Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3336203d3e20323634343337.roa
File:                     323830343a316539343a3a2f33322d3336203d3e20323634343337.roa (raw, json)
Hash identifier:          imrr4a1Rz3IJnX7VrFYj/JHMDLT5su4SJJNtg82NMPA=
Subject key identifier:   D1:2A:78:9B:67:6C:26:B3:8D:55:1D:5A:2F:BC:F8:9B:B5:71:C5:FD
Certificate issuer:       /CN=96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00
Certificate serial:       6494C4BF79D1E1F0F437EA0721795999910DB934
Authority key identifier: 96:B8:FD:8F:C2:71:B3:CB:BC:CA:36:DE:D3:B1:3B:3A:7E:6F:3B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3336203d3e20323634343337.roa
Signing time:             Thu 04 Jul 2024 16:48:49 +0000
ROA not before:           Thu 04 Jul 2024 16:43:49 +0000
ROA not after:            Thu 03 Jul 2025 16:48:49 +0000
asID:                     264437
IP address blocks:        2804:1e94::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:94:c4:bf:79:d1:e1:f0:f4:37:ea:07:21:79:59:99:91:0d:b9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00
        Validity
            Not Before: Jul  4 16:43:49 2024 GMT
            Not After : Jul  3 16:48:49 2025 GMT
        Subject: CN=D12A789B676C26B38D551D5A2FBCF89BB571C5FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:45:a7:b9:f6:e2:49:82:12:41:86:eb:3b:d0:
                    35:84:c1:f5:f1:71:ce:6e:8a:11:27:32:41:d4:02:
                    55:9d:46:ee:de:1a:46:09:51:97:6f:03:3d:59:9c:
                    1a:55:de:d9:a8:3b:53:59:c6:c1:4d:23:8d:98:05:
                    3e:0b:15:82:2d:cb:b1:81:d3:a6:73:8e:0f:eb:4c:
                    af:db:97:40:df:eb:6e:5b:3d:02:41:9f:7f:f3:90:
                    da:51:1e:7a:3e:64:bf:c3:9b:c4:cd:87:f3:f1:67:
                    f4:cf:16:64:54:0c:b8:02:f4:f4:3b:5f:bf:5a:db:
                    d3:92:fb:74:99:f6:b7:55:a3:02:89:53:3d:aa:ae:
                    b0:71:a3:9d:dc:b0:d0:e8:5a:09:d5:83:ba:af:e1:
                    48:33:45:cc:9e:f8:e8:10:bc:3e:61:10:d0:1c:d9:
                    d1:72:65:18:7c:4b:02:3c:2d:ee:91:fa:0e:24:63:
                    8b:c2:9b:78:ac:71:79:9d:52:c3:50:a2:69:7b:86:
                    04:ef:de:a6:a2:7c:46:10:e1:8d:d3:09:f1:a0:12:
                    a1:1a:30:c0:cd:8c:cb:5e:48:1d:50:46:b2:7a:20:
                    32:5f:63:e2:1a:27:1d:1f:41:a5:22:82:a3:ea:38:
                    39:f1:be:01:66:b5:bf:5b:df:6e:66:61:42:ac:0c:
                    4e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2A:78:9B:67:6C:26:B3:8D:55:1D:5A:2F:BC:F8:9B:B5:71:C5:FD
            X509v3 Authority Key Identifier:
                keyid:96:B8:FD:8F:C2:71:B3:CB:BC:CA:36:DE:D3:B1:3B:3A:7E:6F:3B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B8FD8FC271B3CBBCCA36DED3B13B3A7E6F3B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3336203d3e20323634343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e94::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:22:c0:6d:f7:8a:36:3b:cd:85:98:58:78:b9:1f:24:a5:8d:
         bd:71:0d:0a:2e:f4:77:8f:e2:e2:e7:93:ab:b3:dc:54:30:31:
         da:8f:c4:21:28:48:2c:4e:1b:06:3f:46:60:99:33:b5:ec:0c:
         db:a5:0a:b0:e7:44:30:3c:9d:c5:de:79:d9:97:38:91:1f:32:
         a0:74:83:1a:a6:45:0d:e4:99:98:36:07:8f:68:d6:10:96:98:
         d0:8a:a3:33:c7:0c:f6:ff:63:e2:b0:4b:7a:d6:8f:9b:a5:5c:
         07:f7:ea:34:78:d3:53:54:50:d3:3b:b4:c9:6a:e8:9c:b9:d7:
         4a:07:c6:ea:59:81:ed:d3:72:19:e0:4e:c9:7c:49:8d:f2:64:
         14:48:06:6b:e6:e4:b5:eb:92:cd:88:2e:3e:b0:fd:0a:05:8d:
         4f:bf:60:6c:63:9f:f1:ca:f7:25:1e:5a:30:02:18:f3:47:99:
         be:e5:2b:01:40:84:16:dd:03:60:8b:aa:11:0e:49:45:31:c0:
         6c:0d:8b:b5:ae:81:fe:c1:67:38:ba:a3:82:91:69:79:0c:e3:
         f0:54:9e:c9:dd:03:eb:3c:a9:88:74:20:03:f4:5d:10:7f:11:
         5e:86:f3:f9:da:50:8c:5a:9f:fc:ba:19:9a:c4:12:c7:9f:b8:
         94:67:84:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----