Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33322d3332203d3e20323733373238.roa
File:                     323830343a386235633a3a2f33322d3332203d3e20323733373238.roa (raw, json)
Hash identifier:          SLvSL4aD/QIwmXkj2Odb59/Zkd6E8ziVsH3R32YuQCw=
Subject key identifier:   B7:20:D3:A5:D4:1F:F5:BA:F2:97:BB:17:F2:FA:6A:5B:E0:AC:75:1D
Certificate issuer:       /CN=976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5
Certificate serial:       541D645EA870144BFD38E373492C5EDFD448E652
Authority key identifier: 97:6D:8A:1B:E7:F7:63:99:85:F6:A8:FA:E6:D3:E9:38:76:46:F1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33322d3332203d3e20323733373238.roa
Signing time:             Tue 29 Oct 2024 15:26:23 +0000
ROA not before:           Tue 29 Oct 2024 15:21:23 +0000
ROA not after:            Tue 28 Oct 2025 15:26:23 +0000
asID:                     273728
IP address blocks:        2804:8b5c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1d:64:5e:a8:70:14:4b:fd:38:e3:73:49:2c:5e:df:d4:48:e6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5
        Validity
            Not Before: Oct 29 15:21:23 2024 GMT
            Not After : Oct 28 15:26:23 2025 GMT
        Subject: CN=B720D3A5D41FF5BAF297BB17F2FA6A5BE0AC751D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:9c:3c:95:04:52:53:8e:19:d8:48:9b:78:
                    37:66:44:04:69:5b:95:3a:26:ce:68:46:de:14:57:
                    9a:45:76:13:11:fe:a6:5b:bb:30:d1:71:2a:69:4a:
                    a9:39:04:da:b9:e7:6e:8c:cd:55:e4:51:9a:9c:7e:
                    46:dd:22:93:17:3a:0b:ac:a9:8d:3e:19:2f:bf:af:
                    67:ae:86:30:0e:22:16:fd:02:15:cc:0f:49:68:8d:
                    43:51:07:1e:71:0b:4d:e5:69:82:d5:3c:9a:ec:cd:
                    24:c5:a2:08:2d:84:16:44:3c:42:9a:56:80:db:69:
                    ae:8e:19:ed:f6:6e:f0:cc:60:1f:72:97:b9:a5:5d:
                    5a:f1:cf:9e:68:be:fe:6d:78:1b:6f:04:9b:09:34:
                    e0:22:2f:d9:0b:11:48:59:25:cd:b5:77:9b:84:af:
                    45:5f:58:a7:fb:73:00:9e:24:04:f3:0b:c3:8b:51:
                    33:19:e0:71:a5:53:f3:40:50:45:02:46:6e:a3:30:
                    ea:c9:f0:b9:af:86:17:d8:e2:b9:0f:e7:72:fb:4e:
                    2e:09:07:01:39:5c:7a:69:bf:b9:03:2e:6a:3d:be:
                    aa:8a:d0:1b:9a:08:ec:ea:19:f4:c0:ef:b1:03:03:
                    af:65:7d:d1:06:84:f2:73:ee:9b:ab:bc:9a:5d:51:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:20:D3:A5:D4:1F:F5:BA:F2:97:BB:17:F2:FA:6A:5B:E0:AC:75:1D
            X509v3 Authority Key Identifier:
                keyid:97:6D:8A:1B:E7:F7:63:99:85:F6:A8:FA:E6:D3:E9:38:76:46:F1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33322d3332203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:66:49:70:0c:38:1f:48:a4:be:39:93:7a:b7:54:14:73:f9:
         c2:3c:95:db:9e:e5:37:ef:b2:32:74:72:ee:20:e9:03:58:31:
         b8:af:36:90:1a:d5:d6:99:e3:8f:d9:1e:3e:72:a9:b6:14:e8:
         4f:1d:23:ae:11:f6:79:8f:fb:a4:86:76:ea:c5:c4:9d:19:e4:
         62:cf:e6:05:0e:fa:3a:f3:96:10:de:e0:19:14:3d:6d:1e:86:
         75:6e:29:59:da:b9:5b:f2:4b:b1:10:e4:65:5f:3f:ab:91:9d:
         3b:92:36:55:09:a1:94:23:ba:83:94:d6:c4:7e:33:e3:3f:5d:
         73:61:6a:24:8c:01:68:20:5d:49:57:be:50:4e:c2:67:19:a0:
         bf:8d:c8:04:7f:64:4e:a0:9e:a5:89:ef:2f:71:41:05:33:d1:
         8b:3f:40:de:b9:ca:82:53:c6:7e:7f:56:cf:68:85:30:cf:67:
         85:09:03:e0:a8:79:f6:fc:71:c8:02:94:b5:ff:30:3a:20:7f:
         c1:f9:a2:fd:3b:1d:14:45:d9:0d:17:57:63:79:1e:06:7a:f3:
         01:d7:e3:8c:a2:e8:59:3c:94:fa:0b:2e:80:87:06:32:13:cb:
         07:df:13:03:e3:ee:d7:55:25:5f:12:01:96:e2:7d:48:ac:9d:
         9f:fd:75:80
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVB1kXqhwFEv9OONzSSxe39RI5lIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc2RDhBMUJFN0Y3NjM5OTg1RjZBOEZBRTZEM0U5Mzg3
NjQ2RjFBNTAeFw0yNDEwMjkxNTIxMjNaFw0yNTEwMjgxNTI2MjNaMDMxMTAvBgNV
BAMTKEI3MjBEM0E1RDQxRkY1QkFGMjk3QkIxN0YyRkE2QTVCRTBBQzc1MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTc5w8lQRSU44Z2EibeDdmRARp
W5U6Js5oRt4UV5pFdhMR/qZbuzDRcSppSqk5BNq5526MzVXkUZqcfkbdIpMXOgus
qY0+GS+/r2euhjAOIhb9AhXMD0lojUNRBx5xC03laYLVPJrszSTFoggthBZEPEKa
VoDbaa6OGe32bvDMYB9yl7mlXVrxz55ovv5teBtvBJsJNOAiL9kLEUhZJc21d5uE
r0VfWKf7cwCeJATzC8OLUTMZ4HGlU/NAUEUCRm6jMOrJ8LmvhhfY4rkP53L7Ti4J
BwE5XHppv7kDLmo9vqqK0BuaCOzqGfTA77EDA69lfdEGhPJz7purvJpdUR+dAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtyDTpdQf9bryl7sX8vpqW+CsdR0wHwYDVR0j
BBgwFoAUl22KG+f3Y5mF9qj65tPpOHZG8aUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR
Wm8vMC85NzZEOEExQkU3Rjc2Mzk5ODVGNkE4RkFFNkQzRTkzODc2NDZGMUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3NkQ4QTFCRTdGNzYzOTk4
NUY2QThGQUU2RDNFOTM4NzY0NkYxQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzAv
MzIzODMwMzQzYTM4NjIzNTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzczMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASLXDANBgkqhkiG9w0BAQsFAAOCAQEAL2ZJcAw4
H0ikvjmTerdUFHP5wjyV257lN++yMnRy7iDpA1gxuK82kBrV1pnjj9kePnKpthTo
Tx0jrhH2eY/7pIZ26sXEnRnkYs/mBQ76OvOWEN7gGRQ9bR6GdW4pWdq5W/JLsRDk
ZV8/q5GdO5I2VQmhlCO6g5TWxH4z4z9dc2FqJIwBaCBdSVe+UE7CZxmgv43IBH9k
TqCepYnvL3FBBTPRiz9A3rnKglPGfn9Wz2iFMM9nhQkD4Kh59vxxyAKUtf8wOiB/
wfmi/TsdFEXZDRdXY3keBnrzAdfjjKLoWTyU+gsugIcGMhPLB98TA+Pu11UlXxIB
luJ9SKydn/11gA==
-----END CERTIFICATE-----