Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/323830343a356634633a3a2f33322d3334203d3e20323639303930.roa
File:                     323830343a356634633a3a2f33322d3334203d3e20323639303930.roa (raw, json)
Hash identifier:          +bn8NTI9TbcEAW/RV/nsLARZ8rOQMQL8ULoQEak/G/0=
Subject key identifier:   14:EA:11:95:99:C3:2B:48:49:0C:68:7E:7A:A3:65:78:9C:76:B0:32
Certificate issuer:       /CN=0965831636AD23443B286222863C94DF79675E48
Certificate serial:       2231A59DCE91AF9410794852D6EA438CC0B5E294
Authority key identifier: 09:65:83:16:36:AD:23:44:3B:28:62:22:86:3C:94:DF:79:67:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0965831636AD23443B286222863C94DF79675E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/323830343a356634633a3a2f33322d3334203d3e20323639303930.roa
Signing time:             Mon 15 Jul 2024 22:37:43 +0000
ROA not before:           Mon 15 Jul 2024 22:32:43 +0000
ROA not after:            Mon 14 Jul 2025 22:37:43 +0000
asID:                     269090
IP address blocks:        2804:5f4c::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:31:a5:9d:ce:91:af:94:10:79:48:52:d6:ea:43:8c:c0:b5:e2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0965831636AD23443B286222863C94DF79675E48
        Validity
            Not Before: Jul 15 22:32:43 2024 GMT
            Not After : Jul 14 22:37:43 2025 GMT
        Subject: CN=14EA119599C32B48490C687E7AA365789C76B032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:37:7e:38:ba:11:bf:09:93:23:09:9a:63:
                    ab:d8:ca:c2:29:92:30:22:d8:5e:5a:3d:5a:1c:f4:
                    13:1b:63:ee:a7:e8:51:53:44:20:81:2b:45:2c:f0:
                    cf:8d:98:73:35:ea:27:94:2e:1d:c6:48:58:b0:b3:
                    77:f2:96:0e:39:26:fd:56:be:8f:50:42:40:eb:4f:
                    73:29:e5:f5:9a:13:c5:d6:b8:f0:b5:e7:3e:f9:7f:
                    07:93:d7:49:ed:a3:61:21:25:c7:ce:4d:bd:67:49:
                    fc:9c:5c:f4:eb:6d:3b:4d:ee:26:91:4d:35:c2:03:
                    bb:d3:4e:69:17:60:31:ba:e6:20:ba:fe:75:db:1f:
                    fa:e1:a2:59:fb:85:50:1e:86:33:b7:60:87:13:4d:
                    c0:9b:5b:f0:87:18:46:01:13:24:95:ec:0b:51:80:
                    3a:2f:2c:17:64:fd:48:b1:11:3e:ab:f0:85:82:66:
                    73:a8:1b:75:05:47:3c:bc:2b:d2:2d:78:cc:d5:d9:
                    b1:c3:02:e6:3e:15:c2:6c:cd:29:79:33:88:87:43:
                    72:47:43:a2:b6:89:79:3e:48:81:b6:68:3e:d9:83:
                    0b:3a:9a:fd:c2:ff:bd:15:6f:5d:b0:e6:bf:04:0b:
                    91:77:f7:3e:22:1d:7e:90:c1:75:6d:05:b9:7e:c0:
                    c7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EA:11:95:99:C3:2B:48:49:0C:68:7E:7A:A3:65:78:9C:76:B0:32
            X509v3 Authority Key Identifier:
                keyid:09:65:83:16:36:AD:23:44:3B:28:62:22:86:3C:94:DF:79:67:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/0965831636AD23443B286222863C94DF79675E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0965831636AD23443B286222863C94DF79675E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/323830343a356634633a3a2f33322d3334203d3e20323639303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:8a:58:c7:9c:1d:85:56:4f:84:a4:e4:74:13:1f:3c:8b:9f:
         84:73:9d:92:44:a3:0f:5c:e0:8a:7a:18:11:37:1c:7e:48:d2:
         7d:cf:8b:02:a8:8e:13:1f:6c:ee:91:f7:a6:03:8a:e4:e0:aa:
         6f:9f:65:19:3c:47:f8:6c:4d:aa:e7:46:2d:51:31:dd:a2:ac:
         dc:24:9a:b8:a1:c0:1c:f6:23:2b:95:1a:3a:8e:8c:2e:99:b0:
         b7:42:c6:6f:d2:fd:06:26:a6:e7:cd:d4:e5:65:e7:b8:52:16:
         8e:05:50:dd:b9:05:41:55:1e:35:4d:35:8b:56:a9:22:b8:b7:
         9f:aa:94:06:5d:f2:14:da:93:d5:ef:7a:d2:50:1c:d5:21:d4:
         eb:35:cf:37:93:c8:22:62:00:8f:98:58:98:44:b9:56:7f:20:
         b0:b9:cb:90:d6:1f:c4:9d:c4:ad:60:41:98:04:af:57:5f:a0:
         df:68:43:3e:92:bf:b0:07:1c:f4:b7:26:4d:98:a2:85:ce:93:
         b4:3f:32:ef:32:37:87:84:62:a7:1e:fd:d3:07:93:17:46:c5:
         b0:3e:6a:f9:81:76:59:86:6b:0b:56:fe:63:88:9e:16:c6:1f:
         60:3b:06:23:73:d8:e3:c4:fe:16:87:6d:26:18:fa:7a:1f:b2:
         4f:d3:30:e4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIjGlnc6Rr5QQeUhS1upDjMC14pQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2NTgzMTYzNkFEMjM0NDNCMjg2MjIyODYzQzk0REY3
OTY3NUU0ODAeFw0yNDA3MTUyMjMyNDNaFw0yNTA3MTQyMjM3NDNaMDMxMTAvBgNV
BAMTKDE0RUExMTk1OTlDMzJCNDg0OTBDNjg3RTdBQTM2NTc4OUM3NkIwMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqLTd+OLoRvwmTIwmaY6vYysIp
kjAi2F5aPVoc9BMbY+6n6FFTRCCBK0Us8M+NmHM16ieULh3GSFiws3fylg45Jv1W
vo9QQkDrT3Mp5fWaE8XWuPC15z75fweT10nto2EhJcfOTb1nSfycXPTrbTtN7iaR
TTXCA7vTTmkXYDG65iC6/nXbH/rholn7hVAehjO3YIcTTcCbW/CHGEYBEySV7AtR
gDovLBdk/UixET6r8IWCZnOoG3UFRzy8K9IteMzV2bHDAuY+FcJszSl5M4iHQ3JH
Q6K2iXk+SIG2aD7Zgws6mv3C/70Vb12w5r8EC5F39z4iHX6QwXVtBbl+wMefAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFOoRlZnDK0hJDGh+eqNleJx2sDIwHwYDVR0j
BBgwFoAUCWWDFjatI0Q7KGIihjyU33lnXkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRLODNyVDcxcmZYak44RHpUN0FLdDhxRlh1dnU1SGVLS2h0emczOVFv
a2UvMC8wOTY1ODMxNjM2QUQyMzQ0M0IyODYyMjI4NjNDOTRERjc5Njc1RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5NjU4MzE2MzZBRDIzNDQz
QjI4NjIyMjg2M0M5NERGNzk2NzVFNDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUSzgzclQ3MXJmWGpOOER6VDdBS3Q4cUZYdXZ1NUhlS0todHpnMzlRb2tlLzAv
MzIzODMwMzQzYTM1NjYzNDYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM5
MzAzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARfTDANBgkqhkiG9w0BAQsFAAOCAQEAj4pYx5wd
hVZPhKTkdBMfPIufhHOdkkSjD1zginoYETccfkjSfc+LAqiOEx9s7pH3pgOK5OCq
b59lGTxH+GxNqudGLVEx3aKs3CSauKHAHPYjK5UaOo6MLpmwt0LGb9L9Biam583U
5WXnuFIWjgVQ3bkFQVUeNU01i1apIri3n6qUBl3yFNqT1e960lAc1SHU6zXPN5PI
ImIAj5hYmES5Vn8gsLnLkNYfxJ3ErWBBmASvV1+g32hDPpK/sAcc9LcmTZiihc6T
tD8y7zI3h4Ripx790weTF0bFsD5q+YF2WYZrC1b+Y4ieFsYfYDsGI3PY48T+Fodt
Jhj6eh+yT9Mw5A==
-----END CERTIFICATE-----