Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/323830343a343266383a3a2f33322d3334203d3e20323637353430.roa
File:                     323830343a343266383a3a2f33322d3334203d3e20323637353430.roa (raw, json)
Hash identifier:          dt7+MEBDaLKqvTFviS/qhBEkgdpH4qxC7qgaIKC7Gbk=
Subject key identifier:   3C:85:DE:43:0D:48:0F:F7:DF:16:29:90:63:9A:0B:A8:26:E8:6B:C0
Certificate issuer:       /CN=0BA72FE6026E6A9D29C970C9BA50C497455A4CD1
Certificate serial:       295206C80A5029557BE6AD5BEEF9FBC4A56813B1
Authority key identifier: 0B:A7:2F:E6:02:6E:6A:9D:29:C9:70:C9:BA:50:C4:97:45:5A:4C:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/323830343a343266383a3a2f33322d3334203d3e20323637353430.roa
Signing time:             Thu 04 Apr 2024 16:33:53 +0000
ROA not before:           Thu 04 Apr 2024 16:28:53 +0000
ROA not after:            Thu 03 Apr 2025 16:33:53 +0000
asID:                     267540
IP address blocks:        2804:42f8::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:52:06:c8:0a:50:29:55:7b:e6:ad:5b:ee:f9:fb:c4:a5:68:13:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BA72FE6026E6A9D29C970C9BA50C497455A4CD1
        Validity
            Not Before: Apr  4 16:28:53 2024 GMT
            Not After : Apr  3 16:33:53 2025 GMT
        Subject: CN=3C85DE430D480FF7DF162990639A0BA826E86BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:47:af:68:03:e0:2d:51:2c:4f:8b:85:6f:
                    26:83:c3:45:c2:f8:52:b2:8c:36:ef:d8:20:c5:0e:
                    2e:ca:64:1d:32:8d:52:08:ed:20:fa:c8:6f:42:b8:
                    07:75:3f:79:4c:df:01:fc:70:d8:6e:c9:a8:cc:ea:
                    ed:36:e7:05:14:63:ec:06:11:fb:22:de:06:4c:71:
                    70:1a:93:ae:b0:28:fc:6d:9b:08:76:a1:f5:d6:de:
                    36:18:2d:63:56:fc:4a:c3:6f:e8:15:6d:09:68:cf:
                    ce:ea:06:b8:b3:13:38:7a:24:5c:ab:eb:d1:f7:0a:
                    12:c6:d5:4f:e8:71:ff:4c:a9:c4:c0:2d:89:d1:e9:
                    c2:fe:ac:23:6f:88:c7:20:0a:3a:16:4c:10:25:98:
                    25:df:53:62:d9:00:a2:33:c1:86:37:a9:4d:0a:9d:
                    7f:86:10:a2:a7:c2:8f:2f:43:d1:1c:89:bc:a3:da:
                    2f:e1:3a:9d:b3:6c:10:13:cc:26:81:f5:c8:20:07:
                    6c:0c:85:22:59:0e:e3:f7:39:4e:68:f0:3d:82:29:
                    2b:3b:27:bc:0f:74:6c:b2:10:8f:de:53:20:7c:c5:
                    06:c3:6d:fb:ea:6a:9a:4a:01:98:22:43:36:19:b5:
                    86:82:b6:6b:7b:eb:99:6f:72:c5:46:61:43:f3:7d:
                    2e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:85:DE:43:0D:48:0F:F7:DF:16:29:90:63:9A:0B:A8:26:E8:6B:C0
            X509v3 Authority Key Identifier:
                keyid:0B:A7:2F:E6:02:6E:6A:9D:29:C9:70:C9:BA:50:C4:97:45:5A:4C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/323830343a343266383a3a2f33322d3334203d3e20323637353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:28:9d:85:16:3c:94:59:61:80:ab:d4:78:59:d9:98:79:88:
         bc:ff:7a:cb:cf:40:97:cc:2a:e4:8d:5c:8a:90:f5:d9:f1:79:
         bf:4d:88:02:64:6d:89:42:c0:a3:23:ab:27:2a:80:08:0b:5f:
         24:26:df:fa:8b:29:e6:7e:07:66:7e:25:3b:62:ce:56:ea:57:
         e7:7d:c4:e1:12:5e:0a:0d:f7:db:d2:e2:d9:c3:3a:30:e7:23:
         ea:16:39:23:3e:db:74:f8:29:10:16:79:58:b8:74:3a:41:e4:
         fb:c0:ab:3c:63:05:64:3c:5d:da:83:de:b4:25:aa:8b:6e:23:
         f4:a7:ff:17:cd:16:af:17:7d:c2:b4:76:41:cb:4b:36:1d:3c:
         60:fc:39:6d:b7:9f:b7:5b:90:f4:03:98:97:55:c1:50:b6:3f:
         85:93:0e:8d:69:f0:a5:fc:ca:9d:bc:26:87:9e:ff:a9:f1:f2:
         35:d4:25:1b:ae:fd:01:fa:c3:a1:dc:67:dd:68:1f:c4:81:b8:
         52:11:8e:e0:5c:08:56:12:2f:bb:47:ce:69:53:28:04:87:6c:
         52:de:00:2d:f8:90:53:1a:a7:ef:7d:98:e4:a6:9f:a3:4b:87:
         c4:a9:2b:d2:63:ae:f9:57:21:c9:2d:69:ba:ae:56:e3:1f:ad:
         df:ed:64:5b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKVIGyApQKVV75q1b7vn7xKVoE7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJBNzJGRTYwMjZFNkE5RDI5Qzk3MEM5QkE1MEM0OTc0
NTVBNENEMTAeFw0yNDA0MDQxNjI4NTNaFw0yNTA0MDMxNjMzNTNaMDMxMTAvBgNV
BAMTKDNDODVERTQzMEQ0ODBGRjdERjE2Mjk5MDYzOUEwQkE4MjZFODZCQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPN0evaAPgLVEsT4uFbyaDw0XC
+FKyjDbv2CDFDi7KZB0yjVII7SD6yG9CuAd1P3lM3wH8cNhuyajM6u025wUUY+wG
Efsi3gZMcXAak66wKPxtmwh2ofXW3jYYLWNW/ErDb+gVbQloz87qBrizEzh6JFyr
69H3ChLG1U/ocf9MqcTALYnR6cL+rCNviMcgCjoWTBAlmCXfU2LZAKIzwYY3qU0K
nX+GEKKnwo8vQ9Ecibyj2i/hOp2zbBATzCaB9cggB2wMhSJZDuP3OU5o8D2CKSs7
J7wPdGyyEI/eUyB8xQbDbfvqappKAZgiQzYZtYaCtmt765lvcsVGYUPzfS5hAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPIXeQw1ID/ffFimQY5oLqCboa8AwHwYDVR0j
BBgwFoAUC6cv5gJuap0pyXDJulDEl0VaTNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRCNzZ4Z0c0WW1lOTFnR3JNTHNyWU1wUGpaZ0ZSYldRUUpucVVnY1hq
UkwvMS8wQkE3MkZFNjAyNkU2QTlEMjlDOTcwQzlCQTUwQzQ5NzQ1NUE0Q0QxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCQTcyRkU2MDI2RTZBOUQy
OUM5NzBDOUJBNTBDNDk3NDU1QTRDRDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0Qjc2eGdHNFltZTkxZ0dyTUxzcllNcFBqWmdGUmJXUVFKbnFVZ2NYalJMLzEv
MzIzODMwMzQzYTM0MzI2NjM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM3
MzUzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARC+DANBgkqhkiG9w0BAQsFAAOCAQEAayidhRY8
lFlhgKvUeFnZmHmIvP96y89Al8wq5I1cipD12fF5v02IAmRtiULAoyOrJyqACAtf
JCbf+osp5n4HZn4lO2LOVupX533E4RJeCg3329Li2cM6MOcj6hY5Iz7bdPgpEBZ5
WLh0OkHk+8CrPGMFZDxd2oPetCWqi24j9Kf/F80Wrxd9wrR2QctLNh08YPw5bbef
t1uQ9AOYl1XBULY/hZMOjWnwpfzKnbwmh57/qfHyNdQlG679AfrDodxn3WgfxIG4
UhGO4FwIVhIvu0fOaVMoBIdsUt4ALfiQUxqn732Y5Kafo0uHxKkr0mOu+VchyS1p
uq5W4x+t3+1kWw==
-----END CERTIFICATE-----