Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/1/323830343a363861383a3a2f33322d313238203d3e20323639373037.roa
File:                     323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (raw, json)
Hash identifier:          nY3zfI5rJBymZtOCZ0WQgGjLfWLauDFF3uSutJxuStM=
Subject key identifier:   D6:29:63:A3:59:C0:F6:DD:B6:AD:C1:4F:5F:76:B8:C9:75:43:C3:DE
Certificate issuer:       /CN=77754AC1E4FC6C88BF7915036BCE71519D6EAE95
Certificate serial:       4D9F7B8431FB74C351BE4B169C6F0BF5FF789C92
Authority key identifier: 77:75:4A:C1:E4:FC:6C:88:BF:79:15:03:6B:CE:71:51:9D:6E:AE:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77754AC1E4FC6C88BF7915036BCE71519D6EAE95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/1/323830343a363861383a3a2f33322d313238203d3e20323639373037.roa
Signing time:             Thu 04 Apr 2024 03:16:50 +0000
ROA not before:           Thu 04 Apr 2024 03:11:50 +0000
ROA not after:            Thu 03 Apr 2025 03:16:50 +0000
asID:                     269707
IP address blocks:        2804:68a8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9f:7b:84:31:fb:74:c3:51:be:4b:16:9c:6f:0b:f5:ff:78:9c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77754AC1E4FC6C88BF7915036BCE71519D6EAE95
        Validity
            Not Before: Apr  4 03:11:50 2024 GMT
            Not After : Apr  3 03:16:50 2025 GMT
        Subject: CN=D62963A359C0F6DDB6ADC14F5F76B8C97543C3DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:43:6e:df:61:b9:0b:78:52:25:50:36:b1:
                    a8:68:9a:0a:05:bf:de:69:a9:77:6c:18:c5:0a:7d:
                    b8:90:54:ca:56:72:c4:2b:17:79:ff:d7:a1:4c:c8:
                    d6:d1:d0:38:fa:d3:6c:1a:ce:87:e8:58:eb:b1:aa:
                    ce:5b:8a:9f:dd:0e:31:71:a1:45:ef:2f:c0:b6:f4:
                    68:6a:71:63:98:c1:b3:39:98:1b:14:28:18:ad:2c:
                    1e:be:42:81:b6:03:27:3f:51:9e:f9:34:e1:3e:4e:
                    6f:7a:7b:55:24:e3:4f:bb:27:18:ba:de:72:34:55:
                    bb:c8:23:e0:fd:5d:31:75:49:2c:a5:e6:34:14:5f:
                    8c:4f:04:ba:4d:82:7a:5c:d5:20:3d:75:c0:fd:dc:
                    a6:4e:60:7a:5d:df:45:bc:85:a7:e6:44:58:32:26:
                    7f:94:00:46:65:7b:b9:4a:a3:82:16:70:95:b6:aa:
                    53:e9:3d:7c:20:06:23:b4:84:6e:4c:be:86:59:b0:
                    e5:e8:1e:88:82:ca:12:0c:cd:9b:4c:e1:8d:ba:56:
                    88:8e:02:58:f7:1b:13:3d:84:41:74:82:c1:4c:a4:
                    fe:c6:d9:07:e8:ae:c8:4c:c2:a2:6f:69:2e:7b:cf:
                    5e:ab:93:b6:8b:34:c6:bc:2c:6a:07:46:4b:96:11:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:29:63:A3:59:C0:F6:DD:B6:AD:C1:4F:5F:76:B8:C9:75:43:C3:DE
            X509v3 Authority Key Identifier:
                keyid:77:75:4A:C1:E4:FC:6C:88:BF:79:15:03:6B:CE:71:51:9D:6E:AE:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/1/77754AC1E4FC6C88BF7915036BCE71519D6EAE95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77754AC1E4FC6C88BF7915036BCE71519D6EAE95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/1/323830343a363861383a3a2f33322d313238203d3e20323639373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:82:28:58:e7:52:14:0c:9e:6a:de:d2:f9:33:bb:4e:d1:28:
         aa:e1:ad:68:12:42:e9:ca:83:84:b4:a9:65:c5:fe:c7:ec:8c:
         11:11:ad:95:88:f9:db:cb:c0:25:97:05:f6:2a:71:a1:1a:84:
         0d:e9:bd:4a:35:6f:48:1d:ff:b2:17:10:0c:7c:22:89:3c:de:
         1c:f1:26:ad:48:c1:41:2d:8f:44:7a:6f:9c:64:b5:be:4a:53:
         6c:43:05:d8:4f:fa:ed:be:f2:cb:3f:05:72:35:0e:89:90:30:
         45:eb:33:67:eb:82:4f:07:94:c5:56:c2:19:88:a1:03:2b:24:
         7e:4a:01:7d:9d:d8:e3:49:9e:97:1f:18:f2:8d:0e:a4:4a:c7:
         38:94:46:be:6c:7b:da:f6:06:e8:9f:13:14:63:de:3c:dd:17:
         d6:49:17:9b:44:d9:c7:dd:a0:4d:08:dd:45:71:e2:01:86:f4:
         7a:1a:95:f9:66:ca:8b:d2:d0:d3:a9:70:9a:70:f1:b4:2b:dc:
         da:c0:a8:bd:65:27:15:c6:de:90:7b:14:ad:b9:27:5f:26:21:
         f4:01:67:92:2b:8e:e7:a4:9f:6c:74:dc:e4:35:14:d4:08:99:
         6c:75:72:57:8b:64:42:6b:4f:3a:cc:22:88:58:50:e7:12:a7:
         e1:ab:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----