Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/323830343a346536343a3a2f33322d3334203d3e20323638323538.roa
File:                     323830343a346536343a3a2f33322d3334203d3e20323638323538.roa (raw, json)
Hash identifier:          QtFOrOtRg4Fs8mzFe+0Kwer817OqPi2nJjzakDWXjf0=
Subject key identifier:   05:22:33:71:6F:81:70:FC:27:44:F4:4D:77:AD:94:B8:8C:25:D2:10
Certificate issuer:       /CN=BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F
Certificate serial:       1AF6075305AA50A7148FFD620382413ED3ECE2C5
Authority key identifier: BA:9C:8A:E4:CF:CE:7D:90:0B:77:A3:2A:AE:8A:B5:49:D3:01:42:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/323830343a346536343a3a2f33322d3334203d3e20323638323538.roa
Signing time:             Thu 04 Apr 2024 01:59:52 +0000
ROA not before:           Thu 04 Apr 2024 01:54:52 +0000
ROA not after:            Thu 03 Apr 2025 01:59:52 +0000
asID:                     268258
IP address blocks:        2804:4e64::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f6:07:53:05:aa:50:a7:14:8f:fd:62:03:82:41:3e:d3:ec:e2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F
        Validity
            Not Before: Apr  4 01:54:52 2024 GMT
            Not After : Apr  3 01:59:52 2025 GMT
        Subject: CN=052233716F8170FC2744F44D77AD94B88C25D210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:39:85:de:74:6f:c8:dd:ea:96:67:f4:b3:
                    48:8f:cb:ec:d8:ab:a3:97:7c:06:b1:2a:78:af:89:
                    00:ed:98:f6:07:18:25:c0:86:67:91:fd:9e:13:13:
                    fb:b4:b3:9a:c9:ef:38:a3:54:9d:3f:6e:12:9c:53:
                    0a:3b:e3:dc:24:91:b5:50:a3:02:0d:0c:c2:a4:89:
                    e5:08:af:ac:f4:37:24:81:22:be:89:9f:b4:9b:b9:
                    99:73:01:24:4e:88:49:35:46:be:1a:59:49:52:5e:
                    28:cf:c8:a7:97:76:e5:3d:3c:f5:62:4e:b1:7c:89:
                    40:aa:14:0a:6c:c0:61:2e:14:36:83:59:eb:3f:bd:
                    bb:ca:70:7d:04:ca:2f:68:23:5c:b7:e3:d4:09:e7:
                    fc:1f:c6:51:8f:88:f6:21:6e:1f:4c:e1:8e:d3:80:
                    a9:7d:89:29:7f:26:ff:86:4e:17:47:8b:61:5d:24:
                    46:6a:a8:d3:62:05:36:50:92:61:fe:71:03:f2:45:
                    66:f6:85:d2:35:a9:14:76:d4:ee:63:66:dc:e0:23:
                    e1:0b:eb:c7:12:e9:07:ca:b4:64:1f:e9:0d:63:d4:
                    62:e5:4f:89:db:b5:4c:8b:cd:77:c6:80:bc:9d:35:
                    45:c7:da:10:ea:3b:69:65:ad:65:1e:7f:c6:2f:ab:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:22:33:71:6F:81:70:FC:27:44:F4:4D:77:AD:94:B8:8C:25:D2:10
            X509v3 Authority Key Identifier:
                keyid:BA:9C:8A:E4:CF:CE:7D:90:0B:77:A3:2A:AE:8A:B5:49:D3:01:42:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/323830343a346536343a3a2f33322d3334203d3e20323638323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e64::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:89:16:45:a0:ab:44:e0:81:35:46:7e:97:79:ef:b3:71:b7:
         ea:90:f5:35:fc:e5:3a:3e:d7:1f:7b:4e:8a:26:af:93:6e:37:
         25:2e:ce:2a:34:5a:55:c4:16:ce:d0:ec:82:7b:67:d6:da:49:
         12:5a:88:3d:23:9b:1b:fb:6c:54:f6:29:f5:44:4a:f4:17:38:
         50:c2:02:d8:fe:29:f8:f6:46:1d:98:be:72:a0:f0:01:48:5a:
         95:0a:a9:0d:3b:af:71:f4:09:fe:7f:40:1d:e7:7c:56:49:29:
         82:d3:99:d8:a5:5c:f1:10:2a:54:59:5d:82:f2:ee:6b:f9:81:
         4e:47:85:79:3e:9d:0b:ad:1a:8c:b5:fc:84:42:b0:61:34:e4:
         73:73:26:27:bf:0d:2d:dc:5a:13:9c:31:96:dc:f6:b4:58:1b:
         77:e8:ef:e4:40:a0:82:b4:b7:ab:da:db:23:ce:95:c0:55:f8:
         2f:96:27:53:7c:b3:63:b8:ce:64:db:47:31:7b:98:4e:0f:e0:
         8f:29:b7:86:43:cd:12:a4:20:91:4a:65:13:bb:10:da:d2:3d:
         b9:44:ad:bd:21:88:5d:72:c0:07:d3:40:f4:f5:ed:cc:1a:42:
         f6:c5:c3:0a:04:b4:d9:ab:e6:6a:5a:b5:41:ea:17:bb:35:57:
         de:c6:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----