZCMjNERTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZOQ3dxWVBIY0FVRVBlYW1vUzdtOVhDM1VKaTlMa3R1NXY5UXl3WEZ0SEFzLzEv
MzIzODMwMzQzYTMyMzg2NjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzkzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQo8DANBgkqhkiG9w0BAQsFAAOCAQEAmF0AD9R0
o5ocHj6N7P574dDU7F8munQgE6RHKnBPMM9Quofj6TWow9glru3uDhrcP2ZGZycM
0g2WQBlDz2UrBdYP6w5ysUZJKq5U/lC+yXX7hQoRzs7AnGIYEoRkTcOlIYjNL6gZ
3nPlhulT0yYqCYSLwTOdNTrEgx8bdgHnmNrQM95Sm9op4FwbDtRu5JdSnI1C8e1q
L+cYObmDMoBOVsxAwVxalU7A874MPnoNz1ZgH20ott5WJnYGtNF5AP7sGnjxtlOA
PQ9Tg75yhOG21CqBpa8qnclogXg8UxAFdV9tnXxNj5KJ92hI9Tz6CySZdWaiRpnv
9m4KOF0DM9QUxQ==
-----END CERTIFICATE-----