Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/323830343a323632343a3a2f33322d3332203d3e20323634333234.roa
File:                     323830343a323632343a3a2f33322d3332203d3e20323634333234.roa (raw, json)
Hash identifier:          ABG4LYzhJMwuSR4c3Qffe+E/8XU40DmtEXv3bqkluJA=
Subject key identifier:   5F:1D:AD:A5:D7:01:61:09:0F:E4:D4:59:87:71:AE:1A:4D:B9:00:86
Certificate issuer:       /CN=506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA
Certificate serial:       6214AE02FB79EE3BD9342089744BDA67E0104F93
Authority key identifier: 50:6C:C2:D7:2A:5B:16:63:F8:23:8C:0F:38:6C:1A:C7:CB:3E:55:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/323830343a323632343a3a2f33322d3332203d3e20323634333234.roa
Signing time:             Wed 19 Jun 2024 18:52:55 +0000
ROA not before:           Wed 19 Jun 2024 18:47:55 +0000
ROA not after:            Wed 18 Jun 2025 18:52:55 +0000
asID:                     264324
IP address blocks:        2804:2624::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:14:ae:02:fb:79:ee:3b:d9:34:20:89:74:4b:da:67:e0:10:4f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA
        Validity
            Not Before: Jun 19 18:47:55 2024 GMT
            Not After : Jun 18 18:52:55 2025 GMT
        Subject: CN=5F1DADA5D70161090FE4D4598771AE1A4DB90086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:cf:47:eb:3e:ac:53:9b:c6:eb:d5:5d:81:
                    aa:cd:83:68:da:8c:35:20:31:2a:46:68:02:a2:31:
                    6e:bb:64:de:34:bd:16:27:0a:c3:f0:92:e2:b3:ab:
                    4b:0b:d9:ae:ef:28:ba:b6:a0:5f:b1:dd:c5:4c:bc:
                    39:ba:31:b7:63:68:27:e3:de:23:da:f0:7e:47:17:
                    2c:82:e8:b4:57:4d:ab:fa:15:70:c7:af:d8:96:ce:
                    cb:75:07:66:c4:ef:9a:f7:72:3e:e1:48:e5:79:ee:
                    4c:a2:11:ae:c2:ef:8b:4c:07:38:a3:ad:26:db:2b:
                    83:b1:3d:80:d9:4e:64:7a:6e:54:bf:2e:2b:16:33:
                    2d:57:95:d0:d5:ce:b1:96:c8:d4:22:ff:36:0a:7e:
                    aa:ad:c4:52:05:9b:6e:cd:37:25:ea:c0:34:89:26:
                    bc:ec:ea:62:5a:8b:e6:53:14:cd:07:d3:44:e3:5d:
                    9a:7f:1f:3c:29:4d:dc:98:54:3c:1c:95:da:34:48:
                    00:c6:c7:65:6c:15:55:d4:01:75:0b:ec:13:22:eb:
                    5b:8d:52:9e:92:94:2a:7a:26:0f:82:59:44:44:e7:
                    4e:96:7f:aa:e0:53:02:04:a7:bf:e7:ab:8d:1e:b8:
                    eb:ad:d5:54:6b:63:7a:9c:ea:7d:c3:e7:45:19:5b:
                    86:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1D:AD:A5:D7:01:61:09:0F:E4:D4:59:87:71:AE:1A:4D:B9:00:86
            X509v3 Authority Key Identifier:
                keyid:50:6C:C2:D7:2A:5B:16:63:F8:23:8C:0F:38:6C:1A:C7:CB:3E:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/323830343a323632343a3a2f33322d3332203d3e20323634333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2624::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:45:8e:9a:d3:b9:a9:b9:4c:95:1e:9d:da:36:a9:d1:07:5f:
         c5:d0:f7:18:58:40:89:5d:35:19:5c:6a:8e:75:2b:97:b5:65:
         fd:1c:5b:bc:89:c3:57:e3:e4:14:a9:1c:98:e4:f2:af:75:27:
         fb:92:29:69:43:db:11:bc:c6:9a:da:52:3f:49:38:9b:3f:eb:
         7f:33:97:95:ee:45:7a:e0:75:ca:e2:d1:42:ff:86:0e:0e:42:
         68:dc:d9:1e:49:27:12:88:1e:54:95:a4:8f:a9:e9:95:3b:ba:
         5a:d8:94:b0:b4:a9:fc:cd:98:b8:03:39:5d:20:43:13:3d:fa:
         d9:2d:5b:40:3e:df:0d:b6:5b:51:9d:a6:44:1e:68:51:67:ae:
         6a:50:5a:30:31:d2:c6:86:93:f1:32:7f:40:0a:7d:14:63:d9:
         f7:53:cd:cb:57:f9:09:a9:34:a4:bf:c0:36:69:63:9a:a8:1e:
         51:7b:25:89:43:31:a9:b6:0b:cd:8b:14:49:ae:33:e4:29:60:
         45:43:e0:52:65:84:a4:a9:7f:05:00:d7:c7:8f:c0:df:9d:f5:
         29:55:d8:55:bd:bb:3d:00:f7:8d:0f:94:d3:e0:9e:dc:36:21:
         02:7d:0a:6f:bd:71:fd:f0:3e:98:43:e3:a9:36:da:ef:58:f7:
         59:20:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----