Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d3332203d3e20323636393334.roa
File:                     323830343a343538633a3a2f33322d3332203d3e20323636393334.roa (raw, json)
Hash identifier:          NQZddBHrJKr5k7gg7Xs/1Eeng6t60XznXvwtO4lU/6o=
Subject key identifier:   8C:6D:EE:91:16:4A:A1:A4:5F:5E:8F:A7:69:D7:6E:FB:B8:59:A7:1C
Certificate issuer:       /CN=C609D0507CD7515470005C802AA87E98DFB3A332
Certificate serial:       58463D04E7FC7FEE95F9F48628F7C43CB8CAD659
Authority key identifier: C6:09:D0:50:7C:D7:51:54:70:00:5C:80:2A:A8:7E:98:DF:B3:A3:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C609D0507CD7515470005C802AA87E98DFB3A332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d3332203d3e20323636393334.roa
Signing time:             Thu 18 Jul 2024 03:55:34 +0000
ROA not before:           Thu 18 Jul 2024 03:50:34 +0000
ROA not after:            Thu 17 Jul 2025 03:55:34 +0000
asID:                     266934
IP address blocks:        2804:458c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:46:3d:04:e7:fc:7f:ee:95:f9:f4:86:28:f7:c4:3c:b8:ca:d6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C609D0507CD7515470005C802AA87E98DFB3A332
        Validity
            Not Before: Jul 18 03:50:34 2024 GMT
            Not After : Jul 17 03:55:34 2025 GMT
        Subject: CN=8C6DEE91164AA1A45F5E8FA769D76EFBB859A71C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:2f:06:71:32:e2:bb:29:75:22:c9:21:72:
                    34:15:79:75:50:a3:ff:e5:a6:98:70:d8:d3:6a:ac:
                    b9:78:df:72:57:34:d1:4b:d4:40:7c:c2:08:e4:ed:
                    b2:a1:06:22:1e:61:e0:d0:29:54:9f:57:e2:89:82:
                    96:b4:8b:70:72:bc:6c:0a:18:98:15:d1:0f:62:43:
                    2e:07:aa:c6:0f:e2:2d:db:bc:12:53:1d:f1:34:39:
                    54:8d:a2:44:0c:ed:92:d1:6d:66:77:35:a3:54:1c:
                    3a:63:8d:63:d7:74:c0:c9:94:7c:8b:32:29:1b:2a:
                    89:96:3a:3c:1f:ee:33:dc:8e:78:aa:0e:9c:1e:43:
                    fe:0c:dd:d4:42:b3:5f:c5:e9:aa:eb:52:ca:c0:3a:
                    fb:63:2c:4b:9a:f1:50:7f:4f:24:fc:ee:16:84:56:
                    e6:b0:4a:4e:c6:a5:d0:ec:95:0c:df:27:7c:c3:5f:
                    df:2f:8e:1b:db:1c:ab:eb:96:17:23:b0:3e:05:a6:
                    2c:e1:52:6d:0b:c2:a8:4a:c2:50:03:ca:5a:26:4b:
                    b1:9c:7b:62:f3:9c:8a:b2:67:a6:7f:d2:2c:83:fc:
                    87:6b:95:30:9f:55:7a:e5:4c:8f:b9:3d:24:c9:d2:
                    e1:cd:f4:b9:fe:14:9f:69:07:9d:34:42:cd:20:01:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6D:EE:91:16:4A:A1:A4:5F:5E:8F:A7:69:D7:6E:FB:B8:59:A7:1C
            X509v3 Authority Key Identifier:
                keyid:C6:09:D0:50:7C:D7:51:54:70:00:5C:80:2A:A8:7E:98:DF:B3:A3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/C609D0507CD7515470005C802AA87E98DFB3A332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C609D0507CD7515470005C802AA87E98DFB3A332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d3332203d3e20323636393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:458c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:e1:2b:74:4b:8b:e1:de:7d:79:26:35:8a:29:d8:76:df:8b:
         ec:ec:7c:29:a8:b5:ef:77:6b:6c:a6:8d:44:23:88:52:38:59:
         a5:e5:2d:47:fe:81:75:ad:4d:91:05:8d:8d:1a:6a:34:30:41:
         93:26:17:1c:6a:e0:5f:98:08:ce:45:3e:38:84:f6:61:9d:7d:
         88:c5:51:9f:33:a5:13:fd:1f:04:a4:4d:dc:3d:3e:90:3b:54:
         65:e2:ba:9b:e0:35:ba:34:af:18:69:17:e8:a3:ab:ec:25:4c:
         a5:43:9e:66:59:62:95:48:38:c6:34:62:a6:62:f1:ed:b7:7b:
         3b:4f:ee:15:33:e8:49:23:fe:ff:70:d2:61:6c:17:d1:bd:51:
         45:7d:a6:30:b5:62:2d:50:b8:44:d8:3d:18:c3:e0:05:2d:5e:
         60:dd:36:2f:f1:b9:a9:91:a4:5a:3d:8d:0c:49:1e:8c:2d:0b:
         bd:08:c6:e1:ff:ce:91:d7:75:97:61:72:89:17:d0:cf:75:6d:
         75:42:db:40:b9:d6:36:ea:fd:83:ea:3a:4f:f1:36:7c:9c:a6:
         db:ac:25:df:81:1a:6f:cf:e4:fa:0e:71:1e:53:5b:e4:8d:46:
         43:f5:93:b2:b0:aa:7e:0f:0e:46:48:0e:0e:b3:cb:4d:e2:d0:
         1c:7e:e0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----