Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/1/323830343a356261343a3a2f34382d3438203d3e20323638383630.roa
File:                     323830343a356261343a3a2f34382d3438203d3e20323638383630.roa (raw, json)
Hash identifier:          N+skIIOwOkPgGtmWNj28jYuX0lVutFBUMkItrub1ygY=
Subject key identifier:   07:3E:28:7A:C4:32:9C:94:1C:6A:78:86:D2:96:4A:74:3E:9D:90:05
Certificate issuer:       /CN=1CD763408DADC1A60111846459A04E70929F8FE8
Certificate serial:       383CBD391EC5D31292F33668BCB83A64DB3A66C3
Authority key identifier: 1C:D7:63:40:8D:AD:C1:A6:01:11:84:64:59:A0:4E:70:92:9F:8F:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CD763408DADC1A60111846459A04E70929F8FE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/1/323830343a356261343a3a2f34382d3438203d3e20323638383630.roa
Signing time:             Thu 28 Nov 2024 13:36:22 +0000
ROA not before:           Thu 28 Nov 2024 13:31:22 +0000
ROA not after:            Thu 27 Nov 2025 13:36:22 +0000
asID:                     268860
IP address blocks:        2804:5ba4::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3c:bd:39:1e:c5:d3:12:92:f3:36:68:bc:b8:3a:64:db:3a:66:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CD763408DADC1A60111846459A04E70929F8FE8
        Validity
            Not Before: Nov 28 13:31:22 2024 GMT
            Not After : Nov 27 13:36:22 2025 GMT
        Subject: CN=073E287AC4329C941C6A7886D2964A743E9D9005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:1f:d4:92:22:d0:ac:e4:f0:95:bc:5b:21:
                    4f:f1:27:eb:02:af:4f:34:70:8a:4e:e7:77:60:9c:
                    2b:33:9c:c9:4b:5c:7c:d1:a4:06:b0:18:4c:b7:92:
                    cd:f8:98:fa:f9:80:ac:19:ab:76:7e:a1:87:be:a8:
                    a0:dc:7a:15:47:a7:c4:f2:7f:56:d6:bb:70:00:fa:
                    cd:c5:8a:39:00:04:12:0e:ab:e1:3d:27:36:68:fc:
                    0e:7a:b7:fb:0d:88:71:65:d7:a2:72:f4:ef:5a:c0:
                    c1:2d:58:c4:a5:6e:5c:ac:4f:0c:18:f7:08:16:4d:
                    e2:16:8f:f6:29:dd:3a:3e:b4:00:59:72:f6:9f:42:
                    74:89:e4:c4:a2:c5:8e:96:05:a8:ef:25:26:d3:81:
                    63:b7:79:79:31:a6:4e:a1:1e:bd:b8:b2:fe:2a:be:
                    05:81:13:70:a4:0a:9a:ad:a7:7a:7b:00:69:b3:e8:
                    7f:13:7b:01:42:44:ad:7d:4d:1f:50:0b:90:40:1b:
                    77:57:16:c1:cc:12:7c:f6:30:4f:a1:56:ad:c5:b8:
                    65:36:bf:6f:14:02:69:4c:48:f5:c6:c9:2f:0b:08:
                    60:be:61:7e:38:ec:1f:4b:54:7b:bf:0f:44:77:ec:
                    b8:35:cb:0b:a6:c8:16:38:0e:cf:64:f5:81:2a:0b:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3E:28:7A:C4:32:9C:94:1C:6A:78:86:D2:96:4A:74:3E:9D:90:05
            X509v3 Authority Key Identifier:
                keyid:1C:D7:63:40:8D:AD:C1:A6:01:11:84:64:59:A0:4E:70:92:9F:8F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/1/1CD763408DADC1A60111846459A04E70929F8FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CD763408DADC1A60111846459A04E70929F8FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/1/323830343a356261343a3a2f34382d3438203d3e20323638383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ba4::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:24:d5:d8:08:dd:c4:7d:96:dc:c8:02:c8:7a:0b:4f:68:74:
         a7:20:7c:5d:b5:0a:d8:c5:85:79:f1:6e:2a:be:f3:7c:b3:37:
         d5:78:e0:20:e4:27:5a:12:02:c4:9c:92:fe:74:a2:61:9b:29:
         c7:f4:2e:9d:c7:68:12:df:41:a2:37:fa:d6:5e:d7:58:15:f9:
         a0:b8:6f:14:c4:8b:5a:6e:85:59:c5:df:45:3a:09:47:fd:2a:
         91:2d:6e:cd:12:c8:b2:8e:3f:ca:91:ec:01:6c:bf:5d:52:52:
         25:bb:22:e0:06:6a:5a:3c:d2:65:b7:b4:d9:48:dc:01:f8:44:
         85:0f:1d:9b:ec:36:c4:6e:10:f4:78:60:bd:57:37:18:d5:dd:
         65:0f:84:d7:c9:44:b6:96:17:d5:05:19:48:3a:a1:b3:dd:2e:
         68:a2:e8:21:89:5d:49:10:76:78:4a:de:a5:68:30:37:b7:fb:
         30:1a:22:b1:1d:d7:f1:32:9c:f0:f9:fa:d9:89:a5:1c:4e:aa:
         b2:bf:a4:2e:91:5a:19:ac:dc:20:91:72:ea:8f:2a:19:d9:8c:
         29:57:df:4c:b4:60:96:83:66:b0:2c:09:f3:7f:2c:23:73:5e:
         18:37:f4:17:14:ef:cc:84:1e:67:d9:ed:88:ea:e2:bd:6d:a5:
         12:01:dd:42
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUODy9OR7F0xKS8zZovLg6ZNs6ZsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNENzYzNDA4REFEQzFBNjAxMTE4NDY0NTlBMDRFNzA5
MjlGOEZFODAeFw0yNDExMjgxMzMxMjJaFw0yNTExMjcxMzM2MjJaMDMxMTAvBgNV
BAMTKDA3M0UyODdBQzQzMjlDOTQxQzZBNzg4NkQyOTY0QTc0M0U5RDkwMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzx/UkiLQrOTwlbxbIU/xJ+sC
r080cIpO53dgnCsznMlLXHzRpAawGEy3ks34mPr5gKwZq3Z+oYe+qKDcehVHp8Ty
f1bWu3AA+s3FijkABBIOq+E9JzZo/A56t/sNiHFl16Jy9O9awMEtWMSlblysTwwY
9wgWTeIWj/Yp3To+tABZcvafQnSJ5MSixY6WBajvJSbTgWO3eXkxpk6hHr24sv4q
vgWBE3CkCpqtp3p7AGmz6H8TewFCRK19TR9QC5BAG3dXFsHMEnz2ME+hVq3FuGU2
v28UAmlMSPXGyS8LCGC+YX447B9LVHu/D0R37Lg1ywumyBY4Ds9k9YEqC4RNAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUBz4oesQynJQcaniG0pZKdD6dkAUwHwYDVR0j
BBgwFoAUHNdjQI2twaYBEYRkWaBOcJKfj+gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXl4QUxOWjhYd05QbjU0Z3pEeEZKcEN3aDIyRUtVRUdlY0doZjZ1UkR6
Y1kvMS8xQ0Q3NjM0MDhEQURDMUE2MDExMTg0NjQ1OUEwNEU3MDkyOUY4RkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRDc2MzQwOERBREMxQTYw
MTExODQ2NDU5QTA0RTcwOTI5RjhGRTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F5eEFMTlo4WHdOUG41NGd6RHhGSnBDd2gyMkVLVUVHZWNHaGY2dVJEemNZLzEv
MzIzODMwMzQzYTM1NjI2MTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM4
MzgzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKARbpAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBZJNXY
CN3EfZbcyALIegtPaHSnIHxdtQrYxYV58W4qvvN8szfVeOAg5CdaEgLEnJL+dKJh
mynH9C6dx2gS30GiN/rWXtdYFfmguG8UxItaboVZxd9FOglH/SqRLW7NEsiyjj/K
kewBbL9dUlIluyLgBmpaPNJlt7TZSNwB+ESFDx2b7DbEbhD0eGC9VzcY1d1lD4TX
yUS2lhfVBRlIOqGz3S5ooughiV1JEHZ4St6laDA3t/swGiKxHdfxMpzw+frZiaUc
Tqqyv6QukVoZrNwgkXLqjyoZ2YwpV99MtGCWg2awLAnzfywjc14YN/QXFO/MhB5n
2e2I6uK9baUSAd1C
-----END CERTIFICATE-----