Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383031303a3a2f34352d3435203d3e20323632383437.roa
File:                     323830343a3265383a383031303a3a2f34352d3435203d3e20323632383437.roa (raw, json)
Hash identifier:          pcvAtKt5dPrdTh5QCS6+a3ANSbLWK5kbhCZqaM/xdyA=
Subject key identifier:   E3:64:A6:A3:B2:07:A7:05:2D:CF:88:07:2A:3A:C7:B0:50:C3:7C:AA
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       36B8B7AFBD5E2DA34E6B4060B630406FC7FA3AB7
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383031303a3a2f34352d3435203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:37 +0000
ROA not before:           Thu 04 Apr 2024 16:07:37 +0000
ROA not after:            Thu 03 Apr 2025 16:12:37 +0000
asID:                     262847
IP address blocks:        2804:2e8:8010::/45 maxlen: 45

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b8:b7:af:bd:5e:2d:a3:4e:6b:40:60:b6:30:40:6f:c7:fa:3a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:37 2024 GMT
            Not After : Apr  3 16:12:37 2025 GMT
        Subject: CN=E364A6A3B207A7052DCF88072A3AC7B050C37CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c9:80:5c:fc:af:7c:ea:0b:c8:ce:39:48:90:
                    80:3d:be:02:07:dc:7e:96:f8:37:8d:e4:3d:97:62:
                    5e:a9:d9:4e:43:5e:81:ba:67:55:0d:35:7b:d6:7c:
                    8f:93:90:32:65:d8:ff:33:b8:f4:b9:bf:9a:1a:87:
                    5c:7f:41:7b:ee:d8:2b:97:7a:b3:35:44:7f:62:bb:
                    5b:5d:50:bc:a1:a7:98:5f:d7:bf:f3:a0:c7:e3:e3:
                    3f:df:fe:50:bb:5a:7e:75:60:34:19:b8:2b:d7:ab:
                    2c:93:9a:85:03:b3:ec:5b:ce:d3:c5:87:51:59:e9:
                    47:59:17:a9:69:2f:e1:e5:ff:e5:57:4c:a2:17:04:
                    f3:cd:85:0a:25:24:4e:67:c1:3b:ef:e9:cf:7f:86:
                    8d:68:31:36:f3:c2:a5:e6:4b:27:df:13:63:09:08:
                    17:52:a0:54:90:1c:90:8d:ab:b5:37:f8:1e:b2:e4:
                    21:96:00:ae:3b:76:ce:fc:41:48:6e:bd:b9:55:89:
                    2a:2a:d4:9a:21:cd:59:8e:95:b6:31:4a:0d:ce:2c:
                    a8:b1:cd:a7:68:9d:2b:43:ab:fd:a5:01:29:b8:cf:
                    26:ad:a3:a6:40:c2:40:ba:d4:23:2e:2a:76:fb:eb:
                    6c:7d:5a:93:68:78:7d:1d:70:5f:20:6d:07:12:40:
                    0d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:64:A6:A3:B2:07:A7:05:2D:CF:88:07:2A:3A:C7:B0:50:C3:7C:AA
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a383031303a3a2f34352d3435203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:8010::/45

    Signature Algorithm: sha256WithRSAEncryption
         91:65:fd:62:c2:23:76:81:e8:45:f7:bc:9e:72:7d:c4:34:a1:
         2f:06:7e:eb:03:9f:03:62:79:d3:6c:99:68:bb:4d:eb:9a:84:
         d6:0b:ee:26:e2:48:91:85:47:1b:79:5d:99:0d:3d:39:d9:e6:
         37:8c:19:1f:14:92:2d:20:59:4b:ec:1f:1d:56:33:c9:35:10:
         49:2e:e8:6e:7a:32:c2:d4:ce:b4:4c:d5:8d:81:c8:39:b3:06:
         64:9d:18:f3:dc:33:18:f7:96:71:ee:88:a9:e7:71:91:6e:c3:
         f7:c0:fb:c7:43:3b:89:a9:0f:21:48:26:cf:4b:56:ee:81:5b:
         bb:35:63:95:49:9f:5b:68:4c:34:b6:cd:5d:69:ba:2f:d8:97:
         59:7f:25:07:be:f9:10:53:92:57:90:78:0d:09:3e:5a:99:47:
         8a:78:bd:18:8e:87:ef:33:4b:cd:16:d9:91:b0:24:0d:11:aa:
         ad:ed:17:12:e2:98:96:10:b2:f4:ca:14:d9:5d:29:0d:bf:95:
         01:b2:60:2f:86:34:f5:df:21:44:07:fd:29:95:0c:44:e5:36:
         2d:ac:03:47:2b:6d:dd:b3:5a:37:f7:e9:09:00:8d:61:e5:22:
         37:fb:45:56:0f:f2:37:dc:48:a5:17:84:41:4e:0b:bc:04:c3:
         c2:f1:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----