Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/323830343a313364383a3a2f33322d3438203d3e20323632363639.roa
File:                     323830343a313364383a3a2f33322d3438203d3e20323632363639.roa (raw, json)
Hash identifier:          9BACEJztwkZrQgCDit5VDWBPyNCPCdS9anTfT4ZYyhw=
Subject key identifier:   67:12:AC:47:A1:1E:0D:72:50:6F:6E:6D:50:67:58:B2:A6:08:04:1E
Certificate issuer:       /CN=F9FB33583132547FA2AA2454BAD750E527E58EAD
Certificate serial:       1BB877EDA77EFC05E9E991C05DF241630C860A13
Authority key identifier: F9:FB:33:58:31:32:54:7F:A2:AA:24:54:BA:D7:50:E5:27:E5:8E:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FB33583132547FA2AA2454BAD750E527E58EAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/323830343a313364383a3a2f33322d3438203d3e20323632363639.roa
Signing time:             Wed 17 Apr 2024 18:19:53 +0000
ROA not before:           Wed 17 Apr 2024 18:14:53 +0000
ROA not after:            Wed 16 Apr 2025 18:19:53 +0000
asID:                     262669
IP address blocks:        2804:13d8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b8:77:ed:a7:7e:fc:05:e9:e9:91:c0:5d:f2:41:63:0c:86:0a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FB33583132547FA2AA2454BAD750E527E58EAD
        Validity
            Not Before: Apr 17 18:14:53 2024 GMT
            Not After : Apr 16 18:19:53 2025 GMT
        Subject: CN=6712AC47A11E0D72506F6E6D506758B2A608041E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:5b:2a:16:8e:c6:35:63:17:97:2a:7e:be:
                    0f:47:08:45:22:b7:66:1d:4b:6d:df:09:60:b9:33:
                    62:e7:56:85:40:f5:7a:67:ce:cc:9d:bc:b3:c6:f0:
                    77:96:66:80:39:8d:0b:da:29:4d:03:e8:09:14:cc:
                    a6:c8:d1:8d:a3:74:66:71:db:6d:e7:6d:f7:87:6e:
                    15:5f:a5:7f:a2:b0:28:7e:5e:2d:58:c7:8c:a4:c6:
                    38:d3:7d:77:4f:6e:97:17:8a:19:83:2a:88:43:52:
                    be:5a:fb:ef:b1:3c:42:89:fd:89:12:18:be:87:9c:
                    cd:a3:9d:ff:de:6b:3a:8c:7f:4b:78:94:d6:d3:ba:
                    2e:f2:f0:03:85:0e:f4:cd:95:dd:c6:ca:1c:25:b3:
                    4a:28:ef:33:86:62:11:23:f4:0d:8c:58:39:48:bc:
                    72:6d:9d:d0:7d:08:59:31:dc:c8:c6:a2:2c:08:8d:
                    ca:bf:9d:14:da:78:ca:4e:26:82:e8:69:e0:64:ae:
                    5a:ff:97:cc:57:56:de:7b:98:07:b3:2b:82:79:ca:
                    52:8a:c4:c5:84:d5:22:20:30:8e:42:c9:b7:84:bf:
                    07:d5:0b:1e:6b:c8:9c:90:8c:a3:15:dc:61:9d:91:
                    a2:6e:e5:1e:2e:eb:aa:fd:b2:af:c0:95:6d:f9:0e:
                    72:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:AC:47:A1:1E:0D:72:50:6F:6E:6D:50:67:58:B2:A6:08:04:1E
            X509v3 Authority Key Identifier:
                keyid:F9:FB:33:58:31:32:54:7F:A2:AA:24:54:BA:D7:50:E5:27:E5:8E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/F9FB33583132547FA2AA2454BAD750E527E58EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FB33583132547FA2AA2454BAD750E527E58EAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/323830343a313364383a3a2f33322d3438203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:1a:ce:ab:83:c8:93:c4:cb:6a:9e:75:fa:bc:13:8b:4f:c1:
         09:6a:c4:85:94:9b:d3:17:d5:eb:13:a3:a0:e9:b7:cc:37:84:
         eb:27:33:69:a1:0f:44:1f:f8:84:6a:b6:40:68:17:49:3d:04:
         36:17:dc:47:3c:44:46:57:81:65:32:b5:21:a2:f8:2f:57:90:
         4a:c7:5f:b1:ac:e8:1a:6f:b4:55:43:12:37:99:f7:86:21:8b:
         1c:be:0d:25:b3:ad:91:8f:53:60:36:42:08:d2:2c:94:b3:74:
         bc:c7:06:cf:98:ab:94:06:53:f8:a2:f2:ca:0d:07:da:f4:5e:
         66:60:f9:16:c5:c7:30:f8:ab:9a:e8:77:09:64:e9:8e:5f:a9:
         c9:20:ae:03:d6:9d:df:05:e4:fb:40:10:73:21:36:15:73:5f:
         87:00:0a:f4:2e:6e:16:96:16:e3:98:71:5d:0e:f4:29:d9:07:
         34:f5:dd:00:43:7c:41:5d:8a:77:fa:c8:c5:c7:f4:2a:5c:5c:
         78:ee:24:d0:e7:89:5f:44:d4:70:9b:70:aa:a8:65:6d:11:54:
         ef:51:e6:0d:1a:ff:62:70:4f:69:fd:59:20:d6:e1:7b:63:66:
         64:43:d9:ea:c5:44:25:c2:c5:d3:d6:e9:e3:e1:a6:be:b4:6d:
         35:37:15:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----