Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a3a2f33342d3334203d3e20323732363336.roa
File:                     323830343a383635343a3a2f33342d3334203d3e20323732363336.roa (raw, json)
Hash identifier:          LeX1ndt1FLSfkESXkPRoPtq33snsaPjDB/PdW85Rh8g=
Subject key identifier:   FD:05:C4:E1:CC:83:1D:5B:1C:7E:0B:CC:4D:FB:D0:1F:06:A3:8F:C6
Certificate issuer:       /CN=F2D25CAF9D6EFD512D9AF046D006B09AB12A7951
Certificate serial:       0D4AC99B9AB4F150FFA105386AE1814377CD0B5D
Authority key identifier: F2:D2:5C:AF:9D:6E:FD:51:2D:9A:F0:46:D0:06:B0:9A:B1:2A:79:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D25CAF9D6EFD512D9AF046D006B09AB12A7951.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a3a2f33342d3334203d3e20323732363336.roa
Signing time:             Thu 27 Jun 2024 12:09:49 +0000
ROA not before:           Thu 27 Jun 2024 12:04:49 +0000
ROA not after:            Thu 26 Jun 2025 12:09:49 +0000
asID:                     272636
IP address blocks:        2804:8654::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4a:c9:9b:9a:b4:f1:50:ff:a1:05:38:6a:e1:81:43:77:cd:0b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D25CAF9D6EFD512D9AF046D006B09AB12A7951
        Validity
            Not Before: Jun 27 12:04:49 2024 GMT
            Not After : Jun 26 12:09:49 2025 GMT
        Subject: CN=FD05C4E1CC831D5B1C7E0BCC4DFBD01F06A38FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:e8:50:48:f4:28:4c:0a:fd:08:3b:87:74:
                    3c:ec:9c:91:43:83:94:45:59:1c:c2:32:96:b5:9c:
                    94:27:c0:e3:6b:9a:b3:c6:fa:39:22:0c:d8:74:5b:
                    86:a2:71:a7:cc:00:ee:2a:12:68:98:9c:e4:86:a6:
                    a0:4f:a6:ec:12:b4:64:99:f5:cf:3b:e0:c7:a6:34:
                    ce:b0:8d:05:16:76:76:fa:84:20:9a:66:ca:15:ae:
                    78:3f:bb:88:3c:d0:2c:33:35:01:dc:c7:2a:96:cb:
                    4f:26:39:cc:6d:8b:71:7e:d8:1c:db:00:41:c3:a4:
                    93:3a:0c:70:27:e9:9a:0d:a0:d9:8e:af:70:50:c3:
                    8b:f1:f9:1a:fd:e8:9f:d9:c3:b2:a1:1a:52:6a:63:
                    a4:e5:bd:f3:46:e3:9c:4e:1b:48:bf:1f:85:b0:4e:
                    8e:6b:e9:95:15:f4:c2:43:0c:fa:61:1c:c6:6a:1c:
                    a0:b4:99:30:de:86:3b:6c:a9:86:ab:9c:03:47:0b:
                    39:d3:fc:58:32:f7:b8:96:68:78:8a:33:6e:fc:78:
                    8d:09:fe:55:69:f0:9a:ec:a5:af:e5:6f:03:82:f4:
                    3d:f4:31:c2:99:8e:34:4d:01:e4:67:18:0a:05:d9:
                    0d:9d:45:ab:8f:3a:89:ab:ca:b9:6d:71:d6:17:c9:
                    62:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:05:C4:E1:CC:83:1D:5B:1C:7E:0B:CC:4D:FB:D0:1F:06:A3:8F:C6
            X509v3 Authority Key Identifier:
                keyid:F2:D2:5C:AF:9D:6E:FD:51:2D:9A:F0:46:D0:06:B0:9A:B1:2A:79:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F2D25CAF9D6EFD512D9AF046D006B09AB12A7951.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D25CAF9D6EFD512D9AF046D006B09AB12A7951.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a3a2f33342d3334203d3e20323732363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8654::/34

    Signature Algorithm: sha256WithRSAEncryption
         6f:1e:a6:2f:5b:e4:99:09:34:fb:da:9a:99:ec:c1:22:85:68:
         f0:e7:67:31:78:3b:8b:c1:c2:11:fa:0a:ad:31:05:81:76:15:
         9d:9e:62:de:30:70:70:64:fd:18:a5:1d:8d:20:d1:f5:9c:53:
         f5:93:0d:cc:55:28:01:a5:6f:41:ca:80:df:f3:0a:a2:ac:04:
         93:24:cc:13:4c:5a:bc:d1:de:2a:ba:b0:03:d8:45:89:73:39:
         ca:e0:a9:af:4c:34:50:78:23:c2:87:66:e6:20:b5:78:44:13:
         3a:47:22:77:ea:10:ab:7e:c6:3d:de:66:28:fa:74:6e:70:cb:
         a6:01:d2:08:16:7c:e2:52:5c:95:13:63:93:89:22:36:72:2f:
         54:3d:7e:89:80:f2:6d:54:95:ca:cb:77:3c:8a:fd:f2:97:91:
         9e:5a:98:83:01:59:0d:98:81:33:fe:b2:0b:8d:f3:bf:fd:db:
         aa:10:24:f0:50:95:5c:82:77:06:ab:09:49:ed:cc:2a:06:18:
         d1:b4:98:01:75:d6:d4:f0:98:f0:74:f0:9d:e1:5d:8b:47:de:
         97:86:b2:0e:e5:a0:a2:d2:b2:ec:9b:73:df:0c:18:f6:c7:56:
         68:b3:86:0e:1c:29:e9:2f:39:95:c0:f6:4b:d7:bf:31:82:76:
         60:e2:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----