Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/323830343a323234633a3a2f33322d3438203d3e20323632373639.roa
File:                     323830343a323234633a3a2f33322d3438203d3e20323632373639.roa (raw, json)
Hash identifier:          NLTxSRr/joTK3cS+e0uW/5vLIESLmIH9/pKItVFkjkY=
Subject key identifier:   27:1D:44:D3:FD:81:D2:56:35:F9:CF:7B:56:AB:AC:60:C7:12:74:91
Certificate issuer:       /CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
Certificate serial:       56479F3D3C274717921E45193A539DD1834C5399
Authority key identifier: C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/323830343a323234633a3a2f33322d3438203d3e20323632373639.roa
Signing time:             Fri 05 Apr 2024 01:07:58 +0000
ROA not before:           Fri 05 Apr 2024 01:02:58 +0000
ROA not after:            Fri 04 Apr 2025 01:07:58 +0000
asID:                     262769
IP address blocks:        2804:224c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:47:9f:3d:3c:27:47:17:92:1e:45:19:3a:53:9d:d1:83:4c:53:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
        Validity
            Not Before: Apr  5 01:02:58 2024 GMT
            Not After : Apr  4 01:07:58 2025 GMT
        Subject: CN=271D44D3FD81D25635F9CF7B56ABAC60C7127491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c4:e0:6a:cc:40:09:79:76:eb:80:10:f6:d9:
                    b8:75:3a:7b:c0:93:25:f5:a6:4e:b8:a5:41:e6:36:
                    fd:0d:cc:e7:db:f2:e6:3f:34:91:68:3a:94:90:d7:
                    2a:9a:5f:69:e4:a1:39:dc:e0:9d:48:df:19:2b:c5:
                    1c:63:2b:ba:cf:49:c1:5d:b3:19:82:09:80:de:3d:
                    bc:0a:60:d8:db:f2:82:e8:f0:73:e5:7d:62:9e:56:
                    54:35:30:ae:d2:88:90:9c:ee:18:df:05:a9:f0:94:
                    27:fe:3a:69:72:a9:06:80:9a:53:f4:0d:3e:81:e5:
                    49:55:91:03:8a:f2:c2:7f:b1:ee:7b:93:66:26:25:
                    90:ce:06:7a:7a:0e:9d:97:99:70:c4:52:8d:06:b0:
                    9d:7b:80:83:1d:3e:f7:29:f0:91:42:be:04:e2:cc:
                    aa:39:85:d0:dc:cd:80:b0:1c:77:78:74:15:9c:e3:
                    e6:26:dc:fd:15:64:95:ea:76:1e:7d:2d:fd:ec:70:
                    0a:30:cf:b3:28:43:cd:77:ef:ba:51:29:8a:89:2d:
                    ea:c8:ca:0e:99:ec:c4:5d:a5:a2:9c:bb:d9:26:0e:
                    fa:53:cb:0e:62:e0:cc:3b:3a:9d:58:54:32:d9:58:
                    df:5c:45:a2:b4:86:a4:0c:f5:25:73:34:b7:19:2a:
                    40:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1D:44:D3:FD:81:D2:56:35:F9:CF:7B:56:AB:AC:60:C7:12:74:91
            X509v3 Authority Key Identifier:
                keyid:C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/323830343a323234633a3a2f33322d3438203d3e20323632373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:224c::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:cf:e9:59:1a:d3:87:24:4d:d2:75:28:78:b1:86:c7:88:85:
         61:66:72:98:38:6d:bf:4d:37:91:b7:df:cc:38:3c:24:c1:c5:
         7f:5d:37:ca:49:36:2e:2e:b9:52:20:31:54:bb:b5:74:1c:f2:
         31:4c:39:98:f4:84:0c:33:5d:f3:17:02:8b:13:31:af:c0:35:
         50:2e:86:d2:16:5b:9d:a2:64:35:f8:26:23:32:c9:ca:a2:5c:
         d1:a5:7c:c8:be:e1:07:c4:3f:f4:51:db:e7:14:c0:dd:fb:bf:
         c5:e1:77:df:91:bd:c6:b8:e8:22:e3:59:65:d0:80:fe:ab:c6:
         01:44:7f:08:00:d8:b2:c3:ab:21:91:3e:cb:b8:17:46:68:31:
         0e:8c:6f:dc:fe:1f:49:9b:67:b2:cc:ed:50:f4:43:a9:91:06:
         1e:cf:d2:66:88:f9:66:55:11:20:58:29:8e:48:04:6a:9e:9f:
         af:72:82:9c:9c:64:bb:b0:24:a9:ed:68:f8:c6:6d:8c:b3:1a:
         70:88:6a:e0:f8:50:22:88:a3:c2:3f:c6:9a:0c:62:be:91:77:
         10:ca:5a:2c:ca:b1:5f:85:1d:6d:2b:8b:24:eb:50:87:e5:36:
         f4:ac:3e:5b:41:12:80:d9:67:b5:ba:8a:38:66:f4:d3:d5:d4:
         d2:88:8e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----