Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a3a2f33322d3333203d3e20323632383437.roa
File:                     323830343a3265383a3a2f33322d3333203d3e20323632383437.roa (raw, json)
Hash identifier:          OCtlS3bZ+iDdjGsCzPy4hcvEK/2+HB/0NmqzoXq5B8U=
Subject key identifier:   20:B8:DA:D8:86:14:65:4A:EC:52:4A:48:6C:9D:02:DF:29:25:49:0C
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       36EBE46771397A88D80EFEF2EE59B30F0DB6A068
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a3a2f33322d3333203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:34 +0000
ROA not before:           Thu 04 Apr 2024 16:07:34 +0000
ROA not after:            Thu 03 Apr 2025 16:12:34 +0000
asID:                     262847
IP address blocks:        2804:2e8::/32 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:eb:e4:67:71:39:7a:88:d8:0e:fe:f2:ee:59:b3:0f:0d:b6:a0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:34 2024 GMT
            Not After : Apr  3 16:12:34 2025 GMT
        Subject: CN=20B8DAD88614654AEC524A486C9D02DF2925490C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a5:51:42:c3:b5:e2:61:2c:48:35:d5:b9:8f:
                    12:3b:bc:87:4e:ff:c5:40:9c:ff:fe:ef:4c:dc:d0:
                    9e:ea:2d:5a:7d:0c:28:bc:4d:4a:75:71:94:55:b7:
                    b7:10:a0:26:ce:a5:fb:70:ef:4b:f0:6b:3a:06:c5:
                    03:dd:09:50:21:36:9e:71:50:ce:d1:5b:38:70:58:
                    f0:dc:e5:12:67:07:d8:a2:2c:38:c8:d3:19:29:6c:
                    b5:38:8c:36:cd:87:4f:73:3d:fc:69:c9:3f:ec:f5:
                    83:ed:25:47:22:7c:74:24:02:8f:82:b8:0a:9c:29:
                    9f:bc:99:02:15:0b:0e:24:fc:a8:b3:cd:d4:5d:0b:
                    0a:de:c5:64:e1:ec:34:3d:9a:e6:cc:8f:1b:cc:32:
                    6c:dc:15:5e:76:a5:83:49:4e:8e:d9:08:02:6d:79:
                    12:a4:65:8e:a1:21:63:aa:50:45:71:e6:12:44:41:
                    a5:65:68:3e:ac:fd:3d:2f:64:4f:3e:1f:8f:a7:4e:
                    f6:c9:34:97:5e:ad:13:6a:15:f2:ee:00:3d:e9:4b:
                    9b:66:40:30:85:12:76:c7:56:1d:b2:7d:f0:72:b2:
                    3e:39:83:c8:06:2c:21:28:0e:2c:ea:4d:e0:fc:4d:
                    2b:3a:e1:b8:b5:5e:c7:ed:11:a7:cb:ee:1a:48:80:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B8:DA:D8:86:14:65:4A:EC:52:4A:48:6C:9D:02:DF:29:25:49:0C
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/323830343a3265383a3a2f33322d3333203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:54:d4:30:94:94:f1:41:89:7d:00:4b:05:da:04:1e:0d:49:
         64:ff:df:30:a8:2d:84:79:0b:e3:a6:31:35:1a:42:b0:28:eb:
         fb:86:da:a9:aa:94:df:e7:d4:5e:4d:9f:29:92:43:83:e0:dc:
         b4:e8:b3:a6:f2:c1:57:81:36:fd:e8:04:a2:2f:62:43:1c:2b:
         14:52:ee:1a:b0:6b:79:df:f3:49:70:8a:9f:75:bb:4c:98:af:
         18:2e:80:5b:a1:1d:20:07:e2:d3:d6:18:a4:28:49:8c:2d:42:
         b9:47:da:f3:bd:ce:d4:85:8d:c2:b1:f7:ea:00:f5:e7:11:51:
         07:ab:a1:4b:40:76:95:3b:ec:60:f2:ac:c6:7a:e7:64:1e:c1:
         b7:a6:83:16:cf:0f:d4:10:a8:e9:56:28:38:7c:69:27:8e:c1:
         f3:d0:e0:41:a9:58:d8:5d:19:0a:5e:ab:e8:b5:b3:32:6f:7e:
         00:b9:7b:74:bd:52:39:71:f6:11:40:a4:bb:2c:21:76:d6:91:
         f8:47:fa:7f:1c:93:b2:c2:8a:7d:93:e3:f8:fe:c9:e4:dc:34:
         39:f1:c0:14:2a:c2:7f:00:7b:4d:a1:dc:2a:aa:2c:29:86:cc:
         d4:e7:15:a8:4a:2d:57:6d:9b:eb:b5:4d:7a:47:6a:52:63:c1:
         d4:fd:b4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----