Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/1/323830343a3964383a3a2f33322d313238203d3e20323632393937.roa
File:                     323830343a3964383a3a2f33322d313238203d3e20323632393937.roa (raw, json)
Hash identifier:          IqTXxmpFCAvG+UGaJx4rvb/Fgvf63q8MG2J+SYk4GBo=
Subject key identifier:   56:25:50:85:4F:55:D9:14:44:CF:EA:44:83:59:50:32:DF:E3:82:70
Certificate issuer:       /CN=9DCEDEFB6429310C6836B39040893885C586531B
Certificate serial:       37463336DC8B098AAF95CDEAD9EC9CFD022F34EA
Authority key identifier: 9D:CE:DE:FB:64:29:31:0C:68:36:B3:90:40:89:38:85:C5:86:53:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DCEDEFB6429310C6836B39040893885C586531B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/1/323830343a3964383a3a2f33322d313238203d3e20323632393937.roa
Signing time:             Wed 03 Apr 2024 19:36:14 +0000
ROA not before:           Wed 03 Apr 2024 19:31:14 +0000
ROA not after:            Wed 02 Apr 2025 19:36:14 +0000
asID:                     262997
IP address blocks:        2804:9d8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:46:33:36:dc:8b:09:8a:af:95:cd:ea:d9:ec:9c:fd:02:2f:34:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DCEDEFB6429310C6836B39040893885C586531B
        Validity
            Not Before: Apr  3 19:31:14 2024 GMT
            Not After : Apr  2 19:36:14 2025 GMT
        Subject: CN=562550854F55D91444CFEA4483595032DFE38270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:85:66:bb:2d:88:8e:0d:f7:7d:42:e7:e0:
                    46:22:7d:56:2c:c3:23:bb:56:8e:6e:fd:6d:48:20:
                    28:35:0f:75:e3:26:72:c0:d9:d7:68:ae:d4:e2:4c:
                    60:fe:10:40:da:72:7a:9f:09:0a:70:5c:1d:3c:fb:
                    f5:4e:c1:f4:32:1a:f6:33:0e:0b:20:7c:35:a6:9f:
                    f6:87:2f:4e:e8:67:ed:f8:8b:4a:3b:6b:2f:48:1a:
                    11:0c:87:44:6a:a8:aa:bb:c5:91:14:5c:77:f2:e1:
                    23:32:cd:53:93:15:6d:66:f4:38:09:84:5b:7b:92:
                    5b:3e:d0:c5:ed:85:d4:77:04:49:50:d7:15:64:91:
                    38:a4:b2:09:40:fa:ec:db:97:d7:f4:c0:1e:b0:5f:
                    f6:ef:8f:b5:04:46:49:6b:c3:00:28:e0:0a:f5:1d:
                    da:2b:23:04:2a:ad:f4:ef:9e:93:04:6b:1b:68:34:
                    39:fd:0a:c3:27:c4:8a:63:d4:da:fd:43:0f:3a:27:
                    28:ee:01:c1:95:37:a9:a4:0c:13:81:96:08:27:0b:
                    e4:62:08:11:9f:d6:14:a7:80:9f:93:3a:a7:fa:02:
                    75:99:70:c7:c7:23:7d:3f:97:da:5d:ab:dc:4e:26:
                    1c:85:48:92:1d:b7:dc:04:2f:03:75:56:2f:a7:42:
                    e1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:25:50:85:4F:55:D9:14:44:CF:EA:44:83:59:50:32:DF:E3:82:70
            X509v3 Authority Key Identifier:
                keyid:9D:CE:DE:FB:64:29:31:0C:68:36:B3:90:40:89:38:85:C5:86:53:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/1/9DCEDEFB6429310C6836B39040893885C586531B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DCEDEFB6429310C6836B39040893885C586531B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/1/323830343a3964383a3a2f33322d313238203d3e20323632393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:f4:f9:3a:19:ed:7b:62:6e:de:7b:0b:a9:1e:04:53:55:
         6b:b8:5a:96:92:5b:ec:30:25:be:0d:62:ab:f1:9c:e7:ca:b4:
         36:4d:aa:56:ab:65:94:db:83:06:1b:3a:c9:d5:1f:6d:30:85:
         66:bb:3a:e3:dd:b8:5e:d0:a9:5f:05:28:06:7f:1c:4d:fe:2a:
         87:e0:00:47:8e:1b:95:cd:9d:2e:7b:b7:8c:1b:32:00:a4:db:
         01:99:17:94:7b:e1:2f:36:29:68:43:6e:75:0b:4a:1a:23:70:
         79:e3:b2:77:41:2e:cc:d8:82:69:40:5a:54:86:55:63:b8:fb:
         5a:69:e5:4d:33:24:c7:2b:85:01:4a:4f:6b:4b:8f:ea:7d:23:
         9d:ec:25:19:32:c6:57:ec:da:1c:7a:10:1d:2d:df:2d:5f:2f:
         e0:3c:90:43:5e:32:4c:6f:78:5b:c6:bd:ea:5f:41:cf:47:48:
         a0:b1:d9:f6:01:bc:db:59:a1:35:ec:4f:e8:0f:51:2f:ab:de:
         82:d6:5a:6f:6a:2f:49:7c:46:70:a9:f7:65:bd:4b:50:e9:e8:
         c7:f0:fb:3d:71:57:03:81:79:c2:d6:4c:09:3d:e9:23:6a:8b:
         e4:85:67:87:ad:93:9d:79:97:ab:c0:ea:4e:77:c7:9f:01:ad:
         ed:37:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----