Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          yRHuXKonVLxJ3tdemsyeYmm98i30glExechpG4HFG3I=
Subject key identifier:   80:2B:F9:DD:3B:E1:AD:49:4A:C9:D7:5A:65:58:F6:A1:34:44:7B:9D
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       6B982C640126EF2EF85C102D5985967842EF440A
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Mon 06 May 2024 17:25:29 +0000
ROA not before:           Mon 06 May 2024 17:20:29 +0000
ROA not after:            Mon 05 May 2025 17:25:29 +0000
asID:                     265393
IP address blocks:        2804:3364:8100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:98:2c:64:01:26:ef:2e:f8:5c:10:2d:59:85:96:78:42:ef:44:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: May  6 17:20:29 2024 GMT
            Not After : May  5 17:25:29 2025 GMT
        Subject: CN=802BF9DD3BE1AD494AC9D75A6558F6A134447B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:e3:23:fa:56:72:cb:e6:e2:f6:9a:39:25:
                    6f:ad:a2:6a:92:42:4a:21:e1:7a:fe:27:3a:11:57:
                    0c:8d:45:97:21:ee:b3:71:b8:2c:94:7c:0d:0e:c8:
                    db:b2:92:b4:cf:0f:4c:9e:f3:89:2d:69:9e:3e:ac:
                    e9:c6:3a:2d:d7:21:31:bc:81:02:15:ed:f4:b9:08:
                    d7:24:5d:22:1a:d6:e4:28:cb:d2:ce:6f:60:30:a9:
                    a7:1c:f0:33:fe:d1:30:a0:b3:b5:ca:28:8b:6d:d6:
                    b4:4e:0d:a8:19:3c:d8:c3:dd:90:60:b4:25:5a:42:
                    27:67:f7:42:a0:07:a7:fd:be:18:dd:fe:1e:94:3f:
                    1f:b1:66:c4:be:e8:b0:55:96:90:bc:5a:fc:e2:d4:
                    a0:eb:7d:00:c9:41:d1:c8:bf:b8:66:29:3d:fb:d7:
                    69:40:a6:13:b0:53:23:e2:a4:d1:1d:72:b8:96:d9:
                    21:ef:56:7c:9a:2d:81:31:55:8a:ec:50:a5:30:9a:
                    3f:a8:b5:b5:3c:71:7e:43:9f:53:0a:1a:83:ba:7e:
                    59:5d:40:7e:e9:6b:5e:72:58:f8:6c:b8:e4:a1:0c:
                    b9:25:79:93:a4:a4:5e:e1:0a:be:8b:48:b6:7b:6a:
                    6a:77:96:bd:87:5c:43:9f:d0:55:22:5c:bc:da:46:
                    e3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2B:F9:DD:3B:E1:AD:49:4A:C9:D7:5A:65:58:F6:A1:34:44:7B:9D
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:44:0b:16:b1:25:c9:ff:68:8c:2d:5d:94:11:20:41:85:3a:
         cb:43:82:53:93:25:fd:7a:68:a0:8e:8f:d9:6c:08:7e:d4:d4:
         51:53:24:87:68:05:bc:a8:20:50:9f:1a:a6:37:60:e3:3c:38:
         2c:3c:7b:ac:05:0e:d5:66:e7:bc:91:e8:d3:84:92:6d:0e:b8:
         a1:e1:c7:2e:11:d4:3f:d6:e4:4f:68:d5:a4:a9:4a:4a:54:93:
         19:2f:60:08:37:14:88:9d:f6:6a:d4:ec:7a:69:8e:f5:12:8f:
         a9:4b:9e:bd:fb:32:37:1a:8d:3a:d9:a4:2e:aa:c3:7d:10:85:
         0a:a5:4d:45:5d:10:dd:3f:3a:a3:7f:33:21:c7:46:63:49:9a:
         ed:2c:79:b0:4f:d5:c0:65:72:8c:29:98:0e:08:1c:07:7e:be:
         ea:91:cf:d4:9d:21:1b:d5:06:eb:8f:7f:85:4b:64:a3:0f:c1:
         c0:c7:64:1e:fc:cd:82:76:10:81:aa:e4:e9:67:ca:ef:42:4e:
         ab:9f:1d:f4:7b:66:86:18:e5:54:75:af:ed:1f:15:5d:29:71:
         47:ed:2d:04:eb:3a:51:ef:46:61:1d:47:f2:9d:eb:7d:b5:7b:
         7c:df:0b:4c:fe:c5:55:eb:d6:79:63:f4:dc:3d:c1:2b:39:7b:
         3d:6c:d2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----