Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/323830343a316634633a3a2f33322d3332203d3e20323639313735.roa
File:                     323830343a316634633a3a2f33322d3332203d3e20323639313735.roa (raw, json)
Hash identifier:          ypaak6bBYnqrlGUndH+uQyZsNy+CiS4wdGn0Z+2otfc=
Subject key identifier:   0F:5C:7D:F6:68:D3:5E:E1:2E:49:93:BE:42:A1:E2:AB:A5:97:68:45
Certificate issuer:       /CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
Certificate serial:       27E34B9094E6B955CFF0D0CCDCFAB12E2BAC25E8
Authority key identifier: D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/323830343a316634633a3a2f33322d3332203d3e20323639313735.roa
Signing time:             Wed 03 Apr 2024 21:10:51 +0000
ROA not before:           Wed 03 Apr 2024 21:05:51 +0000
ROA not after:            Wed 02 Apr 2025 21:10:51 +0000
asID:                     269175
IP address blocks:        2804:1f4c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e3:4b:90:94:e6:b9:55:cf:f0:d0:cc:dc:fa:b1:2e:2b:ac:25:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
        Validity
            Not Before: Apr  3 21:05:51 2024 GMT
            Not After : Apr  2 21:10:51 2025 GMT
        Subject: CN=0F5C7DF668D35EE12E4993BE42A1E2ABA5976845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:c0:bd:5f:c1:92:4f:a6:31:5a:3d:9b:d7:
                    99:b5:28:8a:da:8d:ee:e4:40:2f:f8:d6:17:69:32:
                    bc:04:b6:97:ff:c9:90:35:47:94:a6:fe:10:a2:e2:
                    7e:06:14:7c:20:fa:20:de:86:7e:79:a4:99:ea:69:
                    27:d8:f5:81:5f:ae:60:a2:52:1f:c7:0a:9d:a1:2a:
                    46:34:c5:61:f6:c7:7f:59:ba:35:63:5d:08:49:2d:
                    d8:91:ed:0a:74:3b:82:25:ad:8a:47:7b:7b:53:11:
                    4b:f3:f4:62:91:6d:6e:ba:c7:69:d0:cc:8f:10:68:
                    c2:8c:43:38:e6:3a:2b:fe:67:05:8a:88:da:e9:a4:
                    bd:47:2d:75:2b:36:f2:43:9f:87:81:a0:e3:59:34:
                    57:c2:b2:f4:db:74:38:76:17:39:b6:ee:f8:94:9f:
                    50:fc:59:ec:35:c7:03:c0:a8:c5:51:8e:ce:e5:3b:
                    31:22:fa:97:8a:5c:dd:37:97:28:d6:82:b2:80:74:
                    ce:18:88:f4:8e:d6:a4:8d:5a:43:f7:e3:2a:e9:aa:
                    3a:88:dc:16:d9:42:5f:9c:3c:c4:23:ef:e5:81:97:
                    02:04:fa:0a:16:6a:ad:c8:c2:c1:3c:10:70:50:88:
                    72:f4:fc:15:86:a0:cb:c2:b0:0b:c4:72:d3:52:e3:
                    35:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:7D:F6:68:D3:5E:E1:2E:49:93:BE:42:A1:E2:AB:A5:97:68:45
            X509v3 Authority Key Identifier:
                keyid:D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/323830343a316634633a3a2f33322d3332203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:db:bd:c5:49:01:bb:e6:86:39:ae:b5:84:b2:25:39:6f:64:
         57:60:eb:c6:d3:e6:80:7f:f6:9b:01:41:8b:fb:cc:7a:a6:71:
         0f:80:fd:c1:ce:5f:7f:2e:c4:82:ea:0c:5b:20:3d:d0:5e:05:
         3f:1d:f8:e3:95:fe:35:5f:41:bd:a5:d8:7e:68:9a:70:c7:8d:
         64:58:5f:fc:9e:46:8b:6a:ea:14:e1:5a:d0:f9:af:87:74:3d:
         96:5f:2b:b5:2e:84:5a:9b:a5:28:ff:d1:ab:10:0b:f2:38:93:
         b4:ff:40:f4:c9:7b:ea:e6:31:2c:26:32:5c:bb:b1:b9:87:1b:
         63:70:34:e5:d0:96:05:e9:63:df:0a:75:db:0e:0d:27:b9:d7:
         7b:38:2c:86:47:7b:82:0d:aa:cc:5d:fd:2e:de:4d:e9:1e:d6:
         e2:0a:cd:1b:55:de:60:fd:83:6b:4a:fb:e3:96:05:44:2e:16:
         5c:6f:41:e3:f9:13:48:a2:b4:75:51:67:ca:dd:eb:76:f5:b3:
         91:d5:54:01:e6:08:6d:44:2a:3c:b1:86:7d:e3:ab:de:61:f8:
         41:ac:de:02:c6:78:6d:ac:86:a8:58:17:3f:6c:8e:9e:48:dc:
         0d:b6:d7:f4:73:cc:9e:82:99:64:3a:bf:43:e2:56:60:1c:05:
         a6:c3:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----