Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/323830343a353134633a3a2f33332d3333203d3e20323638343434.roa
File:                     323830343a353134633a3a2f33332d3333203d3e20323638343434.roa (raw, json)
Hash identifier:          XP6gxhAw5mOV0I4cp9ccDsiGzR94IyikVcODG2++Jhw=
Subject key identifier:   9D:D7:28:24:DE:D2:4B:FD:E6:8A:BB:67:A0:96:5A:8B:E0:E1:D8:2D
Certificate issuer:       /CN=D2B319B1450F44E4DA3E3080C1BD341451656202
Certificate serial:       11DD7EECD0FA52FF2C11BECB235A8CB63D47D64D
Authority key identifier: D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/323830343a353134633a3a2f33332d3333203d3e20323638343434.roa
Signing time:             Thu 04 Apr 2024 18:50:01 +0000
ROA not before:           Thu 04 Apr 2024 18:45:01 +0000
ROA not after:            Thu 03 Apr 2025 18:50:01 +0000
asID:                     268444
IP address blocks:        2804:514c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:dd:7e:ec:d0:fa:52:ff:2c:11:be:cb:23:5a:8c:b6:3d:47:d6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B319B1450F44E4DA3E3080C1BD341451656202
        Validity
            Not Before: Apr  4 18:45:01 2024 GMT
            Not After : Apr  3 18:50:01 2025 GMT
        Subject: CN=9DD72824DED24BFDE68ABB67A0965A8BE0E1D82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:df:1c:f0:c3:70:e1:8b:3e:f0:d5:e1:1d:
                    d5:02:ad:36:05:db:2d:b1:0a:55:b3:5c:7c:37:d2:
                    06:fe:13:11:8d:aa:e1:05:e4:23:6b:6c:4a:40:19:
                    56:c0:9d:22:27:33:b4:75:02:4c:3e:05:bc:a6:d1:
                    42:36:07:50:f0:9b:58:85:a1:9d:d2:13:a5:98:52:
                    c5:c7:ba:e7:10:d7:9b:37:05:d3:e7:76:52:78:70:
                    f3:a5:c5:50:68:f3:46:48:b3:0a:6a:90:6b:55:b3:
                    fc:18:1f:45:64:d3:30:14:71:59:3b:26:dd:ae:6c:
                    55:12:d1:2e:51:f2:cf:0e:49:bc:f6:2c:f6:fd:70:
                    6b:a8:b9:2a:e9:c9:b0:c6:7f:2e:87:fc:a7:1c:d6:
                    f0:54:54:72:bf:43:05:7e:76:53:0e:5f:0c:17:8c:
                    fd:81:43:4c:f4:c9:58:fc:bd:98:e9:4a:36:18:7e:
                    67:32:53:3b:0e:6a:fd:48:d2:c1:20:6a:a1:c3:ef:
                    6e:aa:6a:1e:c6:88:10:79:97:aa:cf:d6:72:5f:55:
                    6f:fe:40:71:55:b8:81:c3:06:d3:96:1f:11:40:78:
                    80:4d:da:b9:c1:55:b8:f2:14:5c:e9:03:b2:c5:74:
                    3c:ab:f2:e2:83:67:a5:8c:0f:a2:8b:12:40:40:0c:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D7:28:24:DE:D2:4B:FD:E6:8A:BB:67:A0:96:5A:8B:E0:E1:D8:2D
            X509v3 Authority Key Identifier:
                keyid:D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/D2B319B1450F44E4DA3E3080C1BD341451656202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/323830343a353134633a3a2f33332d3333203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:514c::/33

    Signature Algorithm: sha256WithRSAEncryption
         93:de:c4:3a:76:f5:77:ba:ff:e4:59:5c:12:ef:0a:6f:11:ac:
         32:7c:03:12:88:4e:15:0e:77:42:24:60:f3:39:30:bb:09:c1:
         da:1a:bf:8f:94:e2:82:da:41:fc:c7:d0:d6:44:00:81:fe:07:
         da:c7:ec:7a:6a:ed:45:e8:dd:6e:42:09:4a:4a:76:e3:70:30:
         e4:c7:47:51:f5:c3:06:07:15:96:29:d5:7c:d7:7b:21:ba:09:
         e5:01:d4:75:ca:0c:58:a9:ef:9e:2c:90:f2:0d:0a:74:d4:7a:
         61:4d:6f:7e:8e:c3:cb:9a:86:17:5e:10:17:a9:93:da:61:ea:
         7a:32:f4:dc:7c:c2:55:b3:b2:c6:57:85:8b:bf:d9:5a:c7:ae:
         8a:ea:cc:d4:79:27:8a:9e:41:1d:5f:ea:ba:f6:60:a7:e5:46:
         9c:43:1a:5f:d7:6d:3b:38:62:9d:1b:ed:d8:2c:69:e3:02:ef:
         01:5a:57:66:da:f3:6e:fe:5b:2c:05:04:38:fa:d2:c5:b0:6e:
         12:52:2b:00:5c:e5:19:26:db:50:5d:55:15:5d:cd:70:46:f4:
         b5:6a:1c:95:fa:de:9e:fd:72:56:25:a6:75:44:ac:2b:4e:1e:
         3f:dc:e7:7b:41:f9:72:11:f1:77:74:99:91:89:55:6e:59:11:
         5d:da:7a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----