Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a316133303a3a2f33322d3438203d3e203631383434.roa
File:                     323830343a316133303a3a2f33322d3438203d3e203631383434.roa (raw, json)
Hash identifier:          KOZs9fQjGKLqc9BKIdNumRY9n4cBZg/SZ5sPaPHq66A=
Subject key identifier:   68:40:3D:8F:40:1D:89:8F:FE:60:AA:4F:D7:EC:C4:43:95:B1:66:B5
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       2589798B90E1E16E66F0D3A16D31549D9430C5DB
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a316133303a3a2f33322d3438203d3e203631383434.roa
Signing time:             Thu 31 Oct 2024 16:59:24 +0000
ROA not before:           Thu 31 Oct 2024 16:54:24 +0000
ROA not after:            Thu 30 Oct 2025 16:59:24 +0000
asID:                     61844
IP address blocks:        2804:1a30::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:89:79:8b:90:e1:e1:6e:66:f0:d3:a1:6d:31:54:9d:94:30:c5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 16:54:24 2024 GMT
            Not After : Oct 30 16:59:24 2025 GMT
        Subject: CN=68403D8F401D898FFE60AA4FD7ECC44395B166B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:9e:6e:fa:05:5a:38:d8:b0:f8:45:9f:56:
                    8b:26:89:6e:12:de:d0:ee:e7:38:57:41:e6:76:ea:
                    19:6c:25:fb:8c:12:3f:d4:12:56:a3:3e:f4:22:e7:
                    8f:57:fa:0b:fd:e9:b4:a9:6f:b2:c3:fa:4b:02:a8:
                    e1:12:cf:3c:67:96:bc:60:7a:61:6e:f7:34:56:21:
                    b6:05:94:a1:52:24:85:1a:cd:4a:7a:1f:32:69:f4:
                    5a:d4:82:15:e7:85:be:68:63:14:a4:b8:83:ce:4a:
                    4f:74:9c:3e:d8:c7:52:af:c4:26:d0:78:c2:6f:7d:
                    60:83:49:77:71:cd:b2:27:80:81:16:74:8e:18:67:
                    72:25:63:42:7e:54:2a:0c:55:ed:43:f8:5b:01:14:
                    96:29:8b:fa:3c:0e:0a:b2:26:4d:83:eb:95:0d:a7:
                    1b:2f:58:ec:81:94:3c:b1:2b:d8:74:fd:07:d5:b9:
                    62:ac:0c:f7:d3:ca:31:60:9e:30:ee:da:92:c3:89:
                    c8:03:b5:e1:85:1a:a0:b9:42:33:96:77:ee:11:c9:
                    03:3e:fa:09:ab:16:28:70:09:cf:0e:66:02:88:74:
                    e4:5f:ba:8c:c8:99:ec:c5:0d:cf:8e:15:42:a5:5c:
                    5a:ff:c4:18:e6:9c:f6:1b:a8:3a:cb:d6:8b:0a:fc:
                    b5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:40:3D:8F:40:1D:89:8F:FE:60:AA:4F:D7:EC:C4:43:95:B1:66:B5
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a316133303a3a2f33322d3438203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:88:10:28:1c:c7:63:31:69:29:9e:fa:98:4e:33:f0:5f:92:
         82:72:81:d2:b9:bf:bf:e1:c9:09:de:66:d7:c2:24:05:7f:29:
         8f:79:10:b8:73:72:49:b8:09:0c:94:0e:82:9c:1c:e5:9b:0d:
         ff:ba:64:92:59:85:47:1d:9a:f8:c9:e4:5a:f5:a5:a6:2b:34:
         67:51:6f:5e:c5:8a:1c:56:b3:31:d7:ba:ef:25:1d:f1:4e:a0:
         f3:5e:22:e7:a6:a2:f9:01:ee:47:43:ec:7b:c7:6b:94:42:39:
         c7:c7:af:e7:ef:96:72:5d:8b:7c:8b:4c:75:d0:34:01:b5:1c:
         1e:42:e0:7a:99:b4:a8:8f:eb:8e:e0:1b:e1:43:d9:91:dc:2c:
         08:a9:da:94:a9:59:69:10:2a:67:cc:cb:93:c4:17:c9:c7:1a:
         33:a0:e1:dc:09:3c:fc:75:71:d4:f1:5f:67:92:bc:18:69:17:
         bc:83:24:02:08:cd:21:6f:1c:74:20:07:45:2b:32:f8:23:23:
         97:c3:86:e9:a8:29:f2:43:cd:27:c8:1d:38:6b:26:3c:d5:d3:
         2f:aa:45:30:b7:1d:83:1d:4f:a3:8d:3d:e3:b6:07:29:52:c5:
         3e:a3:36:d7:ab:e0:28:56:92:7e:80:8c:c8:17:45:cf:91:3f:
         a4:2c:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----