Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/323830343a343631383a3a2f33322d3438203d3e20323636393638.roa
File:                     323830343a343631383a3a2f33322d3438203d3e20323636393638.roa (raw, json)
Hash identifier:          888gBNphb/kprF5kDPQfzpjNfZvkUY2Z3Peka8AmuOk=
Subject key identifier:   F4:B1:1A:AF:95:F3:39:21:F6:03:90:B0:88:CC:D6:40:87:89:CE:B1
Certificate issuer:       /CN=1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3
Certificate serial:       4181BB0AB455FDE94CF7F28E4273741CD53C1E27
Authority key identifier: 13:50:D3:B3:3A:AF:9C:FF:03:71:D2:E5:AB:F7:7D:75:23:CE:B4:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/323830343a343631383a3a2f33322d3438203d3e20323636393638.roa
Signing time:             Wed 15 Nov 2023 20:22:43 +0000
ROA not before:           Wed 15 Nov 2023 20:17:43 +0000
ROA not after:            Wed 13 Nov 2024 20:22:43 +0000
asID:                     266968
IP address blocks:        2804:4618::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:81:bb:0a:b4:55:fd:e9:4c:f7:f2:8e:42:73:74:1c:d5:3c:1e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3
        Validity
            Not Before: Nov 15 20:17:43 2023 GMT
            Not After : Nov 13 20:22:43 2024 GMT
        Subject: CN=F4B11AAF95F33921F60390B088CCD6408789CEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:50:08:cd:03:6f:e0:33:3e:46:43:05:9f:
                    f9:11:a5:35:47:b5:c8:5b:00:75:fa:82:64:64:20:
                    c3:5d:e0:82:25:0e:d9:19:5f:ae:cb:a8:09:92:6d:
                    d7:08:50:e9:34:bf:c1:f6:40:4c:e6:af:5f:b2:56:
                    fa:0b:d6:0a:23:0c:96:1c:96:26:8d:7d:51:91:69:
                    00:fb:c6:f1:db:c9:3a:ad:f1:a8:9c:55:38:5b:2b:
                    b8:af:d6:7a:af:82:bf:33:34:d2:78:73:44:56:ee:
                    f1:ce:88:a1:35:5b:c9:63:ab:3a:33:71:13:74:f6:
                    0f:25:b8:24:42:ff:d7:ea:d6:fd:fd:5a:ad:23:0d:
                    a8:b2:20:32:70:f6:22:f5:0e:2c:61:f7:64:2c:ba:
                    4c:ae:98:90:aa:f7:6f:d6:64:06:8b:6d:45:f4:3f:
                    c9:56:94:2f:a2:92:44:dd:a6:cc:d9:05:f3:cb:37:
                    db:7c:00:09:48:ad:41:45:2b:38:bf:fd:9c:eb:b5:
                    2f:a1:c5:3b:db:14:4f:95:67:7a:d1:b9:4e:f5:5c:
                    c5:05:5c:d7:0e:89:6f:b3:6f:be:e7:81:18:44:7f:
                    ba:0b:17:c3:c8:c8:c0:98:89:25:ea:7a:df:27:6e:
                    c9:f6:0f:87:8c:ae:dd:98:f7:51:9c:53:d7:cd:f8:
                    b3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B1:1A:AF:95:F3:39:21:F6:03:90:B0:88:CC:D6:40:87:89:CE:B1
            X509v3 Authority Key Identifier:
                keyid:13:50:D3:B3:3A:AF:9C:FF:03:71:D2:E5:AB:F7:7D:75:23:CE:B4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/323830343a343631383a3a2f33322d3438203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4618::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:bc:e7:58:7e:6b:e0:43:9b:c9:17:e1:ec:c9:de:cb:47:97:
         df:18:4b:c6:74:60:0b:80:3f:7f:96:49:f5:a4:26:6b:1a:75:
         74:c4:af:6f:9d:bf:e0:22:4c:47:00:9d:73:68:a8:80:ef:d1:
         45:bd:55:2e:79:6a:54:b0:5a:68:9f:bd:4c:36:0c:73:3e:50:
         86:85:55:8e:59:b6:e4:76:ca:94:af:7d:02:37:3a:0e:9d:b2:
         d5:db:95:b5:ac:40:ff:9b:97:87:13:f8:aa:5f:9d:d0:d7:e6:
         fa:b0:9f:63:cd:c9:b3:a9:c5:34:aa:af:b5:ce:5e:e5:6d:a5:
         1d:08:19:f1:df:07:05:ee:fd:e5:b9:c5:b3:2e:bc:d1:2a:99:
         f1:ec:55:86:a5:86:5d:80:36:d6:d8:2f:d0:d9:0e:fd:c7:7c:
         a5:67:34:38:38:9b:32:c3:25:ec:76:b9:3d:88:97:a5:ad:db:
         1e:a0:c8:87:56:74:2c:71:ec:ca:30:97:49:18:fd:8b:67:e0:
         bd:24:a1:9c:9f:0c:db:cf:45:68:69:91:6f:11:21:a4:ec:ec:
         3f:eb:16:0a:fd:81:1a:35:6e:28:b9:01:b1:23:97:64:7b:81:
         63:ec:f9:46:3b:c0:d1:75:19:fc:0b:73:18:40:11:57:05:c1:
         95:0d:3b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----