Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a343030303a3a2f33352d3335203d3e20323636323735.roa
File:                     323830343a333533383a343030303a3a2f33352d3335203d3e20323636323735.roa (raw, json)
Hash identifier:          m/AI+YOlEao7R7I6tON9RwDnfO68cuh82pzC1JPBxys=
Subject key identifier:   24:AC:D6:4B:11:09:F4:5F:E9:04:17:20:50:CE:B7:6C:6C:E3:70:7E
Certificate issuer:       /CN=08638276B92466BDF0303C6186494ACF59C04E02
Certificate serial:       4A77BF9F50C484A129CBA1A13FEDE3B27930C749
Authority key identifier: 08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a343030303a3a2f33352d3335203d3e20323636323735.roa
Signing time:             Mon 29 Jul 2024 13:58:06 +0000
ROA not before:           Mon 29 Jul 2024 13:53:06 +0000
ROA not after:            Mon 28 Jul 2025 13:58:06 +0000
asID:                     266275
IP address blocks:        2804:3538:4000::/35 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:77:bf:9f:50:c4:84:a1:29:cb:a1:a1:3f:ed:e3:b2:79:30:c7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08638276B92466BDF0303C6186494ACF59C04E02
        Validity
            Not Before: Jul 29 13:53:06 2024 GMT
            Not After : Jul 28 13:58:06 2025 GMT
        Subject: CN=24ACD64B1109F45FE904172050CEB76C6CE3707E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:a9:13:c6:1a:12:7a:e1:41:52:87:fb:8d:
                    ec:c4:1f:25:f7:25:aa:df:42:95:bb:fc:ad:04:20:
                    f0:4c:7f:56:74:bd:77:55:13:a0:8a:a0:40:02:c7:
                    3b:4f:21:36:1f:02:91:a4:48:ae:a9:7e:49:02:63:
                    eb:7f:4b:89:a6:f8:a3:1e:0b:91:46:ee:d3:62:7e:
                    56:e0:85:24:f1:22:40:60:4c:e6:f8:9d:50:2c:98:
                    46:63:02:c0:48:a7:ba:27:40:84:d6:28:6d:e9:f3:
                    52:b7:16:11:13:ae:d6:03:24:d8:94:38:bf:cb:a7:
                    97:e6:ab:51:3d:c8:70:78:f8:1f:78:f7:0e:01:3c:
                    eb:b5:38:65:6f:8d:eb:6a:6e:f2:61:21:f6:a6:ad:
                    92:7f:5c:12:56:fc:56:32:00:07:39:5c:4d:7b:a9:
                    54:e5:f9:f7:2a:15:89:c7:e2:95:da:44:2e:d1:e9:
                    17:74:77:09:07:7f:15:e1:95:16:36:c0:57:30:32:
                    9d:57:b6:26:27:c6:f6:72:52:42:80:92:71:f6:b9:
                    93:5e:00:43:25:63:84:1b:d5:03:d1:4c:8f:af:ff:
                    ef:a2:db:68:f4:22:e5:84:1f:fd:e4:62:f5:57:f4:
                    14:05:b9:83:59:82:54:ac:ae:06:aa:32:20:2b:4f:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AC:D6:4B:11:09:F4:5F:E9:04:17:20:50:CE:B7:6C:6C:E3:70:7E
            X509v3 Authority Key Identifier:
                keyid:08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/08638276B92466BDF0303C6186494ACF59C04E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a343030303a3a2f33352d3335203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3538:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         aa:c2:2e:aa:10:d4:87:d6:4d:e9:0c:f4:9b:7c:cf:b0:9a:c6:
         69:c8:37:8a:81:71:3c:66:4c:62:26:c7:3e:af:94:58:5c:d3:
         f1:6e:f6:1a:a7:ea:b4:a5:36:94:f8:8a:83:cd:09:81:14:9d:
         9c:b1:5a:e5:a5:6b:c4:91:3f:49:6b:31:16:b1:8c:e9:1e:c9:
         a7:48:46:b5:46:34:7a:b4:de:6a:e3:2b:40:10:eb:80:fd:52:
         da:b4:c5:1d:a9:5b:29:7e:f6:42:48:55:39:cd:ed:93:5f:9d:
         69:9c:bb:4f:47:7b:d8:c0:57:93:dc:e4:96:35:76:25:59:8c:
         ae:1d:eb:4d:fc:e8:6a:43:5b:7e:87:e7:ce:f2:f2:8a:c9:0c:
         3c:18:44:bf:bf:58:e0:6a:d2:68:14:37:aa:8f:3a:b1:d9:f0:
         e5:99:7f:da:02:4d:9b:91:74:d0:1f:d2:9f:f5:4c:0a:13:b4:
         08:9f:68:82:a1:41:19:a3:37:69:64:29:9f:00:47:fc:94:a0:
         27:91:2e:66:03:fc:ab:1a:54:29:df:51:57:4d:67:36:0d:67:
         07:d0:0d:30:6a:10:44:82:70:20:1a:7d:58:5f:cd:0b:25:d8:
         63:81:39:79:d2:e6:99:f2:01:be:bc:80:4d:6f:9b:a2:ea:80:
         13:87:7c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----