Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3332203d3e20323635303631.roa
File:                     323830343a333233303a3a2f33322d3332203d3e20323635303631.roa (raw, json)
Hash identifier:          sra7Zcg58ycwOlcoy/XvAlOFoeoXp/HvH7pKjxJSF8E=
Subject key identifier:   59:C0:80:DD:03:79:C0:13:D0:A8:C7:BE:49:88:5F:3D:A0:4B:B4:34
Certificate issuer:       /CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
Certificate serial:       5FE4EF5C36A175A126B0E90F64E5A146AC29923F
Authority key identifier: 34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3332203d3e20323635303631.roa
Signing time:             Tue 28 Mar 2023 14:47:52 +0000
ROA not before:           Tue 28 Mar 2023 14:42:52 +0000
ROA not after:            Tue 26 Mar 2024 14:47:52 +0000
asID:                     265061
IP address blocks:        2804:3230::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e4:ef:5c:36:a1:75:a1:26:b0:e9:0f:64:e5:a1:46:ac:29:92:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
        Validity
            Not Before: Mar 28 14:42:52 2023 GMT
            Not After : Mar 26 14:47:52 2024 GMT
        Subject: CN=59C080DD0379C013D0A8C7BE49885F3DA04BB434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:15:d8:26:84:dd:79:fc:c4:2a:fe:5a:ac:
                    9f:60:21:5e:4a:db:02:ad:84:ab:38:d5:69:10:5a:
                    9e:59:00:18:6e:a7:fb:7f:49:21:e2:ab:31:af:5d:
                    cc:f1:2a:9f:5c:bc:a3:15:a1:4c:3b:56:53:58:f2:
                    e0:10:45:71:d0:f8:08:ff:42:a4:85:24:5c:7b:fc:
                    fe:f7:de:32:ae:81:93:5b:79:bc:8a:48:6d:cf:6e:
                    05:13:59:fe:c6:6f:32:1d:90:c2:8a:ea:bb:22:a1:
                    cf:d2:f3:2c:4f:f0:8c:a5:03:27:f4:cf:b4:c2:2d:
                    82:62:9c:72:61:be:f2:42:42:28:0f:bf:0d:d0:c3:
                    d3:e3:2c:c2:37:02:f1:27:c5:1f:96:d7:98:22:8c:
                    98:43:dc:e8:88:0a:2c:df:c3:8a:ae:c3:c6:8f:a7:
                    d9:cc:90:28:ba:32:e7:df:98:a7:f3:82:78:d6:ce:
                    ec:a6:5f:b5:99:2c:50:67:27:e8:af:3b:1f:26:8f:
                    a8:1b:a4:19:86:42:c2:d3:23:3f:d7:d0:20:7e:d3:
                    45:e6:f3:16:24:37:a9:5d:e8:1d:68:4b:bd:f4:b9:
                    6a:b4:95:4b:67:e7:04:26:ae:9a:8d:42:58:f1:83:
                    ec:a7:39:32:60:6f:84:f6:f8:6d:4b:28:5d:bb:b9:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C0:80:DD:03:79:C0:13:D0:A8:C7:BE:49:88:5F:3D:A0:4B:B4:34
            X509v3 Authority Key Identifier:
                keyid:34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3332203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3230::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:2e:80:28:6b:20:e4:04:98:c7:74:90:80:7b:28:a8:1b:7e:
         9c:6b:6e:15:5b:a9:12:ee:c9:07:cc:98:c0:b2:b4:ed:8f:e2:
         9a:cb:db:1a:99:72:39:b7:ff:d9:58:12:81:a9:f2:b9:c6:42:
         5b:0a:e9:06:cc:bc:d3:8c:b6:9f:a8:5e:c6:92:72:40:e7:bc:
         88:7e:cc:1d:a9:0f:90:1d:90:5d:f6:5b:06:f1:7a:00:ef:9e:
         1b:22:cb:5d:8a:4f:56:b1:e6:e7:12:65:87:12:ee:3c:0b:2d:
         ea:8f:03:90:2f:59:40:23:1f:5c:d4:8b:17:18:0e:e5:8c:39:
         bb:aa:fc:2c:a2:6d:61:a4:1d:d1:3c:2e:d7:4d:2d:35:5f:35:
         c3:a9:bc:7d:f2:c1:dc:98:6b:af:ab:ef:86:af:04:42:62:66:
         d0:18:a9:1b:9e:47:60:56:2f:5f:2d:90:17:f2:7f:c8:58:75:
         bf:91:6e:08:1c:9a:51:3d:e6:58:a0:cb:e4:67:01:4f:c3:65:
         15:83:55:ae:0a:98:77:ab:79:bb:bb:fd:7e:ec:46:3a:4d:90:
         9c:8a:9a:42:61:98:62:66:45:a1:67:ee:da:e9:50:77:a4:00:
         dd:c4:18:22:d8:93:a7:64:a4:27:b2:b7:f9:be:a9:b3:f1:cf:
         e4:03:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----