Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a3a2f33322d3332203d3e20323638343437.roa
File:                     323830343a353135633a3a2f33322d3332203d3e20323638343437.roa (raw, json)
Hash identifier:          HPBrs7obI4eYPy9CjsZnxowwaXRdu7XyWb2CnZZFo7M=
Subject key identifier:   22:68:D9:29:7D:28:00:FA:9C:20:36:18:54:C2:AA:70:FE:3F:D1:9E
Certificate issuer:       /CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Certificate serial:       60FCEB5696A14848849627E172D7F50F07200DCD
Authority key identifier: 3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a3a2f33322d3332203d3e20323638343437.roa
Signing time:             Tue 08 Oct 2024 22:43:41 +0000
ROA not before:           Tue 08 Oct 2024 22:38:41 +0000
ROA not after:            Tue 07 Oct 2025 22:43:41 +0000
asID:                     268447
IP address blocks:        2804:515c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fc:eb:56:96:a1:48:48:84:96:27:e1:72:d7:f5:0f:07:20:0d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
        Validity
            Not Before: Oct  8 22:38:41 2024 GMT
            Not After : Oct  7 22:43:41 2025 GMT
        Subject: CN=2268D9297D2800FA9C20361854C2AA70FE3FD19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:10:ae:7a:45:80:b9:03:8a:25:c0:9d:b4:ff:
                    8b:21:e2:d8:28:cf:f4:42:c8:9e:06:ff:a5:74:4e:
                    e4:06:36:14:f1:e2:10:90:33:69:39:b4:e1:18:f3:
                    f2:23:31:e8:57:8d:66:df:f8:7e:47:90:26:bc:97:
                    4d:92:e4:29:17:7f:b0:15:86:b7:df:28:92:6f:36:
                    3d:d5:00:61:0a:ac:e3:8a:df:06:42:60:09:b3:5b:
                    6f:bf:3c:ef:30:25:0f:78:74:b7:cb:71:58:33:09:
                    0e:d0:66:91:6b:ce:dd:c4:b1:f6:02:64:8f:18:14:
                    c8:d5:f9:4e:a1:2c:7e:ef:c8:f5:62:d4:ca:1f:e8:
                    84:1b:66:df:89:b4:ca:17:4d:b8:24:9d:87:eb:9c:
                    d8:bc:d2:89:e8:e0:8e:27:31:63:53:f0:8e:e6:46:
                    a7:c3:fd:76:b4:52:4b:c7:c4:d5:dc:1c:9a:da:ce:
                    95:f3:2f:aa:7b:63:67:eb:98:91:8e:0a:b3:28:b7:
                    c8:89:d4:78:c5:07:62:93:de:6e:7f:8a:2d:4c:b2:
                    43:93:a4:ca:6c:4f:26:1e:85:a0:66:63:20:91:a1:
                    df:b3:23:e2:3c:70:84:1d:6e:6c:39:00:fc:9e:ae:
                    b9:5e:cf:3f:9a:12:f1:85:fa:12:d2:50:5d:ce:b5:
                    e7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:68:D9:29:7D:28:00:FA:9C:20:36:18:54:C2:AA:70:FE:3F:D1:9E
            X509v3 Authority Key Identifier:
                keyid:3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a3a2f33322d3332203d3e20323638343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:515c::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:92:c4:8e:a4:73:ae:dd:a4:75:f2:30:72:3d:3b:3d:8b:fb:
         af:c0:af:1d:1f:86:67:9e:17:11:76:fc:ca:55:9e:e9:5d:d1:
         a6:e6:06:8c:40:4d:6d:7a:97:d9:dc:46:4f:a4:cc:07:f5:b8:
         4f:3c:4e:82:a6:7f:ea:0e:11:36:e0:23:3d:3b:68:a6:a1:49:
         f8:96:8e:2e:2e:ed:0a:bc:a9:e8:cc:22:93:8a:4a:05:9c:06:
         84:b6:b0:b4:06:d6:e6:ea:54:7c:82:9e:81:a8:93:00:52:44:
         1b:0c:04:99:cf:0f:a5:22:e2:43:03:3a:75:74:9d:88:40:9f:
         6b:1d:8d:08:b7:8a:45:92:06:61:9c:5a:7a:92:90:fb:fc:02:
         f0:c0:0f:9e:c5:59:5f:40:3d:c8:46:3f:24:a8:30:55:01:d9:
         80:86:4c:4b:01:92:f1:61:3e:94:1e:fd:68:b3:55:c2:54:ce:
         0c:d2:ca:2b:99:c7:f9:dc:d3:65:f3:33:90:ea:e2:36:97:f8:
         77:b5:7f:a1:ec:9a:76:1b:b5:ed:81:44:3e:1c:35:90:a5:70:
         6c:e6:dc:7d:1c:db:d7:cf:fa:f0:f6:91:cb:d1:3f:71:85:0d:
         2a:ef:0d:3d:5a:80:42:55:b9:7c:05:ee:43:54:8f:a8:b4:f9:
         2d:e0:24:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----