Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YWwV2w1Hbcc7HRHzRVhoakVx6iEDa6VJM7Cuq2uZNJC/0/323830343a326538383a3a2f33322d313238203d3e20323635333531.roa
File:                     323830343a326538383a3a2f33322d313238203d3e20323635333531.roa (raw, json)
Hash identifier:          zw3RxZvslsPiOcPEzEt07CJpw+6PDtD1YsUMe4u2VnE=
Subject key identifier:   2F:F0:5A:72:8A:30:32:9B:95:AD:0D:E8:9B:B7:B2:B2:4F:EF:81:1B
Certificate issuer:       /CN=3527C81195C988EFF7060EA7D132610EE10C1F91
Certificate serial:       62BEF249FA0AF5CDECEFF955F1BA1DBB1163DBB1
Authority key identifier: 35:27:C8:11:95:C9:88:EF:F7:06:0E:A7:D1:32:61:0E:E1:0C:1F:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3527C81195C988EFF7060EA7D132610EE10C1F91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YWwV2w1Hbcc7HRHzRVhoakVx6iEDa6VJM7Cuq2uZNJC/0/323830343a326538383a3a2f33322d313238203d3e20323635333531.roa
Signing time:             Mon 22 Apr 2024 14:30:20 +0000
ROA not before:           Mon 22 Apr 2024 14:25:20 +0000
ROA not after:            Mon 21 Apr 2025 14:30:20 +0000
asID:                     265351
IP address blocks:        2804:2e88::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:be:f2:49:fa:0a:f5:cd:ec:ef:f9:55:f1:ba:1d:bb:11:63:db:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3527C81195C988EFF7060EA7D132610EE10C1F91
        Validity
            Not Before: Apr 22 14:25:20 2024 GMT
            Not After : Apr 21 14:30:20 2025 GMT
        Subject: CN=2FF05A728A30329B95AD0DE89BB7B2B24FEF811B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:1f:4d:d1:8b:c7:ab:3b:59:df:8e:d9:50:
                    b4:ce:7a:cc:0f:48:5a:b3:9a:9d:92:3e:d6:34:e5:
                    76:01:8f:3c:a8:60:bd:4f:1a:28:64:90:7d:f8:ba:
                    e5:e3:85:a1:f5:e7:16:ab:e7:3d:e4:2d:0e:12:7b:
                    d6:a2:b0:50:bc:9b:30:86:37:bf:1d:d7:17:cb:63:
                    b8:df:91:cb:39:e7:18:be:92:96:da:a8:74:f3:0a:
                    42:92:02:6c:c5:ef:ba:53:fe:f4:d1:b8:5b:09:6f:
                    f9:40:c0:c2:61:cc:3e:4f:ea:a4:f7:b9:55:9f:2f:
                    83:59:05:e0:c6:70:cb:98:10:cf:4b:2d:c7:a0:59:
                    90:a6:1d:20:52:f4:4b:ea:9b:5d:13:d9:e7:fa:08:
                    b2:dc:87:0b:3c:7c:91:b2:a3:59:bf:4e:7c:17:09:
                    17:ae:f3:32:df:da:c7:53:07:5f:38:12:cd:a6:95:
                    6d:0f:2f:8b:d4:50:11:cc:48:06:07:d6:4a:ec:a3:
                    2a:5a:a9:9c:56:2a:0d:12:59:19:08:99:ea:65:16:
                    f0:b3:4d:57:d7:6a:1f:5e:68:25:f1:a7:ae:a6:8f:
                    a9:bd:d7:f2:37:9e:f3:60:0e:f7:c8:b2:07:9a:98:
                    08:4b:ec:3e:16:c6:ce:d9:12:a5:14:de:38:d5:08:
                    a1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F0:5A:72:8A:30:32:9B:95:AD:0D:E8:9B:B7:B2:B2:4F:EF:81:1B
            X509v3 Authority Key Identifier:
                keyid:35:27:C8:11:95:C9:88:EF:F7:06:0E:A7:D1:32:61:0E:E1:0C:1F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YWwV2w1Hbcc7HRHzRVhoakVx6iEDa6VJM7Cuq2uZNJC/0/3527C81195C988EFF7060EA7D132610EE10C1F91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3527C81195C988EFF7060EA7D132610EE10C1F91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YWwV2w1Hbcc7HRHzRVhoakVx6iEDa6VJM7Cuq2uZNJC/0/323830343a326538383a3a2f33322d313238203d3e20323635333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:20:17:bf:d2:21:41:01:9d:cf:e7:b6:c7:5a:aa:03:60:14:
         5b:d3:64:a1:31:71:49:8a:23:a5:c9:ac:4f:8c:09:4c:02:51:
         b6:1c:bb:15:58:2e:b1:f1:9e:b6:41:27:ad:58:7d:ab:5f:c5:
         4e:f9:c8:01:bd:2e:9e:7c:cb:ba:e6:bc:ae:34:37:72:fc:43:
         a5:d5:6a:cb:90:fc:dc:de:dc:3f:78:2f:82:2d:6e:30:83:2d:
         72:ca:db:1f:32:00:2e:ae:ea:02:9d:30:51:10:dc:e0:c5:98:
         8b:d8:42:3c:7d:54:c3:03:8c:3c:27:cb:eb:03:8b:77:a0:e8:
         e3:32:95:9d:14:97:6f:c9:06:a3:27:0f:3d:8f:28:71:1e:21:
         3c:1d:2f:2b:d1:c6:4f:d8:ff:d4:6a:0e:32:74:34:75:21:71:
         ff:21:18:3d:fb:ad:3d:cd:1b:83:ae:79:cd:65:21:d4:91:6d:
         74:fd:b8:5b:7b:d2:53:6b:ac:6f:c6:9b:18:9b:2c:39:63:c6:
         83:53:48:1a:66:22:3e:ca:c5:14:32:b3:51:72:af:c9:15:40:
         26:97:6b:b9:aa:da:e8:90:c3:f2:9f:96:ec:2f:21:0e:4e:80:
         f9:17:8e:41:00:14:a5:a7:a1:9d:3d:48:2e:64:2d:c3:68:77:
         0f:f2:09:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----