Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/323830343a333066343a3a2f33322d313238203d3e20323634393833.roa
File:                     323830343a333066343a3a2f33322d313238203d3e20323634393833.roa (raw, json)
Hash identifier:          FNJs6HLmjPEpckacmpXo+xyo7AtweA29322Noeak+h4=
Subject key identifier:   1A:95:49:FF:C6:66:AC:60:AD:A9:5F:07:61:8A:AB:80:0A:CB:4E:E3
Certificate issuer:       /CN=B78146CB3873259A27A36DF857369BB785C52062
Certificate serial:       05DAA72DC7CC0DEB5A3FF557E5FA23E86A0AD36E
Authority key identifier: B7:81:46:CB:38:73:25:9A:27:A3:6D:F8:57:36:9B:B7:85:C5:20:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B78146CB3873259A27A36DF857369BB785C52062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/323830343a333066343a3a2f33322d313238203d3e20323634393833.roa
Signing time:             Wed 13 Nov 2024 15:10:21 +0000
ROA not before:           Wed 13 Nov 2024 15:05:21 +0000
ROA not after:            Wed 12 Nov 2025 15:10:21 +0000
asID:                     264983
IP address blocks:        2804:30f4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:da:a7:2d:c7:cc:0d:eb:5a:3f:f5:57:e5:fa:23:e8:6a:0a:d3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B78146CB3873259A27A36DF857369BB785C52062
        Validity
            Not Before: Nov 13 15:05:21 2024 GMT
            Not After : Nov 12 15:10:21 2025 GMT
        Subject: CN=1A9549FFC666AC60ADA95F07618AAB800ACB4EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:e5:b3:bc:a7:1c:6a:c1:ed:fd:29:6a:ea:
                    b4:3b:1a:3a:88:90:b7:74:d9:54:66:83:dc:e8:38:
                    bd:9f:43:90:01:36:da:c1:3d:21:e2:bc:cf:13:e7:
                    46:f3:3f:6a:95:fd:b4:cb:d1:c5:83:76:45:c7:3a:
                    7c:ee:26:9a:b9:86:a6:08:4f:ff:ef:e8:c5:7d:5b:
                    50:21:06:82:24:a3:ef:eb:34:eb:98:0d:59:01:0c:
                    37:49:eb:f0:03:cc:f7:4f:22:0e:b1:fa:91:a9:63:
                    fb:75:33:a9:55:a4:e4:14:5d:3c:ce:52:13:e4:c4:
                    1e:0d:0b:be:75:51:f7:e6:cf:90:8f:07:94:5f:4b:
                    d3:ef:ee:44:c8:81:32:ea:80:1f:b4:c5:14:1c:fb:
                    9a:bd:79:0c:09:3b:6c:8c:51:f2:35:68:1d:8e:cb:
                    cc:c9:2a:7a:8c:86:96:65:5f:1a:ef:11:6d:3a:00:
                    c3:73:07:c1:1e:4f:21:94:66:a5:86:5a:2b:3c:d2:
                    b9:31:ca:32:5f:5e:91:01:88:00:f5:57:93:34:47:
                    91:3b:d7:98:f2:8f:49:e1:88:48:d6:5d:ce:df:d2:
                    55:20:50:3a:65:39:56:ee:77:10:94:77:45:7c:91:
                    be:cc:53:33:98:db:f3:89:a3:70:f9:a8:ca:28:51:
                    08:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:95:49:FF:C6:66:AC:60:AD:A9:5F:07:61:8A:AB:80:0A:CB:4E:E3
            X509v3 Authority Key Identifier:
                keyid:B7:81:46:CB:38:73:25:9A:27:A3:6D:F8:57:36:9B:B7:85:C5:20:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/B78146CB3873259A27A36DF857369BB785C52062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B78146CB3873259A27A36DF857369BB785C52062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/323830343a333066343a3a2f33322d313238203d3e20323634393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:7f:ef:59:2f:61:d7:55:f5:e4:4e:5b:a1:31:2a:9e:3a:
         b1:fd:c5:5d:3e:b8:96:2a:20:7e:aa:25:b9:58:d4:45:c8:9f:
         d7:8d:b4:98:aa:27:fe:7f:60:b9:8e:68:78:eb:64:6b:57:da:
         b1:82:0e:53:08:a3:74:30:ba:78:17:6b:49:a9:0b:e6:48:29:
         73:3f:d2:a5:92:f7:29:24:c2:de:fa:be:eb:b0:7b:dd:27:19:
         bd:83:c1:5f:2d:c2:4f:e2:aa:78:cb:47:cf:8e:4d:bc:c2:5d:
         20:1c:fc:59:66:40:99:68:0a:98:a3:3a:c8:27:26:5a:68:5e:
         15:b5:82:a8:dc:4e:c1:ee:47:5b:fb:c4:92:2a:27:2c:dd:41:
         f3:57:e9:bf:d5:f7:30:0b:42:30:0d:b2:bf:89:20:38:99:b8:
         f9:1c:db:9f:b7:93:b1:67:e8:7c:84:a9:8b:28:ba:9e:93:c2:
         10:fd:e3:47:48:43:8e:53:6d:b1:54:c3:b9:15:09:8e:8b:c2:
         0e:6c:54:b2:4e:b1:94:47:1a:e3:eb:bc:74:bc:93:b2:fc:01:
         fa:9f:a4:da:ff:54:60:f7:91:c4:4a:27:a3:69:da:ec:b0:28:
         b8:75:49:a9:79:91:b5:6c:db:c8:5d:5e:aa:44:7a:e3:60:c8:
         4f:1c:61:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----