Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/323830343a313964303a3a2f33322d3332203d3e203631383230.roa
File:                     323830343a313964303a3a2f33322d3332203d3e203631383230.roa (raw, json)
Hash identifier:          +jJ7McYtxL/FnVrF3UxCxBdWgTKFHWTy7J7NhUIJ63U=
Subject key identifier:   D2:D8:AC:46:04:F1:2F:83:D2:CB:BE:46:F8:BF:28:C1:8A:D1:27:16
Certificate issuer:       /CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
Certificate serial:       1D6A0CB70590F22853E9D3C9F96135E921641F5F
Authority key identifier: 80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/323830343a313964303a3a2f33322d3332203d3e203631383230.roa
Signing time:             Thu 04 Apr 2024 16:47:20 +0000
ROA not before:           Thu 04 Apr 2024 16:42:20 +0000
ROA not after:            Thu 03 Apr 2025 16:47:20 +0000
asID:                     61820
IP address blocks:        2804:19d0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6a:0c:b7:05:90:f2:28:53:e9:d3:c9:f9:61:35:e9:21:64:1f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
        Validity
            Not Before: Apr  4 16:42:20 2024 GMT
            Not After : Apr  3 16:47:20 2025 GMT
        Subject: CN=D2D8AC4604F12F83D2CBBE46F8BF28C18AD12716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f6:e4:c3:79:c3:76:3c:cd:9a:ec:c0:ff:35:
                    14:e4:f5:62:5d:c4:5e:36:3a:52:00:95:99:95:12:
                    79:70:17:24:0a:bd:95:90:3c:d2:4e:e4:cb:9f:be:
                    fa:72:44:54:94:90:19:7e:6d:36:3a:60:62:fc:0a:
                    05:3d:dd:b2:a8:ee:ed:ad:80:36:44:61:40:93:87:
                    88:16:9c:4b:43:9a:7c:15:eb:19:c8:a0:09:1b:73:
                    23:dd:b0:c8:10:29:85:59:08:3f:1c:4c:3a:5b:82:
                    59:d0:e7:29:29:4c:35:92:6a:a8:7f:0d:25:2d:63:
                    76:cf:75:7e:51:83:2f:60:b4:4a:d1:99:cd:fa:69:
                    cf:95:b0:14:f9:37:55:03:ca:f9:de:d6:02:ea:ff:
                    fd:2b:96:be:fb:30:fe:c1:22:dc:fe:b7:5f:b3:d2:
                    ae:c5:3e:bb:5f:bf:f9:84:ed:c3:0c:a8:49:b2:15:
                    59:37:bc:0a:bb:90:7e:cb:81:93:24:21:96:c5:60:
                    42:f0:14:04:21:b2:2e:d6:44:9c:d2:9e:bc:4c:0a:
                    95:08:84:1c:43:66:d6:c3:ca:71:8b:2f:98:72:18:
                    d9:14:c1:46:eb:9c:58:a3:b3:b4:70:c1:f7:63:9f:
                    c6:1a:0f:9f:76:78:0e:34:cd:71:10:93:0e:10:8d:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D8:AC:46:04:F1:2F:83:D2:CB:BE:46:F8:BF:28:C1:8A:D1:27:16
            X509v3 Authority Key Identifier:
                keyid:80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/323830343a313964303a3a2f33322d3332203d3e203631383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:48:01:bf:76:75:61:78:1b:99:2e:03:aa:9e:b7:1f:bb:05:
         a4:92:8a:2a:b4:cf:fb:74:2d:cd:ee:db:72:71:b0:78:a1:d1:
         8a:51:a0:c6:28:5f:71:96:b2:7a:ca:21:22:95:43:ee:d3:fb:
         17:ae:56:61:d9:86:c4:c2:c5:5f:12:23:f3:25:ea:c1:bf:3d:
         f5:e9:bd:24:8d:58:49:8c:c1:da:ab:ea:8d:52:a6:6b:ae:09:
         35:b2:cb:f7:e2:9d:f9:40:74:ee:02:5a:f7:e9:6c:2b:d9:02:
         c1:92:4c:86:0f:98:8d:89:dd:be:41:37:6b:e7:4c:de:0d:23:
         62:3d:1e:ee:78:ef:38:d2:ae:ac:f4:3d:7d:f3:06:8a:bf:c4:
         31:80:7b:cf:1a:be:9d:96:d2:64:b0:a9:8a:02:01:ae:43:0f:
         53:75:c8:bb:6b:f6:90:1f:f3:c4:c3:89:35:56:13:71:5e:25:
         a0:e8:49:34:cf:d5:86:b2:a0:91:b6:71:70:87:fa:86:31:83:
         d2:da:21:66:13:e9:76:38:98:65:21:d7:9f:7c:e8:f1:5b:d6:
         67:02:bd:ee:66:2d:3d:d4:97:5e:60:53:bc:56:f1:a1:f2:5c:
         99:17:34:b5:2e:e0:c6:8f:55:dc:4e:96:f6:2b:57:29:af:f3:
         1b:5b:b8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----