Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/323830343a313361383a3a2f33322d313238203d3e20323633353434.roa
File:                     323830343a313361383a3a2f33322d313238203d3e20323633353434.roa (raw, json)
Hash identifier:          yWUGOo+eIIcsRfvgFdqPW1UK2DomSlHkNnsMir3lGQo=
Subject key identifier:   18:41:E3:EC:50:27:5A:E4:A2:9E:53:03:48:2B:F7:8A:1A:A8:C7:7E
Certificate issuer:       /CN=87BFCCDEFC9238205A2E908465AF2BE8F5F87663
Certificate serial:       3D17A806284ECCFEDC9E5FF153B7892620E23D28
Authority key identifier: 87:BF:CC:DE:FC:92:38:20:5A:2E:90:84:65:AF:2B:E8:F5:F8:76:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BFCCDEFC9238205A2E908465AF2BE8F5F87663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/323830343a313361383a3a2f33322d313238203d3e20323633353434.roa
Signing time:             Thu 04 Apr 2024 14:12:51 +0000
ROA not before:           Thu 04 Apr 2024 14:07:51 +0000
ROA not after:            Thu 03 Apr 2025 14:12:51 +0000
asID:                     263544
IP address blocks:        2804:13a8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:17:a8:06:28:4e:cc:fe:dc:9e:5f:f1:53:b7:89:26:20:e2:3d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BFCCDEFC9238205A2E908465AF2BE8F5F87663
        Validity
            Not Before: Apr  4 14:07:51 2024 GMT
            Not After : Apr  3 14:12:51 2025 GMT
        Subject: CN=1841E3EC50275AE4A29E5303482BF78A1AA8C77E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:42:e1:03:4b:39:b6:c5:dc:a1:28:04:9b:
                    d3:a2:bb:07:a3:6b:5e:7c:b9:cb:01:7f:cc:49:ed:
                    39:ee:c2:20:11:ed:14:59:25:f2:fd:46:6b:08:02:
                    d6:78:8a:7c:ee:87:6e:0e:6e:14:c0:f9:00:b1:ec:
                    cd:3b:e5:de:cb:90:26:2f:1d:4e:49:8c:2a:3b:22:
                    54:98:34:70:38:25:ef:53:20:89:93:92:be:28:99:
                    a3:7c:17:09:28:5b:3f:c0:b7:1f:07:64:f2:39:65:
                    7a:88:0d:ee:5c:a9:c6:60:26:b9:86:c5:02:20:c4:
                    c3:af:4a:42:f0:02:66:52:89:0e:2c:40:7d:9b:9e:
                    77:96:29:0a:cb:b9:f9:6a:7c:7f:bd:21:03:4f:58:
                    4a:a9:e7:05:df:70:a2:78:cb:4d:69:c6:9f:fc:0c:
                    56:41:e7:d6:d3:c6:44:27:6a:df:c4:51:30:e9:5c:
                    b6:d2:a6:83:7a:8a:ad:ff:13:88:9e:3a:c0:cd:e7:
                    87:be:40:27:51:b1:db:2a:cb:d8:56:99:ef:70:2b:
                    f6:c7:b2:75:0e:23:b2:58:41:8d:1e:e6:60:58:cb:
                    83:59:0d:de:c9:37:44:e6:b9:4b:ec:d9:2f:a2:eb:
                    57:f8:89:ab:24:d8:55:ab:cb:c5:33:e3:b0:89:18:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:41:E3:EC:50:27:5A:E4:A2:9E:53:03:48:2B:F7:8A:1A:A8:C7:7E
            X509v3 Authority Key Identifier:
                keyid:87:BF:CC:DE:FC:92:38:20:5A:2E:90:84:65:AF:2B:E8:F5:F8:76:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/87BFCCDEFC9238205A2E908465AF2BE8F5F87663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BFCCDEFC9238205A2E908465AF2BE8F5F87663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/323830343a313361383a3a2f33322d313238203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:8c:74:ed:f3:dd:52:23:e0:f4:3d:83:72:fe:a3:06:1f:ad:
         9b:e5:dd:17:c6:6f:7c:89:8d:2c:46:03:ef:d4:da:d9:d3:17:
         c5:57:1a:02:a9:40:69:7c:6a:47:11:14:63:67:75:fa:a3:4b:
         bc:76:1a:b9:e1:c5:93:ab:39:d1:1c:c1:de:99:90:57:50:f3:
         56:31:45:b7:2c:7c:bb:6b:dc:fe:e2:7a:32:03:32:04:97:15:
         06:c1:82:8a:db:7f:c4:2c:71:ef:90:e7:64:6e:95:3a:79:41:
         13:3b:5e:63:f8:46:d5:e1:2d:5b:a0:96:30:64:17:91:0d:a6:
         9c:b3:3b:13:42:57:4b:9c:c7:ff:cb:a3:be:10:66:7b:8f:97:
         fc:5b:ff:bd:34:e0:ad:85:8c:42:39:9c:6c:91:4b:fe:b6:ec:
         e0:4a:39:1d:a4:84:88:69:45:8b:33:34:6d:c8:82:db:d5:79:
         48:36:ed:36:44:69:47:04:55:28:2a:01:92:ee:dc:35:8b:46:
         fc:a9:2a:12:de:9c:69:92:81:6e:da:01:cd:1a:45:6f:bb:a9:
         8d:b1:75:c9:65:5a:1a:0c:c8:94:94:e4:60:0d:5e:d8:cc:0b:
         0a:af:c6:f0:54:46:c2:87:00:fc:2b:ee:24:c3:fd:37:77:77:
         28:d1:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----