Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a383030303a3a2f33332d3333203d3e20323730383835.roa
File:                     323830343a373266303a383030303a3a2f33332d3333203d3e20323730383835.roa (raw, json)
Hash identifier:          y8uesfhZac3o1nHOmIdv/o0YTG1qqn+vcMqYPjuyISo=
Subject key identifier:   02:34:75:17:E5:5E:AD:0A:4E:60:41:49:FC:6A:44:56:E6:0B:50:73
Certificate issuer:       /CN=DC049CCDCC417B7071369106C6F115AD908A6D43
Certificate serial:       17D066E1AD384788D1D9FC997E07E30CA1416FF0
Authority key identifier: DC:04:9C:CD:CC:41:7B:70:71:36:91:06:C6:F1:15:AD:90:8A:6D:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC049CCDCC417B7071369106C6F115AD908A6D43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a383030303a3a2f33332d3333203d3e20323730383835.roa
Signing time:             Fri 06 Sep 2024 18:56:00 +0000
ROA not before:           Fri 06 Sep 2024 18:51:00 +0000
ROA not after:            Fri 05 Sep 2025 18:56:00 +0000
asID:                     270885
IP address blocks:        2804:72f0:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d0:66:e1:ad:38:47:88:d1:d9:fc:99:7e:07:e3:0c:a1:41:6f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC049CCDCC417B7071369106C6F115AD908A6D43
        Validity
            Not Before: Sep  6 18:51:00 2024 GMT
            Not After : Sep  5 18:56:00 2025 GMT
        Subject: CN=02347517E55EAD0A4E604149FC6A4456E60B5073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:ba:f7:ec:35:2b:c6:31:93:00:ab:c8:80:
                    18:bc:2c:52:ea:87:93:6c:a3:44:1e:12:46:ce:7f:
                    c4:04:d6:ab:03:9f:7b:e8:08:d5:9c:d6:f2:d7:55:
                    2a:22:79:98:b4:38:a5:8e:57:38:37:ac:af:95:b6:
                    b4:45:f7:83:9b:f6:15:6b:bd:c4:29:af:b0:f4:df:
                    93:7a:b0:57:64:f2:b8:2a:8b:d9:e9:c5:4d:47:db:
                    8b:dd:03:ca:47:46:13:77:8d:51:7e:77:2a:f5:a5:
                    d0:d0:32:0e:d4:fb:36:9a:12:3d:09:6d:45:30:a7:
                    74:7b:be:e9:56:4a:64:ba:04:97:9a:d5:8f:33:0a:
                    20:f6:6d:62:65:26:2c:78:c3:2b:1a:19:18:f9:75:
                    13:ce:49:4c:9f:1d:dd:43:0e:a3:31:35:e6:9e:b4:
                    b6:d6:29:7e:b7:e0:5f:78:c6:5f:e3:69:62:01:22:
                    88:0c:95:e9:7f:c5:41:b6:1f:70:0a:6d:2d:a7:9e:
                    a8:10:73:c2:54:e8:0e:eb:fa:34:e3:11:81:79:29:
                    3d:6b:df:16:77:df:2b:5c:87:11:72:35:77:f9:1d:
                    ad:64:e2:5f:04:66:26:16:29:c5:9a:2d:4a:1d:4d:
                    83:19:a8:6e:d4:2a:86:e2:4d:30:b3:04:8a:8e:cd:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:34:75:17:E5:5E:AD:0A:4E:60:41:49:FC:6A:44:56:E6:0B:50:73
            X509v3 Authority Key Identifier:
                keyid:DC:04:9C:CD:CC:41:7B:70:71:36:91:06:C6:F1:15:AD:90:8A:6D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/DC049CCDCC417B7071369106C6F115AD908A6D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC049CCDCC417B7071369106C6F115AD908A6D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a383030303a3a2f33332d3333203d3e20323730383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:15:60:3d:04:7f:13:b7:e4:e3:f8:8b:90:13:33:14:8a:b9:
         03:7a:8c:d7:4c:c1:1f:48:9d:25:aa:2c:ea:22:d7:a4:17:f0:
         2a:cd:49:d9:bf:4b:80:63:f2:55:32:28:a1:8c:00:c0:a0:4d:
         97:9e:e7:f1:a5:10:a3:03:c9:e9:4a:f4:e5:c5:8b:c9:4c:7d:
         bb:a0:00:30:89:16:e0:9a:f7:b4:0c:2a:e9:be:cc:39:a7:98:
         2d:ad:b4:fb:cd:f2:38:ea:ac:12:fa:5b:39:01:10:19:b6:a3:
         f5:84:b7:86:71:e3:39:ee:70:90:e8:a8:37:4f:22:8f:43:5d:
         92:ba:94:23:ca:fe:53:b5:b9:6b:6c:d0:5b:f6:e5:d8:e3:ee:
         ab:c9:02:7e:9f:43:d5:c3:b0:13:fb:9d:ba:63:b3:73:bc:0a:
         f1:99:26:ff:ad:88:00:6a:25:53:ce:22:2a:c8:73:8a:29:08:
         0e:01:fe:00:18:f5:ad:75:2f:64:58:79:3d:80:f4:cf:24:d7:
         17:d8:42:96:52:48:27:0e:d6:a1:50:4a:d8:7a:dc:a8:ba:88:
         91:79:8d:b4:31:0e:a0:7f:4a:bf:b5:84:75:2b:18:1e:63:7e:
         91:41:10:80:1b:c9:8c:50:71:18:ed:78:9b:c0:bd:a4:3d:a2:
         63:b2:d6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----