Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/323830343a363465383a3a2f33322d3332203d3e20323639343537.roa
File:                     323830343a363465383a3a2f33322d3332203d3e20323639343537.roa (raw, json)
Hash identifier:          oBbVTztBydcvUwGPQJwDqlFX3XM+NuEfJLR/ewMkCpk=
Subject key identifier:   AA:C0:EB:25:82:2C:A0:5F:E3:55:90:C9:7E:55:FF:C6:0D:45:A6:41
Certificate issuer:       /CN=3361B78662C4F4994A60931D16B5383E3AB4E319
Certificate serial:       5FD6085ED5FB959773C0529C10BD31743C33B3EE
Authority key identifier: 33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/323830343a363465383a3a2f33322d3332203d3e20323639343537.roa
Signing time:             Thu 06 Jun 2024 12:49:16 +0000
ROA not before:           Thu 06 Jun 2024 12:44:16 +0000
ROA not after:            Thu 05 Jun 2025 12:49:16 +0000
asID:                     269457
IP address blocks:        2804:64e8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d6:08:5e:d5:fb:95:97:73:c0:52:9c:10:bd:31:74:3c:33:b3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3361B78662C4F4994A60931D16B5383E3AB4E319
        Validity
            Not Before: Jun  6 12:44:16 2024 GMT
            Not After : Jun  5 12:49:16 2025 GMT
        Subject: CN=AAC0EB25822CA05FE35590C97E55FFC60D45A641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:85:00:cb:de:94:03:46:39:97:f5:c7:25:
                    ac:28:ec:3d:44:10:8e:83:f0:72:d5:77:0e:95:12:
                    71:78:a3:ed:ae:cf:de:f4:19:a9:a9:4b:d8:12:1e:
                    74:3f:89:88:6e:cf:de:1c:30:4a:67:52:95:5d:bd:
                    b9:d1:7d:f2:46:60:20:e2:d1:e9:39:8e:52:a8:8e:
                    9d:ba:a5:2f:aa:4e:e2:f5:d8:d3:11:8b:f9:19:97:
                    26:10:9c:8e:8a:49:25:6c:b4:60:e3:8c:13:54:d6:
                    8e:4c:b7:01:f9:ff:b9:f2:a0:09:63:99:a6:45:40:
                    14:cc:de:73:26:45:6a:20:58:b9:84:6c:2e:69:6e:
                    93:c6:3f:7b:b8:75:e9:a1:2c:6b:f3:e8:f3:a3:eb:
                    d1:43:a8:93:9e:0a:17:df:5c:7c:7a:7a:51:fc:8b:
                    57:8a:62:4b:19:47:a9:79:6f:8b:b8:9c:d6:01:d0:
                    00:8c:69:be:89:a1:bb:af:89:82:87:17:d0:4d:e5:
                    56:8d:7d:c1:68:0c:00:d6:9a:dd:06:75:dd:0d:2e:
                    d2:8a:a1:5b:6a:8c:e8:37:6c:b6:c5:ef:6a:09:08:
                    f3:d9:d1:94:5f:fb:a7:8f:47:a1:04:26:93:96:3a:
                    76:dc:0c:b9:42:b1:59:d6:e1:d8:3a:1b:86:95:bd:
                    c1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C0:EB:25:82:2C:A0:5F:E3:55:90:C9:7E:55:FF:C6:0D:45:A6:41
            X509v3 Authority Key Identifier:
                keyid:33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/3361B78662C4F4994A60931D16B5383E3AB4E319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/323830343a363465383a3a2f33322d3332203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:a3:ce:41:e8:74:58:8b:b8:5d:9f:1d:12:7a:8e:00:b1:63:
         23:2e:55:43:2f:3e:1c:c1:a1:c4:6c:5b:1a:3b:ae:82:08:05:
         4a:f2:ca:bd:15:d2:f8:50:ac:50:1a:4f:7e:19:90:6c:b4:7b:
         67:86:46:cf:bc:75:f3:f3:7b:17:2f:cd:d8:0b:ee:13:a4:43:
         1a:6c:ee:35:03:7d:d3:84:11:bb:b1:ae:fd:45:21:a9:e8:1a:
         39:c9:2a:ee:f0:a6:59:ad:29:36:25:8c:d0:71:45:b5:1d:1e:
         b0:dd:fb:eb:83:49:f0:47:67:ca:b5:6c:a9:89:d5:9f:ad:6f:
         79:bc:7d:79:8f:17:3f:19:98:57:79:c7:94:6a:4b:ed:a8:8c:
         cd:4b:81:32:ba:af:96:53:7d:2f:04:8c:9b:79:5e:9c:37:4c:
         28:0f:ff:dc:45:2b:89:d9:1a:06:45:51:bc:52:34:32:74:fb:
         e9:de:da:4d:b8:a2:84:bb:51:b4:02:77:ba:29:cb:ea:4f:9d:
         f9:c2:39:43:7b:db:30:3c:47:0d:95:a0:3c:1a:f4:80:51:f2:
         ec:2b:cd:8d:2e:ae:e1:ce:c9:8e:84:f8:5c:20:f0:29:59:5e:
         25:20:54:a5:92:51:24:e7:04:39:9d:e0:0f:d2:e9:4e:85:e8:
         e2:c2:bd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----