Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/323830343a333239303a3a2f33322d3332203d3e20323635303835.roa
File:                     323830343a333239303a3a2f33322d3332203d3e20323635303835.roa (raw, json)
Hash identifier:          /+LSaJaR2NlT6XlfRYrk8YqSfhSW2rwWb4TJL/+YL24=
Subject key identifier:   65:BC:B1:CE:A1:04:3C:F5:99:38:F6:F9:FE:C5:24:B1:F2:25:61:DE
Certificate issuer:       /CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Certificate serial:       6F270CF26B1BFC7DF038972B9B7499B6F1B8B4BF
Authority key identifier: 8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/323830343a333239303a3a2f33322d3332203d3e20323635303835.roa
Signing time:             Fri 05 Apr 2024 00:27:25 +0000
ROA not before:           Fri 05 Apr 2024 00:22:25 +0000
ROA not after:            Fri 04 Apr 2025 00:27:25 +0000
asID:                     265085
IP address blocks:        2804:3290::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:27:0c:f2:6b:1b:fc:7d:f0:38:97:2b:9b:74:99:b6:f1:b8:b4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
        Validity
            Not Before: Apr  5 00:22:25 2024 GMT
            Not After : Apr  4 00:27:25 2025 GMT
        Subject: CN=65BCB1CEA1043CF59938F6F9FEC524B1F22561DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:5b:55:bc:07:25:a1:a2:a7:08:3a:1a:fb:
                    e4:3d:72:d3:5c:da:9e:98:89:df:39:90:14:15:04:
                    d3:97:cc:2c:7c:cf:a7:c8:69:bd:f6:99:e0:35:55:
                    59:95:d9:69:06:bd:54:49:ac:4a:28:66:f6:a4:c8:
                    c5:13:4e:a1:6c:9a:ac:b9:13:39:79:8c:33:95:21:
                    63:3c:73:ca:11:b9:ba:c6:c7:5e:92:57:f0:06:0c:
                    2b:20:8f:8b:3a:d5:d5:f1:0f:87:6a:5c:8e:d4:34:
                    40:31:b8:df:28:a7:6d:64:20:cd:29:60:31:f5:af:
                    58:be:52:8d:07:ee:9c:22:9f:8e:b7:6f:70:67:24:
                    6a:50:5f:e2:e6:04:b1:20:0b:39:e9:88:51:b4:69:
                    f0:86:37:36:34:8c:df:e2:4d:46:9a:49:b4:84:e8:
                    19:29:27:d4:18:87:32:d5:de:93:a3:ec:9a:89:a6:
                    63:3c:dc:7f:fd:c5:97:36:96:fc:5c:b5:e6:59:90:
                    28:0b:f6:36:82:a3:52:02:fa:78:92:6e:b4:41:db:
                    a4:9e:68:85:47:5c:34:53:3c:33:d2:61:f3:5b:32:
                    c7:3d:32:2c:39:ff:c0:67:56:2a:3b:cb:3a:9c:e8:
                    33:4d:84:d1:23:4a:5f:c6:bb:fb:6c:62:a7:0c:2b:
                    33:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BC:B1:CE:A1:04:3C:F5:99:38:F6:F9:FE:C5:24:B1:F2:25:61:DE
            X509v3 Authority Key Identifier:
                keyid:8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/323830343a333239303a3a2f33322d3332203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3290::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:20:a3:29:d0:bf:94:a5:00:67:95:ad:6a:75:34:4e:ac:21:
         6b:4b:a0:b8:97:76:a0:86:de:e3:ff:90:2f:4e:9c:c0:db:68:
         5f:05:90:95:e0:a5:5e:53:b9:94:ea:a1:9e:18:fb:b9:16:ec:
         db:17:c0:76:0e:82:a9:d4:12:ab:2e:b7:f5:5e:7d:f8:13:71:
         2a:cf:2b:60:e2:2c:9e:65:0f:a6:3e:16:68:8e:16:29:25:21:
         f4:43:3c:80:5d:24:3b:f7:29:c3:8d:57:59:a8:41:b5:b2:e4:
         8c:67:f1:52:c7:b9:45:07:9a:04:5a:36:aa:84:06:d7:14:6a:
         01:df:2a:cc:88:fc:e4:28:b2:3e:0a:d0:e9:f6:77:4c:25:58:
         1e:cf:11:2f:a4:26:a7:f7:79:88:69:66:68:8c:ec:55:79:37:
         c2:7b:53:fc:5e:0e:d0:10:1a:ab:6b:ab:31:50:45:92:f8:82:
         73:3f:44:48:18:ab:76:4a:f6:5d:9f:4f:b1:ab:4e:fb:85:aa:
         6e:d7:7f:97:cf:70:51:e1:22:33:e4:d8:25:ea:0b:4c:6c:de:
         25:0f:da:e6:e4:68:c5:00:cd:69:84:b2:50:0d:86:51:e0:fb:
         d8:b7:f2:fe:ca:c7:f0:77:59:a2:4c:c5:f5:83:62:d4:f4:9f:
         74:df:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----