Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/1/323830343a353032633a3a2f33322d3332203d3e20323638333733.roa
File:                     323830343a353032633a3a2f33322d3332203d3e20323638333733.roa (raw, json)
Hash identifier:          /wQnbCmjLOFY9Gu0pI5bAWjdLx8iYwJUgC8wAKajzFs=
Subject key identifier:   9C:4C:D2:7D:11:11:D5:A5:8C:06:8F:26:2D:AC:36:F6:D2:80:63:B3
Certificate issuer:       /CN=8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355
Certificate serial:       32F4628B664D029A96C26F5B1DD4CBF84FE0A3D0
Authority key identifier: 8D:97:3A:12:CA:B9:23:FD:AF:D9:F9:FB:AE:3D:58:25:E9:E1:63:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/1/323830343a353032633a3a2f33322d3332203d3e20323638333733.roa
Signing time:             Thu 04 Apr 2024 16:51:53 +0000
ROA not before:           Thu 04 Apr 2024 16:46:53 +0000
ROA not after:            Thu 03 Apr 2025 16:51:53 +0000
asID:                     268373
IP address blocks:        2804:502c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f4:62:8b:66:4d:02:9a:96:c2:6f:5b:1d:d4:cb:f8:4f:e0:a3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355
        Validity
            Not Before: Apr  4 16:46:53 2024 GMT
            Not After : Apr  3 16:51:53 2025 GMT
        Subject: CN=9C4CD27D1111D5A58C068F262DAC36F6D28063B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:15:36:d2:74:54:6d:c3:cb:ae:de:4d:60:
                    e0:92:27:89:12:57:6a:b7:7c:10:f0:0a:b9:3b:99:
                    3e:19:72:5c:10:b2:99:3d:ba:35:58:f9:63:6b:12:
                    7e:ae:b2:af:3f:b0:34:0b:f1:ff:c6:82:5d:bf:a4:
                    4a:b9:40:86:23:29:3e:b7:14:e3:9a:54:70:08:1b:
                    44:e6:56:07:08:66:fc:89:9f:8a:02:d1:33:8c:71:
                    63:5a:76:cd:aa:29:0f:1a:f5:8e:d9:6e:55:9c:82:
                    9f:38:44:31:34:0a:1e:b9:26:8b:7e:a5:05:e7:cb:
                    e0:49:bf:54:de:f6:38:28:ef:fc:a2:7a:93:7e:16:
                    20:6c:58:e9:d3:cf:d3:e3:93:d3:54:83:f5:46:18:
                    2c:c6:90:cc:5d:5e:be:90:da:c7:f1:e1:8f:de:13:
                    bf:f3:9d:b3:c4:a3:5b:7c:2f:f2:c5:38:ee:ad:e5:
                    f7:2d:6f:fb:b0:d6:ff:b8:3d:1c:ff:81:18:e1:8d:
                    a4:2b:19:34:7a:71:4e:74:8f:1d:ae:13:06:bb:18:
                    6c:a3:ba:de:28:f2:00:8e:4c:9a:af:84:c4:c6:ed:
                    fd:0b:fc:58:3a:e7:a9:25:53:de:30:d0:d7:d6:ae:
                    27:17:95:d2:fa:c1:50:78:b8:48:75:7a:39:e4:93:
                    50:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4C:D2:7D:11:11:D5:A5:8C:06:8F:26:2D:AC:36:F6:D2:80:63:B3
            X509v3 Authority Key Identifier:
                keyid:8D:97:3A:12:CA:B9:23:FD:AF:D9:F9:FB:AE:3D:58:25:E9:E1:63:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/1/8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D973A12CAB923FDAFD9F9FBAE3D5825E9E16355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/1/323830343a353032633a3a2f33322d3332203d3e20323638333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:502c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:2e:f4:0a:8c:36:d7:3f:a8:41:71:26:b2:b5:91:4e:fc:27:
         d7:d7:bb:d0:2c:3e:94:59:ab:8e:92:23:af:27:75:da:3d:a3:
         98:55:f1:2c:9b:7a:ad:50:b3:db:a0:52:14:f4:7d:37:23:d6:
         26:7e:29:39:33:ee:c8:0f:f7:d1:74:69:fd:46:9a:0c:c4:87:
         31:6d:76:09:e2:f3:b4:ee:51:1d:2e:d1:0a:3c:a4:c0:92:e4:
         f3:6a:3a:b6:a2:23:f5:c2:2e:e9:17:da:11:51:3c:fd:a2:ec:
         7b:be:b9:c3:34:e6:b7:ea:56:87:c5:0b:cd:98:52:34:6e:43:
         f5:31:3a:3a:ce:92:29:07:f3:47:00:9b:74:93:ab:fd:a5:63:
         22:10:02:d8:8c:9c:37:f8:e2:34:fb:bd:02:d5:77:16:55:90:
         f8:ee:10:5b:c8:6f:12:10:1c:c2:eb:14:e4:39:14:d8:8d:77:
         3b:74:13:27:e3:82:7d:8f:b7:6a:87:4f:a1:b7:f3:a7:58:48:
         7f:b9:9a:9a:35:9d:33:cc:8b:f4:9b:ca:f4:30:b9:78:a9:a0:
         c7:f1:00:6f:8b:b8:5d:aa:c0:10:41:60:cd:a6:1b:fe:40:36:
         60:19:ca:3c:1f:c2:a1:fb:52:b2:b1:49:60:c9:42:4c:b4:84:
         66:ff:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----