Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/1/323830343a373038383a3a2f33322d3438203d3e20323730373332.roa
File:                     323830343a373038383a3a2f33322d3438203d3e20323730373332.roa (raw, json)
Hash identifier:          wFKt4psRB6jNxAFPuK4e3wOh/Su1zpwRZ1Ercy5kLwc=
Subject key identifier:   96:5B:83:93:C9:9C:1B:83:5D:BC:2A:19:DD:3C:72:E3:CD:FA:56:FE
Certificate issuer:       /CN=23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E
Certificate serial:       2D19A165A1F2184B670E45ED60F7E5BCD6316CC6
Authority key identifier: 23:EE:0E:8B:65:48:40:C9:A3:B2:F5:BA:ED:A9:19:31:23:C0:8C:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/1/323830343a373038383a3a2f33322d3438203d3e20323730373332.roa
Signing time:             Wed 10 Apr 2024 13:19:49 +0000
ROA not before:           Wed 10 Apr 2024 13:14:49 +0000
ROA not after:            Wed 09 Apr 2025 13:19:49 +0000
asID:                     270732
IP address blocks:        2804:7088::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:19:a1:65:a1:f2:18:4b:67:0e:45:ed:60:f7:e5:bc:d6:31:6c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E
        Validity
            Not Before: Apr 10 13:14:49 2024 GMT
            Not After : Apr  9 13:19:49 2025 GMT
        Subject: CN=965B8393C99C1B835DBC2A19DD3C72E3CDFA56FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:6b:4d:d6:cd:f7:c2:f4:a3:57:1e:b4:0c:
                    55:18:47:a7:4e:a6:4a:6f:bb:ad:48:7c:26:83:57:
                    4a:5e:dd:8f:5c:c3:3c:3a:82:1e:42:d5:2b:fe:70:
                    2b:ae:1d:c7:ce:f0:58:80:49:24:ce:ad:20:e0:8c:
                    e9:0c:11:c2:b0:f7:db:6c:17:23:80:e9:0b:2d:00:
                    76:54:49:3d:4f:24:01:cc:b4:c6:c4:0f:62:70:e0:
                    12:8c:c4:97:25:50:a4:6b:ff:b5:5d:aa:7c:38:85:
                    ec:ae:b7:b1:94:2e:67:73:29:a4:02:b5:00:da:b2:
                    44:88:e3:16:f9:8f:08:50:46:37:a3:27:98:c4:b4:
                    6b:e3:6a:30:ac:6e:60:c1:96:3f:a1:a9:cf:19:6c:
                    69:fc:9d:c8:0a:9e:2f:f8:d5:8c:3d:c1:81:51:43:
                    af:6b:12:2c:0a:74:43:cd:e7:fc:22:8d:d6:be:23:
                    1d:23:33:9d:81:fc:3c:72:54:e2:77:fb:7a:ff:6f:
                    3f:40:da:57:25:4d:84:ca:12:ff:d2:ef:12:70:fe:
                    90:b4:f5:87:92:7f:57:08:68:de:5c:10:fc:2b:0f:
                    c1:a2:e8:2f:cc:9f:ed:bb:f2:40:17:5a:ce:2e:8b:
                    77:f9:bc:4b:3f:59:c4:44:8e:22:06:98:79:0b:78:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5B:83:93:C9:9C:1B:83:5D:BC:2A:19:DD:3C:72:E3:CD:FA:56:FE
            X509v3 Authority Key Identifier:
                keyid:23:EE:0E:8B:65:48:40:C9:A3:B2:F5:BA:ED:A9:19:31:23:C0:8C:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/1/23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/1/323830343a373038383a3a2f33322d3438203d3e20323730373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7088::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:ef:85:52:14:23:d0:89:e1:ba:fa:e0:4c:27:be:db:5a:e3:
         36:c9:90:17:a9:c0:8a:0e:16:ab:33:17:04:7c:bb:52:be:ed:
         7e:33:10:05:90:db:fb:81:a6:89:d4:0d:cb:51:a7:bb:3f:6e:
         da:49:8c:a9:43:53:3f:bf:d2:b1:d6:7a:c5:dc:db:0c:d8:c4:
         67:23:51:94:79:92:e7:ea:a5:23:c1:37:5e:e4:24:9c:cd:6d:
         fd:d8:a0:04:d4:96:a0:c2:e7:42:45:23:4d:37:c9:d9:39:fb:
         0a:c0:22:ac:31:b7:10:b1:88:9a:3e:b3:95:d5:38:de:a9:eb:
         ef:ff:4f:e1:50:5d:b2:f7:2a:65:61:4b:69:6d:70:6b:91:90:
         48:55:95:34:b4:eb:12:09:f1:00:d6:63:b5:31:cb:f8:30:a1:
         17:90:09:11:05:bd:88:31:bd:6d:d6:87:4d:8d:7a:15:4d:33:
         06:ae:64:1b:c1:b4:bb:2b:b9:0e:ca:e2:42:ee:16:e7:f2:83:
         c8:5e:8b:01:7c:18:64:c9:f7:43:86:72:3b:5d:f2:4f:dc:77:
         27:eb:b0:61:16:81:e1:a5:57:4e:45:cc:4a:aa:ff:9a:f3:45:
         4c:3f:e2:04:66:2e:b5:08:ab:e3:f4:c6:67:0d:85:aa:74:f9:
         7a:e9:f8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----