Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a383030303a3a2f33342d3334203d3e20323638383738.roa
File:                     323830343a356266303a383030303a3a2f33342d3334203d3e20323638383738.roa (raw, json)
Hash identifier:          5tiGgO5TwsEIKvSvtxdP2T3zxOc71kUEVgwLp0/opdk=
Subject key identifier:   72:24:92:7C:60:48:E4:DC:94:39:0E:7E:B4:D4:88:88:A1:3D:B7:87
Certificate issuer:       /CN=B41C5D20FCE773495931567B28D958303BB191D0
Certificate serial:       4F5244A62539CB0FCC63416CD1B0657ED1006447
Authority key identifier: B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a383030303a3a2f33342d3334203d3e20323638383738.roa
Signing time:             Fri 09 Feb 2024 12:32:33 +0000
ROA not before:           Fri 09 Feb 2024 12:27:33 +0000
ROA not after:            Fri 07 Feb 2025 12:32:33 +0000
asID:                     268878
IP address blocks:        2804:5bf0:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:52:44:a6:25:39:cb:0f:cc:63:41:6c:d1:b0:65:7e:d1:00:64:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41C5D20FCE773495931567B28D958303BB191D0
        Validity
            Not Before: Feb  9 12:27:33 2024 GMT
            Not After : Feb  7 12:32:33 2025 GMT
        Subject: CN=7224927C6048E4DC94390E7EB4D48888A13DB787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:92:04:dd:14:51:40:02:c1:99:92:f1:f5:
                    dc:7f:53:7b:37:f8:85:ca:19:9a:0e:6c:fb:0f:6a:
                    49:1d:1c:5e:8d:41:d3:73:48:02:0b:92:1d:ad:14:
                    c5:8c:cb:4a:23:57:d7:df:3a:d2:fc:c5:54:d9:ab:
                    31:34:a8:dc:76:e3:12:bf:b3:6d:9d:5e:6f:75:91:
                    30:be:f9:a7:9b:2d:b4:ca:9f:fc:53:86:d6:c0:5d:
                    b0:4f:7a:57:60:86:72:0d:67:df:d7:fd:aa:22:c7:
                    37:23:e9:69:d6:74:a9:df:24:67:66:99:b2:51:0f:
                    c8:af:e5:af:34:9f:bb:52:57:cc:28:7e:b5:be:89:
                    cd:2c:23:c4:6d:db:b1:0e:df:0b:c7:fd:ba:6a:68:
                    ce:1a:77:b1:74:89:14:20:51:0e:e4:9f:29:41:e7:
                    48:ef:72:d2:6a:f0:38:3a:08:86:91:39:94:ab:30:
                    e2:17:d7:5e:55:62:a2:9a:aa:42:d5:be:7d:29:9e:
                    fd:1a:ed:a8:79:b9:63:f1:4a:15:de:d1:52:95:08:
                    44:de:75:64:a2:8a:e8:c2:c8:43:9a:6d:7b:54:fe:
                    9e:4b:24:bd:e5:8f:5b:5d:f3:04:f3:79:67:69:01:
                    03:d5:8e:ea:3b:bc:e9:c9:a8:ad:ac:f3:59:e3:4f:
                    be:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:24:92:7C:60:48:E4:DC:94:39:0E:7E:B4:D4:88:88:A1:3D:B7:87
            X509v3 Authority Key Identifier:
                keyid:B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/B41C5D20FCE773495931567B28D958303BB191D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a383030303a3a2f33342d3334203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         66:f3:a2:40:fc:d7:35:dd:15:35:4b:bb:a7:7b:c3:38:28:7d:
         c8:52:89:d7:8a:34:b1:de:e0:1d:91:6a:07:2f:da:f9:58:ac:
         a7:2e:f7:ba:4b:b7:c8:7d:49:b5:a5:16:9c:83:4b:7c:03:59:
         fa:df:00:6c:a3:09:4b:dd:b0:a8:e0:b8:e0:65:a9:be:2f:0b:
         07:3a:da:e6:0b:28:d0:bc:84:80:be:ca:08:73:79:81:41:ec:
         6e:1d:28:3c:15:71:01:6d:9d:b8:ac:14:f3:d2:18:d6:e3:6d:
         4e:2c:f9:58:a7:11:76:4b:71:84:fa:1b:11:d5:5c:c7:b9:59:
         d2:2b:36:3f:ce:ce:9d:99:5d:29:15:de:18:b7:b5:3d:0a:06:
         96:ab:5f:2d:fe:31:ba:18:d6:74:80:36:d0:00:d7:65:3c:ab:
         35:c6:50:9c:f1:69:76:f6:1d:e8:21:67:f8:15:8a:be:21:03:
         ee:8b:bb:57:3e:26:70:3d:e4:67:2e:cd:22:d1:e1:12:43:31:
         94:44:1f:22:29:78:f4:5c:09:cd:a3:51:bf:e0:16:84:4b:16:
         29:81:01:fe:6c:d8:49:9c:e5:57:40:42:88:13:b2:9c:09:3f:
         12:1e:ee:7a:30:14:a6:b3:c8:4f:09:32:81:e5:a5:38:33:82:
         d9:ff:41:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----