Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/1/323830343a343531383a3a2f33322d3438203d3e20323637363732.roa
File:                     323830343a343531383a3a2f33322d3438203d3e20323637363732.roa (raw, json)
Hash identifier:          lEi26ydUEBFw3C9Mc9y90fQX5J+S2/8PPIzFgayUz3E=
Subject key identifier:   71:87:AA:71:49:F0:C0:5C:6E:64:28:69:5D:47:BC:9C:5A:EA:98:B7
Certificate issuer:       /CN=FEB471909D761B4C2CDF20121D0BF43D091C1D28
Certificate serial:       31655885EFDA99ADFD5688F06F2CF53A02B6B23D
Authority key identifier: FE:B4:71:90:9D:76:1B:4C:2C:DF:20:12:1D:0B:F4:3D:09:1C:1D:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB471909D761B4C2CDF20121D0BF43D091C1D28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/1/323830343a343531383a3a2f33322d3438203d3e20323637363732.roa
Signing time:             Wed 10 Apr 2024 13:17:56 +0000
ROA not before:           Wed 10 Apr 2024 13:12:56 +0000
ROA not after:            Wed 09 Apr 2025 13:17:56 +0000
asID:                     267672
IP address blocks:        2804:4518::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:65:58:85:ef:da:99:ad:fd:56:88:f0:6f:2c:f5:3a:02:b6:b2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEB471909D761B4C2CDF20121D0BF43D091C1D28
        Validity
            Not Before: Apr 10 13:12:56 2024 GMT
            Not After : Apr  9 13:17:56 2025 GMT
        Subject: CN=7187AA7149F0C05C6E6428695D47BC9C5AEA98B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:89:f6:6f:27:37:5f:76:aa:a4:9b:32:ef:
                    18:1d:90:f6:73:0a:07:65:d4:43:c3:c1:a7:06:66:
                    9c:34:dc:7d:80:f8:89:27:4d:d0:cc:5d:d7:b7:f6:
                    48:29:ff:54:a7:66:87:e9:38:26:a6:ad:4f:cd:19:
                    ba:17:89:3a:b1:d8:a6:d8:15:16:e6:6b:2d:bd:50:
                    37:3e:95:5d:9c:ab:2c:bc:7a:9e:45:0f:fb:2f:8f:
                    90:be:48:e8:28:2b:4e:09:c8:2b:66:5b:8a:e2:96:
                    e0:31:64:93:a0:ad:e3:c5:55:18:18:d8:fd:89:47:
                    7a:2d:3c:f7:7c:4e:d7:ed:09:5c:14:4d:f1:40:9c:
                    85:b9:73:4c:13:7f:c2:4d:c0:eb:ae:e2:2b:36:de:
                    36:73:05:ab:cc:18:14:0f:87:46:16:1f:03:8a:ed:
                    43:97:f4:c8:7d:f6:ae:97:da:a2:df:b7:df:f6:18:
                    7d:86:62:bc:ac:8b:07:e0:49:82:8d:a6:9d:16:a6:
                    7e:56:df:0a:5c:2a:b1:f3:98:eb:71:20:96:fa:59:
                    06:63:6b:dd:1f:11:3b:95:d1:05:01:15:61:5a:a6:
                    67:56:91:11:ee:fb:09:04:43:2c:67:91:04:95:95:
                    aa:3a:2b:c3:ff:18:39:cd:ff:19:2f:96:96:6f:4f:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:87:AA:71:49:F0:C0:5C:6E:64:28:69:5D:47:BC:9C:5A:EA:98:B7
            X509v3 Authority Key Identifier:
                keyid:FE:B4:71:90:9D:76:1B:4C:2C:DF:20:12:1D:0B:F4:3D:09:1C:1D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/1/FEB471909D761B4C2CDF20121D0BF43D091C1D28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB471909D761B4C2CDF20121D0BF43D091C1D28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/1/323830343a343531383a3a2f33322d3438203d3e20323637363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4518::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:7d:a3:1e:c3:1a:ba:46:33:62:e4:5c:a2:e4:4f:50:9c:
         35:67:0e:d0:7d:91:95:32:46:ee:3e:4d:13:2a:52:09:50:82:
         20:b1:4d:38:01:18:7e:2b:4e:b5:c0:06:7c:fd:5c:e9:1e:ef:
         f6:e3:e6:cc:58:e6:5a:6d:f6:14:93:d4:b6:3d:f2:52:dd:ad:
         15:2e:44:4b:b1:f8:09:48:c4:84:ee:02:3d:ad:0d:bd:4a:b1:
         f2:13:de:5a:62:8a:9e:b5:f5:dd:cf:02:6b:40:80:4c:9a:2d:
         c5:c6:d7:2d:07:fd:46:42:74:81:65:da:a0:3d:2b:5b:fd:af:
         0e:2f:cb:f3:56:9e:83:0b:05:43:91:4c:99:eb:49:59:18:05:
         c6:ee:09:54:ed:7a:e7:9b:8f:2f:23:bb:47:5c:dd:17:75:6d:
         a0:30:c2:aa:5b:8f:23:8e:ca:1e:04:f7:b6:a9:c2:38:54:2a:
         e2:af:67:3d:2e:09:41:3b:d0:43:3b:24:26:ad:b5:05:2a:07:
         f8:05:f5:3a:0e:81:8d:10:46:c9:8c:24:97:8e:61:e0:7b:7b:
         6b:a3:86:5b:9b:45:51:ab:96:72:ed:b5:d6:54:6d:ac:13:77:
         4a:0e:aa:27:f8:d6:43:7c:50:89:67:11:9a:b1:a8:3a:ac:03:
         26:40:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----