Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/323830343a366335343a3a2f33322d3335203d3e20323730343630.roa
File:                     323830343a366335343a3a2f33322d3335203d3e20323730343630.roa (raw, json)
Hash identifier:          2g8DGLwfNcfdzYDkVuaSXWkUQOs8hYhouX9iSxIxMaw=
Subject key identifier:   D0:11:7B:95:6A:E3:CC:D7:E3:39:2D:01:5F:AB:18:DD:5B:AE:67:6B
Certificate issuer:       /CN=780F596920B023D27CC4D953A13A9C8DAA3CC182
Certificate serial:       1B6F657808DDD4B8BB6F1CC124EEEB09C6702D73
Authority key identifier: 78:0F:59:69:20:B0:23:D2:7C:C4:D9:53:A1:3A:9C:8D:AA:3C:C1:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/780F596920B023D27CC4D953A13A9C8DAA3CC182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/323830343a366335343a3a2f33322d3335203d3e20323730343630.roa
Signing time:             Fri 24 Nov 2023 19:40:06 +0000
ROA not before:           Fri 24 Nov 2023 19:35:06 +0000
ROA not after:            Fri 22 Nov 2024 19:40:06 +0000
asID:                     270460
IP address blocks:        2804:6c54::/32 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6f:65:78:08:dd:d4:b8:bb:6f:1c:c1:24:ee:eb:09:c6:70:2d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780F596920B023D27CC4D953A13A9C8DAA3CC182
        Validity
            Not Before: Nov 24 19:35:06 2023 GMT
            Not After : Nov 22 19:40:06 2024 GMT
        Subject: CN=D0117B956AE3CCD7E3392D015FAB18DD5BAE676B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:b6:ea:fd:a6:15:3f:65:b1:94:92:60:19:
                    a5:c4:ea:48:b7:bf:87:b4:b1:3b:24:3b:fb:10:fa:
                    b2:fb:c4:1e:fa:d0:f6:19:b1:41:91:cb:18:7a:55:
                    12:79:44:4e:76:ec:9f:5e:df:af:cd:05:b9:5f:6f:
                    2c:95:6e:43:4d:96:2c:86:41:9f:05:01:b9:c2:e8:
                    34:a5:87:5e:2f:93:89:96:46:02:38:54:1a:73:89:
                    7f:c0:3a:fb:44:f6:57:dd:8f:92:61:15:25:0e:cd:
                    c9:ee:c5:e2:0d:49:f9:14:0a:cb:b8:fc:c9:9a:e6:
                    77:54:25:25:88:c6:97:58:96:94:f4:96:f3:87:3c:
                    68:d3:10:2f:13:a5:68:81:ae:f3:1f:a9:ac:94:cd:
                    05:ed:7c:a2:7e:94:79:be:6e:63:b1:78:4d:8f:d3:
                    57:13:90:5b:9b:6e:2f:1b:22:ab:39:90:74:35:76:
                    b4:f1:c8:1b:66:13:cc:76:da:07:4f:bf:3b:de:5c:
                    1c:01:9e:46:7a:9c:74:ed:68:fd:74:e3:79:4f:ad:
                    4f:33:91:d5:37:7e:48:03:63:09:15:60:6c:00:41:
                    35:63:d1:1d:72:0d:fd:37:59:0a:c9:dd:98:1c:c6:
                    06:96:d6:bc:86:2b:55:f0:17:a6:5c:53:f5:1b:9a:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:11:7B:95:6A:E3:CC:D7:E3:39:2D:01:5F:AB:18:DD:5B:AE:67:6B
            X509v3 Authority Key Identifier:
                keyid:78:0F:59:69:20:B0:23:D2:7C:C4:D9:53:A1:3A:9C:8D:AA:3C:C1:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/780F596920B023D27CC4D953A13A9C8DAA3CC182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/780F596920B023D27CC4D953A13A9C8DAA3CC182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/323830343a366335343a3a2f33322d3335203d3e20323730343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c54::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:f9:2e:68:33:5e:cd:be:f0:06:30:93:80:e9:cb:d8:f8:55:
         bd:36:8e:37:05:be:b0:62:d8:5f:7b:10:4d:7e:bc:86:c4:3d:
         a8:6f:14:57:a9:78:2e:78:9b:59:48:05:ea:31:58:68:3b:e9:
         21:2a:8a:0d:05:dc:77:21:06:89:4d:51:e0:2f:40:37:cb:55:
         09:86:68:37:3f:50:14:63:8c:f0:1e:3d:cd:d1:4a:40:99:20:
         18:70:6e:b2:38:a8:ee:6f:d4:86:02:df:cc:f1:50:83:8c:18:
         f8:be:3b:ff:d2:31:e4:37:72:fe:4f:b1:e1:ab:9c:16:4d:6c:
         0a:9f:2a:47:f9:58:18:50:34:04:f9:e5:fd:d9:f7:2d:63:5b:
         7d:04:db:bd:d1:75:a8:dc:93:28:c5:e4:16:a0:d9:54:7c:51:
         5b:7a:32:3e:2b:1b:c0:15:0f:b8:8d:2c:30:72:93:75:74:65:
         1e:3d:f1:3b:ba:b7:e6:c9:70:78:7c:af:59:f8:e7:c0:17:af:
         53:f8:64:d6:cb:35:18:bb:a6:62:56:1c:e6:61:de:c4:5d:0d:
         39:10:1e:80:b2:a4:90:fb:48:60:0f:83:bd:44:46:17:1f:6e:
         23:1b:16:50:4d:2b:cd:3b:22:f1:b7:28:b4:1b:d5:68:c5:1f:
         ce:09:33:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----