Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a3a2f33322d3332203d3e20323733343132.roa
File:                     323830343a386533633a3a2f33322d3332203d3e20323733343132.roa (raw, json)
Hash identifier:          l1gigSytkiaKjrxgv+gQ5dPwTVOj8bj1rO80VycRxCw=
Subject key identifier:   2D:D3:9E:75:DC:5A:6F:6C:B0:32:65:09:72:74:16:A3:0F:33:02:EF
Certificate issuer:       /CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
Certificate serial:       23ECF27162818AECF4743A74DA1F5F2B86BB8D23
Authority key identifier: 40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a3a2f33322d3332203d3e20323733343132.roa
Signing time:             Thu 04 Apr 2024 06:19:53 +0000
ROA not before:           Thu 04 Apr 2024 06:14:53 +0000
ROA not after:            Thu 03 Apr 2025 06:19:53 +0000
asID:                     273412
IP address blocks:        2804:8e3c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ec:f2:71:62:81:8a:ec:f4:74:3a:74:da:1f:5f:2b:86:bb:8d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
        Validity
            Not Before: Apr  4 06:14:53 2024 GMT
            Not After : Apr  3 06:19:53 2025 GMT
        Subject: CN=2DD39E75DC5A6F6CB0326509727416A30F3302EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:6e:17:85:a0:9f:8b:c5:c9:6b:57:ba:31:
                    9e:ef:5e:05:e2:74:b1:2c:eb:72:5a:2d:0a:4a:40:
                    f4:a9:28:67:ab:de:7e:d2:91:dc:fc:fd:e0:a2:76:
                    f6:5b:f4:df:16:90:fe:e6:6a:52:2d:c6:a1:2d:8d:
                    bc:e3:bc:3c:12:1c:e7:38:af:e4:06:2b:b2:f4:d7:
                    52:99:01:8f:8f:d9:77:1e:bf:d7:78:e9:26:9e:3e:
                    8c:cd:17:31:5b:d7:ef:ae:4e:42:0f:27:34:70:f8:
                    58:de:52:4f:27:1a:e5:e4:f7:77:37:63:98:2c:cc:
                    d0:31:76:d8:d4:92:19:f4:d3:69:57:8f:f1:82:37:
                    92:89:a1:fc:f4:b4:c7:d7:07:37:db:36:b8:77:7e:
                    f2:6b:65:51:6b:5c:98:fe:0b:c8:b1:ca:a4:66:20:
                    cf:3d:2d:b2:a9:f7:45:d7:ad:3b:37:df:9c:fa:39:
                    28:39:d1:b1:c8:bb:1a:6a:1e:2e:a7:22:81:c3:8e:
                    07:b3:90:bc:c5:72:22:bb:1f:23:6d:ec:f7:34:7b:
                    a5:fb:62:01:7d:eb:bd:42:e0:2c:7b:e3:07:de:cc:
                    4a:72:0a:88:38:6b:2c:de:5a:77:23:b2:eb:8a:2f:
                    ac:f2:87:bf:20:52:2f:ed:fc:9a:28:fd:f0:14:a9:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D3:9E:75:DC:5A:6F:6C:B0:32:65:09:72:74:16:A3:0F:33:02:EF
            X509v3 Authority Key Identifier:
                keyid:40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/323830343a386533633a3a2f33322d3332203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:a3:ed:0b:af:23:cc:37:4d:57:40:22:be:b9:2a:38:e1:28:
         53:5e:59:ce:ee:3f:84:a7:93:4e:d3:3c:fa:db:65:d1:13:7a:
         91:62:8c:c3:b1:30:7d:13:64:9a:5a:12:44:be:eb:ea:14:3a:
         af:57:1d:69:30:1f:fb:93:85:0d:53:4c:a6:98:b7:f6:39:20:
         a8:70:24:fb:de:a1:c3:8e:7b:7a:42:96:f1:f5:e6:e8:b5:8e:
         8c:33:af:9f:a2:75:50:4a:82:95:fe:d1:92:61:07:9b:ef:b9:
         8c:e9:40:ea:80:0f:1c:b3:1e:3f:6d:6e:1b:3d:11:d3:41:1b:
         cd:f3:6a:51:e4:2a:ee:70:cb:b8:8b:b2:fe:7c:8e:6e:d0:fd:
         3d:99:cb:c9:af:2c:25:c9:98:42:02:e5:bf:87:db:0d:51:70:
         bb:60:22:fa:bb:69:ad:5f:f6:ec:e2:f1:16:8b:85:f6:45:b0:
         0b:c0:e4:fd:fe:d8:57:a0:a2:ff:28:98:7f:41:40:9e:33:99:
         a3:4f:7f:fb:fb:b6:b7:55:fe:be:43:85:b9:e5:db:9d:ca:f2:
         f4:45:42:42:47:06:a8:70:cf:ee:c1:70:de:f6:e9:43:07:d8:
         a7:76:13:a6:24:69:d3:0a:57:1f:ad:a4:be:2e:c2:e1:60:f5:
         a5:da:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----