Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a3a2f33322d3332203d3e20323635333933.roa
File:                     323830343a333336343a3a2f33322d3332203d3e20323635333933.roa (raw, json)
Hash identifier:          /JUjyvB68ALpgnhNwBMD9+oNiVUehtL8HAcmrAdy2iM=
Subject key identifier:   4D:17:FB:C5:71:A5:62:81:93:99:09:F3:E6:82:DA:EE:29:2F:23:52
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       6BF80394D7508EBDC74AE65DD84D9607EE7201FD
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a3a2f33322d3332203d3e20323635333933.roa
Signing time:             Thu 04 Apr 2024 02:39:50 +0000
ROA not before:           Thu 04 Apr 2024 02:34:50 +0000
ROA not after:            Thu 03 Apr 2025 02:39:50 +0000
asID:                     265393
IP address blocks:        2804:3364::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f8:03:94:d7:50:8e:bd:c7:4a:e6:5d:d8:4d:96:07:ee:72:01:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: Apr  4 02:34:50 2024 GMT
            Not After : Apr  3 02:39:50 2025 GMT
        Subject: CN=4D17FBC571A56281939909F3E682DAEE292F2352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:fb:b1:c4:11:f5:4b:2f:a6:79:02:2d:d9:
                    56:22:fb:ad:57:54:59:49:6e:a2:b0:62:d0:74:df:
                    dd:7f:00:82:80:78:9a:9b:0d:fd:f3:28:d8:55:a1:
                    38:80:ff:3e:a3:b0:41:0a:d3:0c:d8:42:43:9f:03:
                    4d:1b:e2:e3:4d:87:4d:21:5a:4c:9d:fc:40:d5:8e:
                    bd:f0:1f:d3:5b:ff:f9:2c:ab:96:39:b7:4e:bc:10:
                    68:d2:f5:95:1a:11:8c:43:f5:c6:15:a0:3e:97:b3:
                    3e:6b:35:67:31:6a:06:45:9f:d7:f4:1d:18:b4:a0:
                    7c:72:19:9b:47:c1:75:49:4f:a6:51:bd:dc:f5:be:
                    39:19:90:57:63:19:6f:cf:58:3f:40:db:af:87:7b:
                    f2:e4:da:44:18:0e:2c:b2:32:4d:1b:d7:f6:d5:73:
                    a5:37:74:a7:4f:0d:15:4e:4d:e7:3f:43:35:12:1f:
                    c0:9b:07:21:9e:ab:39:70:39:69:65:12:23:e1:2b:
                    e8:c6:6d:4b:84:ec:fb:96:a3:ee:b8:90:90:42:88:
                    87:b3:27:24:e5:56:e0:e6:ea:67:57:29:3e:e8:09:
                    81:4a:e3:bb:ee:62:a9:ba:52:a8:de:d9:52:e5:67:
                    df:b0:a7:dd:db:f7:7a:bd:71:89:ec:eb:3f:54:d5:
                    97:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:17:FB:C5:71:A5:62:81:93:99:09:F3:E6:82:DA:EE:29:2F:23:52
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a3a2f33322d3332203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:d9:32:a0:da:81:32:2b:03:ed:52:d7:48:5a:ca:52:46:ea:
         fa:e2:ba:16:c0:0d:5a:1c:92:9f:52:b7:62:ee:eb:5f:9c:04:
         12:b1:4b:77:b4:fe:10:28:6f:00:10:eb:af:b3:02:80:2a:18:
         e8:0d:45:4a:77:d5:f1:39:ea:88:c0:c6:69:5e:d3:fc:af:f3:
         22:b1:b3:a7:5d:56:56:f9:88:4d:09:a4:39:45:bb:07:64:9c:
         09:2b:fc:e0:dd:3b:15:bb:69:41:b4:04:d0:4a:1c:31:01:94:
         49:be:6a:97:c2:2f:ee:72:02:af:86:50:cc:28:79:23:69:d0:
         ff:e9:1b:3b:ab:be:6c:0d:d1:11:e4:29:df:88:64:ac:c2:7f:
         1e:b7:4f:50:b0:b5:16:af:19:b1:a4:65:e4:f9:d7:35:36:68:
         02:03:35:e8:dc:cf:b3:74:c2:c5:88:0a:07:06:84:b9:6a:36:
         b0:19:df:93:85:57:59:e2:02:88:ad:55:cc:c4:1e:31:a8:e3:
         a8:b4:53:4b:6d:bb:f9:c1:2a:c2:c2:93:5d:2e:e2:df:33:f6:
         8e:39:e6:c1:ff:33:a0:12:2a:b8:d7:ee:04:2e:34:5f:75:49:
         d5:06:5c:ff:7e:5e:b3:5b:5b:28:71:06:c2:80:cd:ce:44:0a:
         c7:4d:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----