Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/323830343a356631633a383030303a3a2f33332d3333203d3e20323639303737.roa
File:                     323830343a356631633a383030303a3a2f33332d3333203d3e20323639303737.roa (raw, json)
Hash identifier:          5cxuB7GGQW2Hfd5ZN97uyv7UbDeBicuISNeNHi0oM7M=
Subject key identifier:   7A:FA:33:7E:68:F8:5A:B4:7D:93:8C:17:51:C7:65:01:60:C9:A1:17
Certificate issuer:       /CN=A007AB2F2C1F6190CDD3DE8652B254486A891BA5
Certificate serial:       526E223C17D6C9223504A0CAA729FFE9EC978F87
Authority key identifier: A0:07:AB:2F:2C:1F:61:90:CD:D3:DE:86:52:B2:54:48:6A:89:1B:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A007AB2F2C1F6190CDD3DE8652B254486A891BA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/323830343a356631633a383030303a3a2f33332d3333203d3e20323639303737.roa
Signing time:             Thu 04 Apr 2024 09:09:32 +0000
ROA not before:           Thu 04 Apr 2024 09:04:32 +0000
ROA not after:            Thu 03 Apr 2025 09:09:32 +0000
asID:                     269077
IP address blocks:        2804:5f1c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6e:22:3c:17:d6:c9:22:35:04:a0:ca:a7:29:ff:e9:ec:97:8f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A007AB2F2C1F6190CDD3DE8652B254486A891BA5
        Validity
            Not Before: Apr  4 09:04:32 2024 GMT
            Not After : Apr  3 09:09:32 2025 GMT
        Subject: CN=7AFA337E68F85AB47D938C1751C7650160C9A117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:67:58:5b:73:11:32:6c:5b:83:26:01:eb:
                    bf:0b:e9:92:c0:1c:99:6f:df:c8:98:8e:47:2a:9e:
                    d7:72:1e:57:f7:79:53:f5:8d:80:06:d9:71:a0:a0:
                    e1:ee:46:64:fc:8d:82:8e:7d:bd:91:2d:f5:19:ea:
                    6a:18:bb:38:9d:40:20:62:95:d6:7c:8b:29:a1:7c:
                    bc:7b:f6:65:c5:56:17:ac:4b:d9:c0:f7:30:ca:ab:
                    b0:c0:49:1a:e8:58:7b:08:26:20:84:bd:bd:c0:9a:
                    49:0a:8e:6c:f6:f1:7a:7c:72:8d:42:f4:1f:04:7e:
                    81:2d:0e:88:bd:54:d0:d4:28:f9:87:c2:7c:4c:c4:
                    e5:a0:dc:e6:f9:0e:be:c2:0c:49:98:c2:48:bf:e2:
                    38:30:a4:e8:84:76:a0:46:a9:a9:97:7d:c3:5b:9e:
                    84:f8:88:f6:13:82:69:31:91:02:b9:b6:5d:4a:10:
                    f1:7f:b2:5c:9f:b7:c3:0a:96:18:d2:f7:56:5f:43:
                    24:a3:2a:ee:4b:51:64:81:b5:fb:c7:cb:97:2b:ae:
                    17:c3:ae:b5:c7:b2:e9:a5:2e:45:d0:62:dd:1f:68:
                    6a:7f:a4:57:3a:99:85:41:f3:f1:a8:5f:c7:b3:76:
                    e7:2b:c6:a0:45:da:bb:06:d3:4b:cc:45:e9:17:73:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FA:33:7E:68:F8:5A:B4:7D:93:8C:17:51:C7:65:01:60:C9:A1:17
            X509v3 Authority Key Identifier:
                keyid:A0:07:AB:2F:2C:1F:61:90:CD:D3:DE:86:52:B2:54:48:6A:89:1B:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/A007AB2F2C1F6190CDD3DE8652B254486A891BA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A007AB2F2C1F6190CDD3DE8652B254486A891BA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/323830343a356631633a383030303a3a2f33332d3333203d3e20323639303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f1c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         10:97:5a:a1:95:12:43:fc:30:06:4f:2d:15:f5:b1:b2:25:b5:
         65:06:18:1d:0e:02:21:c1:84:28:1b:0f:a0:aa:01:00:06:45:
         d2:b2:80:11:77:30:df:a5:2f:51:67:0c:e2:fe:88:82:60:6e:
         64:1c:99:3c:f6:aa:7f:03:12:66:9c:19:d4:fd:9c:7c:f7:61:
         7d:50:c9:6c:46:6c:ec:41:c5:0a:21:46:2b:98:66:08:fd:cf:
         44:ea:aa:d8:2b:f7:22:3e:48:22:b9:86:a4:c5:bb:41:67:86:
         7e:0e:69:d6:94:c8:8d:a9:4e:37:b2:c8:5f:ae:9a:37:63:84:
         1e:c8:d3:3b:0e:be:8b:e7:9c:c2:f4:9f:71:e9:7d:6c:4f:79:
         6d:02:bc:79:e2:20:40:99:15:65:05:dc:35:56:30:49:5e:ce:
         61:f6:a8:cb:e6:06:28:a1:95:76:ed:48:5d:04:92:de:9d:e3:
         4c:f8:ec:04:c9:ce:61:f8:13:e4:ae:76:0d:1b:ce:70:c1:49:
         77:51:49:0f:29:53:ad:52:ac:b4:24:c4:70:16:b4:0a:54:41:
         6c:91:d8:41:7c:76:c2:9b:4b:8f:b5:de:d2:5f:2e:b8:39:97:
         b4:e1:6e:95:3e:a2:9d:84:26:f1:97:af:dc:50:8d:04:1e:20:
         f0:a8:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----