Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa
File:                     323830343a3936343a3a2f33322d3634203d3e20323633303830.roa (raw, json)
Hash identifier:          L9dXd0XAHzVcpkvbVbV6zN5D2eFNVRW4O39rPVIAUDk=
Subject key identifier:   B0:48:3A:FB:A0:38:32:DA:BC:ED:C9:A6:34:81:D3:B5:16:80:06:83
Certificate issuer:       /CN=ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464
Certificate serial:       0C534506E06821CF9740DE932CBDC21DADB7F75C
Authority key identifier: AC:D9:2F:0A:B7:3C:9E:80:D8:5F:F4:C9:A7:08:CF:B7:50:E1:D4:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa
Signing time:             Mon 07 Oct 2024 15:18:52 +0000
ROA not before:           Mon 07 Oct 2024 15:13:52 +0000
ROA not after:            Mon 06 Oct 2025 15:18:52 +0000
asID:                     263080
IP address blocks:        2804:964::/32 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:53:45:06:e0:68:21:cf:97:40:de:93:2c:bd:c2:1d:ad:b7:f7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464
        Validity
            Not Before: Oct  7 15:13:52 2024 GMT
            Not After : Oct  6 15:18:52 2025 GMT
        Subject: CN=B0483AFBA03832DABCEDC9A63481D3B516800683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:84:be:8b:75:70:3a:b7:cb:f1:4a:7a:28:
                    71:2b:1a:8d:bf:f8:c6:82:72:07:96:56:d8:59:0b:
                    93:2b:fb:96:25:07:78:bd:5f:9e:24:d8:39:a4:c8:
                    08:14:9b:c5:e7:70:90:cd:02:46:b1:24:7e:5b:01:
                    99:5e:e1:97:bf:e9:b9:a6:4d:d2:c9:3f:27:47:c1:
                    4a:de:e5:76:d0:d6:fd:4a:db:01:c0:c1:b3:d8:37:
                    1e:80:4e:b4:77:e1:69:36:1d:97:f7:9a:75:10:54:
                    5f:e1:38:fc:4a:01:db:91:c7:94:38:6c:e8:91:1a:
                    ca:b2:d6:35:eb:d9:66:db:0e:2c:5a:5b:9e:8f:34:
                    18:2d:fa:ac:84:18:16:e9:4e:fa:db:fb:5e:49:c7:
                    a2:fd:67:24:15:6e:e6:2f:3d:51:ae:83:05:c4:dc:
                    fc:84:48:9f:51:cc:d9:0a:af:85:f1:b1:7c:61:07:
                    e2:63:dc:89:b3:f5:5e:49:b2:01:67:d7:76:80:6c:
                    27:4a:23:44:3b:85:9e:16:06:d3:47:a4:fc:55:3d:
                    c3:ab:fc:a7:40:0b:f6:58:ba:ef:b6:f3:0b:37:85:
                    45:d8:8c:0a:86:c1:6d:60:59:80:be:09:90:b7:32:
                    60:82:54:1b:4b:a2:b8:0e:6e:be:53:19:04:15:4b:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:3A:FB:A0:38:32:DA:BC:ED:C9:A6:34:81:D3:B5:16:80:06:83
            X509v3 Authority Key Identifier:
                keyid:AC:D9:2F:0A:B7:3C:9E:80:D8:5F:F4:C9:A7:08:CF:B7:50:E1:D4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:964::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:5f:9d:dc:ef:ea:bb:3d:cc:02:c2:bd:b4:64:86:42:21:1c:
         7e:49:32:74:1d:b7:6d:d3:a6:09:49:d2:93:4d:fb:d0:5d:1e:
         46:10:ed:98:1c:41:df:ca:8a:b1:d1:fb:d6:59:57:a0:d9:af:
         89:fe:68:39:db:3e:d9:93:27:c2:98:f9:c7:fb:4b:9d:67:29:
         ae:c9:65:c3:19:e2:32:fe:b8:01:1f:36:67:a4:5d:be:2d:8b:
         4c:2f:20:4b:44:18:c6:5d:31:44:7d:d1:86:27:d0:06:cd:41:
         73:88:88:4d:cc:3c:88:54:89:e7:70:4f:ce:9a:25:34:29:fd:
         af:df:14:4b:87:8e:81:11:a1:c2:6c:53:98:d0:b7:a4:b3:5a:
         05:9b:16:ef:da:12:29:c9:a9:73:dd:6b:cf:9b:ab:66:33:32:
         eb:1c:38:05:17:23:b7:ca:b5:d5:71:21:66:99:ba:14:fb:33:
         60:c0:65:20:17:be:4d:79:b6:da:81:0a:3a:83:6e:bc:20:0f:
         ce:c5:24:1b:b6:4b:25:aa:42:98:ec:58:6c:50:cd:be:8e:f5:
         e2:99:d0:5e:1c:4b:2f:18:c2:56:c6:b2:1f:7f:9e:4f:e5:90:
         40:7f:66:49:6c:05:62:98:4f:0e:36:7e:e9:dd:90:74:57:9c:
         b5:3f:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----