Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a383030303a3a2f33332d3333203d3e203532393332.roa
File:                     323830343a323862303a383030303a3a2f33332d3333203d3e203532393332.roa (raw, json)
Hash identifier:          bIc+sj1yNQ69D3xoMTJWKvS8ywfC3VMkB6i5mi/+qbw=
Subject key identifier:   E8:2C:BB:9E:07:FB:BE:76:92:A2:A8:02:C4:95:E5:AC:C2:92:C8:2B
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       1D3442502D462F5C4F3FDC992E139BE860FA0ECB
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a383030303a3a2f33332d3333203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:57 +0000
ROA not before:           Wed 08 May 2024 18:15:57 +0000
ROA not after:            Wed 07 May 2025 18:20:57 +0000
asID:                     52932
IP address blocks:        2804:28b0:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:34:42:50:2d:46:2f:5c:4f:3f:dc:99:2e:13:9b:e8:60:fa:0e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:57 2024 GMT
            Not After : May  7 18:20:57 2025 GMT
        Subject: CN=E82CBB9E07FBBE7692A2A802C495E5ACC292C82B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:98:56:1b:c7:3e:cd:fe:ae:f8:e8:48:bb:5c:
                    70:38:45:8b:23:16:23:54:c3:a9:51:c4:50:cc:4c:
                    96:48:11:07:73:d9:25:ce:05:c8:57:5e:50:3a:85:
                    5d:40:fe:14:04:d7:12:70:a6:ed:e9:43:9a:a0:2a:
                    7e:17:9e:c0:3b:0c:6e:00:9b:b5:3f:fc:b4:b9:ca:
                    4b:50:f6:27:ea:29:d3:fc:1d:9a:ec:c5:4e:ae:6e:
                    78:a4:af:94:81:dc:d0:0b:f9:47:45:3f:73:84:1c:
                    9e:98:ba:2a:21:5d:b6:df:e2:0e:48:07:c5:1a:4f:
                    67:61:72:98:49:13:12:92:cc:74:21:47:29:7c:82:
                    64:53:2d:63:a5:55:81:92:e3:aa:2e:5f:0b:78:f4:
                    11:69:d1:09:e6:07:65:5a:78:c4:8d:d2:20:9f:5f:
                    27:24:bd:94:78:70:0c:0d:6f:3c:43:23:38:c2:e3:
                    c3:27:09:b3:d4:64:5f:80:b7:78:24:b6:db:b1:ab:
                    0e:e4:92:12:e8:a6:fd:e6:ac:e1:2b:08:d2:9a:22:
                    a2:7d:b9:35:5f:20:d6:30:4c:7c:5e:48:3b:4e:84:
                    08:fc:34:e2:a7:6a:fd:19:7d:5a:fe:25:09:e6:44:
                    8b:14:60:ab:58:8d:6a:ef:93:39:10:f4:a0:3c:a9:
                    07:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2C:BB:9E:07:FB:BE:76:92:A2:A8:02:C4:95:E5:AC:C2:92:C8:2B
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a383030303a3a2f33332d3333203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         26:72:64:ac:d7:97:c3:ea:d7:4b:fa:7d:98:eb:f2:d4:ed:55:
         df:f7:11:15:3f:9b:c4:13:09:e1:38:90:2f:e7:08:ee:04:16:
         71:76:82:ff:1b:4c:92:e9:cd:bb:0f:88:11:31:52:09:d0:41:
         4b:8e:26:77:52:c9:76:a6:00:51:0a:09:ee:ff:93:ce:3d:d1:
         06:4f:da:b1:31:53:1d:6d:bf:8a:ca:65:86:f5:59:79:41:15:
         1c:da:da:b3:6e:4a:94:f3:a0:38:da:4f:d2:c3:ed:d4:ec:c6:
         d0:69:17:ed:3d:ba:6f:e1:eb:de:40:13:87:d7:c4:8b:a7:a3:
         9d:2e:79:09:0b:51:18:c6:18:e3:b6:e1:54:fd:36:44:44:1a:
         85:20:2a:08:c6:f7:c4:e0:43:56:64:c2:53:99:1d:0d:5c:2d:
         23:23:70:20:29:b7:8e:bf:d7:7e:d8:32:92:6c:83:62:12:13:
         58:52:10:fd:2e:35:0f:ab:6d:6e:23:d3:c3:f3:95:38:58:f3:
         41:37:46:26:76:a4:92:8a:5f:d1:fb:94:1f:8d:b1:72:b8:d2:
         26:21:ab:00:c7:b7:27:0b:a3:f2:03:f4:14:1b:19:b0:28:b7:
         ae:77:d3:83:13:82:da:8c:82:8b:30:ab:59:b1:fd:0b:e6:12:
         f7:3e:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----