Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a383030303a3a2f33332d3333203d3e20323730373630.roa
File:                     323830343a373066633a383030303a3a2f33332d3333203d3e20323730373630.roa (raw, json)
Hash identifier:          egxpoavitGDENaiJtYO6E3n9OK/lKqrVCtSOsP83nzU=
Subject key identifier:   A1:D1:4F:05:61:4E:A0:97:28:76:8C:48:B1:DA:72:CC:9C:9A:20:9D
Certificate issuer:       /CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
Certificate serial:       2D8AE7BF048F301245A0DA38655088C4C116F3C3
Authority key identifier: 79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a383030303a3a2f33332d3333203d3e20323730373630.roa
Signing time:             Thu 16 May 2024 17:05:27 +0000
ROA not before:           Thu 16 May 2024 17:00:27 +0000
ROA not after:            Thu 15 May 2025 17:05:27 +0000
asID:                     270760
IP address blocks:        2804:70fc:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8a:e7:bf:04:8f:30:12:45:a0:da:38:65:50:88:c4:c1:16:f3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Validity
            Not Before: May 16 17:00:27 2024 GMT
            Not After : May 15 17:05:27 2025 GMT
        Subject: CN=A1D14F05614EA09728768C48B1DA72CC9C9A209D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:5d:c8:2d:93:ec:9a:e7:1e:3f:e4:15:5e:
                    23:d4:92:cb:d4:10:29:ce:e8:bb:24:d7:8b:e4:ec:
                    f9:f7:6e:48:96:ae:eb:73:35:0b:01:fb:60:ec:b3:
                    61:c2:a3:3f:58:a5:da:2f:55:b1:76:aa:bb:eb:e6:
                    21:fa:99:ee:49:53:74:ac:a2:93:19:10:ee:ae:ce:
                    3d:96:9f:d4:5c:33:fb:9c:a1:a0:a7:df:7a:3a:04:
                    20:d9:7c:12:c0:72:30:d9:3e:48:39:27:c7:43:a3:
                    d6:d6:ac:f8:e3:79:c8:e3:44:fa:72:f2:f0:f9:a0:
                    83:94:a2:1d:e5:19:ce:48:fe:3b:ab:17:0a:92:84:
                    c6:ba:60:4f:e2:11:96:17:66:b8:70:af:a3:79:52:
                    6f:a5:89:f9:74:cc:6b:fd:0f:de:10:4e:01:9e:ec:
                    dd:0b:1a:be:5d:da:81:61:ed:8b:e5:6d:7c:23:ef:
                    13:fd:e5:f8:ea:56:9f:fb:52:4b:78:0d:d0:21:b6:
                    81:40:b8:23:1f:08:a6:fb:89:34:76:fb:01:0c:5a:
                    4d:ff:22:a9:c2:1a:7f:86:fc:c2:5d:80:ff:0f:52:
                    5d:50:b7:b7:95:f5:df:08:ad:22:d0:c3:ac:55:e3:
                    97:92:67:9a:4a:fb:98:1a:37:1d:d7:73:5b:11:6d:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D1:4F:05:61:4E:A0:97:28:76:8C:48:B1:DA:72:CC:9C:9A:20:9D
            X509v3 Authority Key Identifier:
                keyid:79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a383030303a3a2f33332d3333203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c4:6d:e8:c7:88:f1:55:71:3a:be:cf:1e:e8:e9:0c:76:3b:c0:
         89:fe:6f:41:f1:44:d0:1b:03:bc:15:02:f3:65:cc:68:84:cd:
         74:7e:35:bf:9d:02:c1:20:f4:8b:82:70:74:68:eb:67:e9:0b:
         68:fc:5b:37:35:1d:2d:82:27:2f:d4:a4:3f:c9:00:16:a8:a2:
         b8:fe:95:5f:92:f8:cf:4d:96:0e:43:6d:72:47:42:b8:14:d7:
         80:a3:ab:7b:e3:82:70:e7:ce:f2:d6:61:61:48:21:56:cb:27:
         ae:7e:a1:b7:d5:57:82:50:53:a1:58:e7:d8:4d:b4:5f:e8:09:
         49:d0:20:de:ce:ae:ff:8b:9b:62:34:b7:78:b9:b5:e7:34:42:
         c3:bb:8f:43:bc:7a:ef:5b:ec:83:b3:80:cd:4f:54:7d:de:ce:
         d8:83:08:78:34:25:d8:7b:dc:ad:a2:ec:cb:4d:6d:dc:19:fd:
         f4:07:7f:5c:1c:9e:98:fe:c5:ca:b9:8d:f7:3d:ea:ca:46:68:
         6b:19:31:9e:22:e2:35:80:c7:1b:98:62:43:4d:7b:0c:da:65:
         d6:9a:e4:c3:0d:34:15:e9:56:7d:32:7e:d3:2d:16:e1:57:ed:
         62:43:4a:74:d1:11:18:a7:da:aa:f3:9d:8c:82:1a:66:56:1d:
         80:22:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----