Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/323830343a366263633a3a2f33322d3438203d3e20323730343236.roa
File:                     323830343a366263633a3a2f33322d3438203d3e20323730343236.roa (raw, json)
Hash identifier:          FXXQhy5AuqW40OmKOtFpeqTgThzs3H0ennk8nSpTXSQ=
Subject key identifier:   AE:0B:1E:91:D7:61:04:F1:CA:3F:9B:D4:C9:34:FE:70:CC:C3:8C:D9
Certificate issuer:       /CN=7CC9540166EC287505A5559227CBD46E2F3EC666
Certificate serial:       3D0A648C039FCC1EB9C21BB47EF3468AA84696BF
Authority key identifier: 7C:C9:54:01:66:EC:28:75:05:A5:55:92:27:CB:D4:6E:2F:3E:C6:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC9540166EC287505A5559227CBD46E2F3EC666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/323830343a366263633a3a2f33322d3438203d3e20323730343236.roa
Signing time:             Mon 15 Jul 2024 14:57:18 +0000
ROA not before:           Mon 15 Jul 2024 14:52:18 +0000
ROA not after:            Mon 14 Jul 2025 14:57:18 +0000
asID:                     270426
IP address blocks:        2804:6bcc::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0a:64:8c:03:9f:cc:1e:b9:c2:1b:b4:7e:f3:46:8a:a8:46:96:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC9540166EC287505A5559227CBD46E2F3EC666
        Validity
            Not Before: Jul 15 14:52:18 2024 GMT
            Not After : Jul 14 14:57:18 2025 GMT
        Subject: CN=AE0B1E91D76104F1CA3F9BD4C934FE70CCC38CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6d:41:2f:8a:9a:3a:bf:6b:37:a4:e2:e4:05:
                    2c:59:65:90:f9:f3:45:58:2e:1b:fe:7a:7e:ab:94:
                    9d:78:35:d9:b6:d9:60:12:6d:ef:f8:af:d9:b3:4c:
                    c8:dc:0e:84:40:31:1c:17:3d:a4:c4:ad:67:70:97:
                    3e:e6:1f:0d:0a:08:a3:08:b8:3f:db:af:fa:1e:80:
                    3f:80:d3:57:1a:54:93:6e:ca:42:c6:6b:37:fe:c0:
                    a3:69:ff:f5:75:3f:fb:54:b3:a0:46:f6:50:1d:5a:
                    c0:b7:cb:2a:5a:cf:93:3e:c0:41:e9:36:d5:59:0d:
                    6a:7f:29:94:07:b9:29:57:4f:68:12:cc:ea:66:66:
                    f2:22:3e:ea:1e:f0:a6:da:fb:8d:ed:61:9c:db:b5:
                    5e:4f:a3:53:b2:b1:73:25:32:ad:59:5a:c1:16:fb:
                    27:fe:58:a4:5c:ca:7e:c1:73:87:70:a1:2b:67:3a:
                    55:f7:61:df:c1:66:da:20:bb:6e:fb:c0:bb:8c:97:
                    71:1a:8f:eb:2f:2e:17:4f:77:3d:a4:83:c4:37:f5:
                    59:99:0e:49:13:45:9d:ed:85:e5:4f:aa:7b:62:62:
                    f7:f2:42:9f:bc:e9:d6:0d:66:b4:19:5f:43:f1:c8:
                    6c:06:f8:fd:34:35:69:ee:67:4a:5b:11:54:90:52:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0B:1E:91:D7:61:04:F1:CA:3F:9B:D4:C9:34:FE:70:CC:C3:8C:D9
            X509v3 Authority Key Identifier:
                keyid:7C:C9:54:01:66:EC:28:75:05:A5:55:92:27:CB:D4:6E:2F:3E:C6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/7CC9540166EC287505A5559227CBD46E2F3EC666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC9540166EC287505A5559227CBD46E2F3EC666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/323830343a366263633a3a2f33322d3438203d3e20323730343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         ed:2f:6c:90:89:da:1c:b0:cb:7b:ee:62:e0:d2:75:1f:2d:15:
         7b:f2:ff:02:18:45:88:b9:de:17:a0:28:a6:b0:6b:1b:00:fe:
         e8:66:e6:52:f2:23:b0:9f:38:76:3b:42:94:2a:08:8b:7f:6e:
         47:fb:2c:40:d9:bd:a0:cc:df:7f:ca:2e:5b:20:1d:74:29:d2:
         28:35:e5:e1:64:3e:c8:23:a1:4c:2c:a1:dd:b9:5b:39:e8:50:
         2a:37:6e:ad:c5:52:34:3c:5c:b0:d9:c8:0d:4a:5d:5c:cf:11:
         4c:97:46:c4:d1:00:08:8f:de:8c:b2:af:0a:e1:aa:83:5e:0e:
         b1:c2:d1:9c:8e:ac:47:e9:60:48:dd:fa:9d:89:c0:16:f5:56:
         7d:e3:1e:56:9c:49:fa:ac:73:fc:22:3c:aa:de:96:08:17:54:
         be:fb:1a:d4:db:1f:1c:ec:ea:01:2b:e7:5d:2d:42:bb:01:f9:
         c3:54:5d:50:2e:b7:92:7e:de:27:d4:0c:4b:b0:da:93:a1:8c:
         5c:f9:70:a0:87:53:2a:d4:26:28:94:a1:05:19:65:f4:8e:ee:
         7c:c9:a7:ae:6b:e9:9a:a9:b1:f6:39:90:24:52:ad:fc:de:ec:
         97:0e:20:f8:69:3c:2b:65:66:b9:52:b3:54:80:29:b3:59:a0:
         93:31:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----