Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/1/323830343a313032633a3a2f33322d3334203d3e20323633363233.roa
File:                     323830343a313032633a3a2f33322d3334203d3e20323633363233.roa (raw, json)
Hash identifier:          3JvvYmT0TWH+P65knTiUvQ94rm/J5UthXF4HuVYkk9Y=
Subject key identifier:   6B:9A:2D:E6:D1:C3:A7:2C:2C:15:1F:5B:7B:8C:F0:91:E8:1C:95:28
Certificate issuer:       /CN=A003ECD97A78942862A75B3FD6339EE84C8298A2
Certificate serial:       3D3CB426D31D557D13782354617A639AEE8B0B2C
Authority key identifier: A0:03:EC:D9:7A:78:94:28:62:A7:5B:3F:D6:33:9E:E8:4C:82:98:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A003ECD97A78942862A75B3FD6339EE84C8298A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/1/323830343a313032633a3a2f33322d3334203d3e20323633363233.roa
Signing time:             Wed 03 Apr 2024 19:14:33 +0000
ROA not before:           Wed 03 Apr 2024 19:09:33 +0000
ROA not after:            Wed 02 Apr 2025 19:14:33 +0000
asID:                     263623
IP address blocks:        2804:102c::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3c:b4:26:d3:1d:55:7d:13:78:23:54:61:7a:63:9a:ee:8b:0b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A003ECD97A78942862A75B3FD6339EE84C8298A2
        Validity
            Not Before: Apr  3 19:09:33 2024 GMT
            Not After : Apr  2 19:14:33 2025 GMT
        Subject: CN=6B9A2DE6D1C3A72C2C151F5B7B8CF091E81C9528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:69:53:63:d4:3b:4c:0f:c1:11:24:10:f6:
                    69:5c:85:ee:66:73:09:ee:13:03:a9:22:5a:bb:c1:
                    5f:eb:34:2b:51:a7:27:d9:8a:a4:3f:b7:a3:9f:43:
                    ac:2f:19:f8:72:6d:5a:d4:03:4c:45:32:bb:c1:8b:
                    b1:64:5a:d2:f2:42:ec:73:ea:4c:c8:41:b8:21:12:
                    eb:3a:45:b2:98:94:a1:b5:25:01:16:e2:c5:f9:c9:
                    78:f7:f1:7c:39:5b:41:7d:8b:e5:66:c4:68:e8:ea:
                    6e:dd:a5:03:d2:f8:b4:5e:ad:cd:3a:3d:96:f5:58:
                    08:0c:54:6d:01:b9:68:70:c4:ef:25:d6:42:fd:75:
                    72:4a:48:2b:8b:7f:8e:ae:6c:b3:7d:44:e7:f2:8a:
                    de:f5:34:71:9c:97:a8:f9:0b:81:c4:0a:24:eb:f4:
                    22:70:ab:e0:92:2c:c9:dd:d9:3a:1e:7f:14:a1:28:
                    42:9e:c0:fb:2c:25:ad:16:2a:7a:cb:d6:2f:bc:b9:
                    10:36:cf:a7:da:f6:8e:9d:cd:82:36:c9:6a:14:da:
                    90:b7:fd:18:01:c2:95:6e:bd:1a:e2:88:75:d0:0f:
                    c8:6d:6f:3c:ee:25:9b:1a:e5:8a:06:4f:3a:5f:9a:
                    60:61:4a:d6:7f:71:2d:2c:f2:82:85:5d:24:12:74:
                    7f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9A:2D:E6:D1:C3:A7:2C:2C:15:1F:5B:7B:8C:F0:91:E8:1C:95:28
            X509v3 Authority Key Identifier:
                keyid:A0:03:EC:D9:7A:78:94:28:62:A7:5B:3F:D6:33:9E:E8:4C:82:98:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/1/A003ECD97A78942862A75B3FD6339EE84C8298A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A003ECD97A78942862A75B3FD6339EE84C8298A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/1/323830343a313032633a3a2f33322d3334203d3e20323633363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:102c::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:65:d4:00:d4:b9:1f:f2:3d:13:36:e6:b7:06:9a:96:e6:7b:
         19:4d:65:e3:52:e2:8b:88:f0:66:f0:71:31:41:0e:fb:7f:43:
         1f:99:2b:c1:f9:c4:3d:37:7e:01:8a:3b:35:97:62:f5:d0:12:
         0a:ea:62:80:53:12:23:9c:ac:e5:7d:5e:d5:fc:17:b6:02:bb:
         ed:3f:87:f5:2f:b7:4c:c3:65:9e:e7:2e:1b:21:e1:b0:68:2f:
         8f:a3:8a:cc:77:0b:39:e0:62:30:5a:6c:19:fd:91:8e:18:c1:
         be:d9:ec:64:74:92:56:a7:15:4c:37:0b:70:e3:92:07:7c:5d:
         06:60:89:1b:ad:bc:ea:8a:50:65:c5:88:c7:17:6b:a7:df:28:
         47:cf:c2:53:08:b8:f9:a8:3b:98:57:36:cb:85:e6:79:b4:10:
         60:e4:f3:2a:fe:5e:74:b0:e8:9f:72:46:b6:75:cd:1c:18:ea:
         c5:63:ba:32:67:9d:82:9f:f9:e8:2c:9e:bd:55:67:b4:b7:b8:
         34:1e:27:07:17:7c:29:97:ad:72:47:f6:52:c7:6e:32:a3:12:
         29:e7:97:36:fb:0f:15:35:d7:ce:2f:30:c4:fd:58:10:e6:1a:
         a9:5b:ad:42:f5:65:3b:5e:4b:7a:a7:c9:e8:02:09:9d:a7:21:
         3b:96:32:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----