Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/323830343a353134633a3a2f33322d3332203d3e20323638343434.roa
File:                     323830343a353134633a3a2f33322d3332203d3e20323638343434.roa (raw, json)
Hash identifier:          qF9s2tWB/Lf9UCi4k4+J3+pIfpLwh+n/KfyaKtMkoQU=
Subject key identifier:   34:34:3F:91:9F:C8:55:31:4F:10:01:88:9C:6E:3C:F4:CC:64:1C:9C
Certificate issuer:       /CN=D2B319B1450F44E4DA3E3080C1BD341451656202
Certificate serial:       1D0BB41B2135C03868CDB81F2B77851649B743A2
Authority key identifier: D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/323830343a353134633a3a2f33322d3332203d3e20323638343434.roa
Signing time:             Thu 04 Apr 2024 18:50:02 +0000
ROA not before:           Thu 04 Apr 2024 18:45:02 +0000
ROA not after:            Thu 03 Apr 2025 18:50:02 +0000
asID:                     268444
IP address blocks:        2804:514c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0b:b4:1b:21:35:c0:38:68:cd:b8:1f:2b:77:85:16:49:b7:43:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B319B1450F44E4DA3E3080C1BD341451656202
        Validity
            Not Before: Apr  4 18:45:02 2024 GMT
            Not After : Apr  3 18:50:02 2025 GMT
        Subject: CN=34343F919FC855314F1001889C6E3CF4CC641C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:db:3e:fb:2f:25:83:22:61:49:ab:29:8a:e1:
                    3d:53:7a:08:8c:2c:7f:97:f4:15:e9:2c:80:7b:ca:
                    d2:9a:38:f2:13:48:8e:4b:5f:a3:a3:01:2d:7a:ab:
                    30:df:68:f6:db:e1:1f:ba:8a:81:c5:e5:cd:96:65:
                    7c:3a:c0:36:f2:a2:c0:d6:8e:59:13:7b:5c:78:5c:
                    7d:8b:7a:e8:e7:09:60:3b:71:d7:35:f0:61:67:d0:
                    14:d4:d6:b6:36:10:56:aa:11:31:58:99:dd:fb:e8:
                    29:13:91:b6:91:68:b6:9f:29:cc:fb:76:62:9d:7d:
                    c3:b5:92:93:30:0a:6c:60:ff:83:7a:f2:6b:e5:f7:
                    10:ff:d6:61:7a:31:d1:ec:1e:f2:c8:22:a6:6c:eb:
                    57:19:49:f8:45:59:08:64:9c:bd:2b:74:ba:fd:fc:
                    63:c8:42:ac:c3:2e:7a:69:87:77:9f:1b:71:e1:62:
                    83:5f:5f:8a:4e:c8:ee:b5:0a:4b:e8:bc:60:9f:9c:
                    a9:c9:fc:a4:d7:39:ea:02:be:36:16:da:08:42:3b:
                    f4:61:0b:6c:ea:b1:2d:12:f1:fb:6a:26:f2:30:9b:
                    97:57:1c:7e:14:4d:74:3c:7c:69:c6:c2:c7:d7:88:
                    7e:be:55:29:b7:5a:79:0d:53:c8:eb:79:0c:00:72:
                    9e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:34:3F:91:9F:C8:55:31:4F:10:01:88:9C:6E:3C:F4:CC:64:1C:9C
            X509v3 Authority Key Identifier:
                keyid:D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/D2B319B1450F44E4DA3E3080C1BD341451656202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/323830343a353134633a3a2f33322d3332203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:514c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:c4:7b:58:c9:fe:29:96:48:ba:c7:2a:42:17:60:2e:d3:d8:
         a2:f0:c5:88:8d:35:d1:1b:72:a9:13:e4:4c:cb:a5:a4:01:c6:
         f9:52:f8:86:15:aa:b2:19:24:33:5c:f8:00:e8:8b:bb:90:be:
         d8:c3:a8:19:07:18:f3:40:76:74:61:0f:3f:2f:97:b8:c0:37:
         b0:bc:6b:d7:03:20:4f:a7:a2:53:77:40:1b:6a:5d:c2:3e:d0:
         ed:a8:5b:3f:19:1c:54:4a:b3:55:a5:d8:6f:9b:98:4f:96:57:
         91:6b:8f:63:7c:ce:75:6d:ad:ed:ac:5f:ee:4b:cc:fb:1f:77:
         8d:50:ad:71:5c:6c:fd:57:1c:1a:d4:5a:15:65:10:cb:42:ff:
         82:13:0a:70:73:02:3d:a9:6b:b7:87:c3:20:70:dc:25:de:09:
         99:17:47:ff:5f:94:ee:a7:ba:70:b1:59:e6:ae:32:42:7d:21:
         dd:43:8e:8e:a0:e8:4c:cc:f3:19:c6:18:fd:a8:51:20:96:65:
         d9:f0:41:07:15:47:bd:d8:28:ad:bc:d2:a0:4f:ba:06:6a:f1:
         d6:ae:76:5e:71:d2:01:cb:9e:a2:fc:f3:cb:c6:a5:d5:34:51:
         9f:e5:dd:b1:0d:d6:75:f1:df:54:6f:6a:b4:fd:c9:03:ff:48:
         40:2a:56:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----