Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/323830343a343830303a3a2f33322d3332203d3e20323637303931.roa
File:                     323830343a343830303a3a2f33322d3332203d3e20323637303931.roa (raw, json)
Hash identifier:          XF0mwI8q67fTP850z9pDkP6zzLXwkFJtPcDaa++/AjQ=
Subject key identifier:   02:21:EE:9D:6A:82:06:7B:E8:82:0E:C4:48:04:88:C2:DC:E4:5A:00
Certificate issuer:       /CN=5FC19A1DF15788880B70A67FED822D4E3BA5AD71
Certificate serial:       3D8E253F07AE7A50CF1EFA7D6B6993BDFDDD8931
Authority key identifier: 5F:C1:9A:1D:F1:57:88:88:0B:70:A6:7F:ED:82:2D:4E:3B:A5:AD:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC19A1DF15788880B70A67FED822D4E3BA5AD71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/323830343a343830303a3a2f33322d3332203d3e20323637303931.roa
Signing time:             Thu 04 Apr 2024 05:08:25 +0000
ROA not before:           Thu 04 Apr 2024 05:03:25 +0000
ROA not after:            Thu 03 Apr 2025 05:08:25 +0000
asID:                     267091
IP address blocks:        2804:4800::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8e:25:3f:07:ae:7a:50:cf:1e:fa:7d:6b:69:93:bd:fd:dd:89:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC19A1DF15788880B70A67FED822D4E3BA5AD71
        Validity
            Not Before: Apr  4 05:03:25 2024 GMT
            Not After : Apr  3 05:08:25 2025 GMT
        Subject: CN=0221EE9D6A82067BE8820EC4480488C2DCE45A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:93:03:31:8d:74:76:c0:3c:57:25:bc:6c:
                    9e:b3:af:39:5f:dc:04:9e:f5:9c:5f:7b:68:0d:c6:
                    62:a4:5e:c9:a0:48:e2:1d:77:b6:32:c9:ec:28:de:
                    5f:94:a5:b5:f9:77:cf:d7:2f:b0:d6:47:6e:89:57:
                    27:92:a0:d8:3a:95:44:83:69:9d:54:04:f0:65:cd:
                    b6:1d:fe:d0:fa:ca:4d:0e:e7:35:97:e8:36:69:18:
                    9c:06:76:de:03:7f:8e:fc:47:b2:42:51:6d:31:39:
                    e8:c4:f7:96:c1:53:3c:d4:7e:2d:2c:87:f2:da:eb:
                    30:cf:84:f3:b2:86:36:4d:ee:b4:cf:38:2d:4d:31:
                    40:c9:08:dc:02:b0:ce:b7:ea:fd:76:ef:9d:85:76:
                    4e:1e:10:27:4c:80:e2:31:32:f5:4c:50:cb:fb:04:
                    bb:ce:b9:8b:22:5e:2c:a2:d2:c3:0f:48:c3:62:2b:
                    c6:26:3e:a9:b1:2c:9a:4b:48:67:70:cb:f5:1f:a1:
                    cf:8d:c2:34:25:bf:c7:3a:56:49:0f:12:14:f6:ce:
                    dd:9d:c7:03:4f:2a:f5:dd:fb:a8:59:ce:45:0a:03:
                    2c:a5:80:36:6f:11:bb:6b:7e:01:a2:ec:b1:fa:b2:
                    5e:d8:80:18:63:5d:53:3b:29:87:5b:37:0f:0f:0f:
                    3f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:21:EE:9D:6A:82:06:7B:E8:82:0E:C4:48:04:88:C2:DC:E4:5A:00
            X509v3 Authority Key Identifier:
                keyid:5F:C1:9A:1D:F1:57:88:88:0B:70:A6:7F:ED:82:2D:4E:3B:A5:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/5FC19A1DF15788880B70A67FED822D4E3BA5AD71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC19A1DF15788880B70A67FED822D4E3BA5AD71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/323830343a343830303a3a2f33322d3332203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4800::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:36:70:89:de:73:23:67:19:b2:21:fe:ec:cf:81:81:82:de:
         c3:d6:14:c1:42:6e:8f:49:d9:6f:40:7d:3f:81:44:6d:07:49:
         b1:a1:c2:83:d5:3d:cd:5d:bc:6b:7f:ae:4e:ba:08:bb:22:af:
         74:be:ab:df:d5:29:6f:ef:d9:b9:87:04:8a:84:54:75:27:93:
         2a:fd:32:09:6f:a5:be:55:c1:36:8d:ad:c2:eb:fc:ed:1b:1a:
         b8:e6:29:1a:53:36:2f:b1:be:2f:51:87:79:ab:a3:fa:41:00:
         dd:47:12:7d:f0:86:69:24:b0:9a:07:7f:a8:b4:b0:71:a6:18:
         20:a5:66:41:f6:43:4b:39:f1:4f:bb:66:dd:2f:03:08:36:bc:
         e9:77:c1:29:c4:a2:a3:50:7f:ac:12:d2:2c:f1:b7:81:d3:5a:
         29:7a:e2:37:51:4f:fa:0a:de:00:c5:10:2d:fd:e4:2f:7f:41:
         6e:01:3a:9a:00:5c:a3:c0:8f:89:d4:2c:60:24:3a:aa:dc:69:
         76:c0:0e:a0:dd:9b:fc:3a:6e:b3:c3:2b:7e:f0:67:5c:86:04:
         ae:b4:9c:c4:af:32:08:40:f5:73:c7:77:d5:18:98:1a:6f:8f:
         59:c3:83:71:e0:67:6b:09:93:3e:5b:67:24:92:3e:a4:2a:ce:
         aa:20:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----