Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a383030303a3a2f33342d3334203d3e20323732363336.roa
File:                     323830343a383635343a383030303a3a2f33342d3334203d3e20323732363336.roa (raw, json)
Hash identifier:          IMzFqj5UWR1fLEQ5L1Uns2xNpb3tw4eUb2z7PEuY3/c=
Subject key identifier:   20:93:90:57:10:6F:F6:0D:51:23:3B:35:6D:37:BC:D7:07:16:90:62
Certificate issuer:       /CN=F2D25CAF9D6EFD512D9AF046D006B09AB12A7951
Certificate serial:       06E1FE8D415971711A9D91F01B4C5FD0702E6602
Authority key identifier: F2:D2:5C:AF:9D:6E:FD:51:2D:9A:F0:46:D0:06:B0:9A:B1:2A:79:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D25CAF9D6EFD512D9AF046D006B09AB12A7951.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a383030303a3a2f33342d3334203d3e20323732363336.roa
Signing time:             Thu 27 Jun 2024 12:09:49 +0000
ROA not before:           Thu 27 Jun 2024 12:04:49 +0000
ROA not after:            Thu 26 Jun 2025 12:09:49 +0000
asID:                     272636
IP address blocks:        2804:8654:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e1:fe:8d:41:59:71:71:1a:9d:91:f0:1b:4c:5f:d0:70:2e:66:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D25CAF9D6EFD512D9AF046D006B09AB12A7951
        Validity
            Not Before: Jun 27 12:04:49 2024 GMT
            Not After : Jun 26 12:09:49 2025 GMT
        Subject: CN=20939057106FF60D51233B356D37BCD707169062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:36:d4:26:54:62:e6:03:62:38:a1:65:ab:
                    bc:5f:46:ae:8d:cf:29:30:0c:df:d9:21:5e:64:9e:
                    db:a7:4f:8f:40:ad:d3:18:39:89:af:0f:35:90:e9:
                    ba:a3:bf:d6:81:e4:db:7e:8d:c3:58:9e:3c:cb:47:
                    09:91:c9:08:df:30:ef:a5:bd:2f:02:7d:17:91:f7:
                    5b:54:b5:22:ff:54:fe:02:e8:ad:23:1f:4e:e2:8b:
                    57:bf:37:f9:42:9f:00:b7:4f:a1:10:7d:25:82:74:
                    ec:52:bb:43:6c:58:18:84:97:17:06:54:03:a9:2c:
                    a9:66:4e:f0:89:59:b9:10:0e:e6:0e:58:35:46:76:
                    17:9f:f1:07:e8:2a:73:69:0a:b5:f6:c6:6d:32:48:
                    cd:d1:e5:61:7b:85:ed:93:7f:d3:12:7f:3c:4e:1f:
                    5b:62:da:3c:b9:9f:f4:01:35:b4:6e:fe:44:9a:3c:
                    ea:0b:86:8e:24:6a:17:52:41:b5:e2:3a:70:1e:be:
                    77:92:d4:93:6d:5b:4b:c5:8a:5c:13:42:8a:80:96:
                    97:68:9e:fc:12:ac:42:19:be:59:87:78:ac:6c:79:
                    11:65:5f:25:bf:9b:44:a5:11:6f:b5:24:3c:e5:07:
                    32:12:71:34:96:e2:90:62:bd:c3:a0:09:06:4f:9d:
                    a9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:93:90:57:10:6F:F6:0D:51:23:3B:35:6D:37:BC:D7:07:16:90:62
            X509v3 Authority Key Identifier:
                keyid:F2:D2:5C:AF:9D:6E:FD:51:2D:9A:F0:46:D0:06:B0:9A:B1:2A:79:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F2D25CAF9D6EFD512D9AF046D006B09AB12A7951.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D25CAF9D6EFD512D9AF046D006B09AB12A7951.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a383030303a3a2f33342d3334203d3e20323732363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8654:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8d:bc:1b:59:08:83:59:3d:b4:ae:16:13:84:2c:7c:75:06:1d:
         bd:a3:78:ed:54:ec:1b:65:84:92:30:8e:5d:d7:21:a7:37:06:
         bc:b9:6a:b7:d8:13:81:36:e2:f5:1d:94:09:d8:7e:8d:cc:60:
         4c:4e:14:9d:0b:e5:8c:d4:94:4f:4a:ba:8f:58:b2:eb:d7:1c:
         4e:b7:4d:50:b8:e3:91:43:e5:ac:f6:1c:b9:c3:57:cf:b9:dd:
         64:c0:21:a8:5d:18:a7:07:e5:83:b5:71:13:01:7f:8c:59:53:
         41:26:d8:a0:98:7d:c1:fb:23:78:fe:bb:7c:9a:56:f9:39:a0:
         8d:68:de:c9:dc:75:8b:b2:eb:22:4c:f6:17:a4:e2:07:45:0d:
         87:1e:ab:84:48:e5:5f:76:f7:d3:b6:e1:b1:d2:c0:76:6d:b9:
         14:57:e3:31:c0:d7:a5:95:77:43:87:75:65:36:8c:9c:8c:b2:
         df:18:bf:61:83:c4:fb:11:df:6b:00:6c:fd:ed:31:a1:48:e5:
         6f:d0:64:46:7d:9a:b6:1a:34:19:64:c4:70:4f:d8:00:a7:f7:
         2a:6b:74:6e:22:ee:bd:26:f8:23:5c:90:3b:22:71:7a:f4:dc:
         88:9e:0a:3b:4b:6c:74:e6:4b:61:4c:b3:28:3a:e9:7e:6c:c9:
         15:93:dc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----