Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a343a3a2f33322d3438203d3e203238363637.roa
File:                     323830343a343a3a2f33322d3438203d3e203238363637.roa (raw, json)
Hash identifier:          Oxo5JppWT72gwW/jVTqOYQmbjo0y+/ITwcJ/oR4eRDI=
Subject key identifier:   84:07:C4:BA:D7:39:81:C8:CF:0B:4E:CD:08:0B:55:2A:C2:6F:F6:F9
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       3FCF21C5678E1BDE0343749844A77533856FAC52
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a343a3a2f33322d3438203d3e203238363637.roa
Signing time:             Thu 31 Oct 2024 17:26:22 +0000
ROA not before:           Thu 31 Oct 2024 17:21:22 +0000
ROA not after:            Thu 30 Oct 2025 17:26:22 +0000
asID:                     28667
IP address blocks:        2804:4::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cf:21:c5:67:8e:1b:de:03:43:74:98:44:a7:75:33:85:6f:ac:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:21:22 2024 GMT
            Not After : Oct 30 17:26:22 2025 GMT
        Subject: CN=8407C4BAD73981C8CF0B4ECD080B552AC26FF6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:50:f7:df:64:8a:b0:3d:2c:e2:ff:57:ea:
                    39:45:45:ee:17:eb:ad:e0:18:38:4c:cf:cc:35:41:
                    8b:d1:8b:cf:e2:5f:30:0a:1e:8b:7f:1b:de:7d:b6:
                    63:b3:94:59:6b:73:3a:45:3d:57:c6:89:d9:ff:1d:
                    27:ff:3d:10:42:d2:d3:ff:4e:77:53:75:32:6f:c2:
                    70:89:8a:73:72:bc:7e:05:35:8d:ab:1c:14:c7:c9:
                    6e:42:e6:5d:c9:27:e0:58:51:2d:7b:a6:f9:1f:b8:
                    d8:a3:d4:98:04:0c:66:57:c0:52:b4:72:25:22:75:
                    c9:9d:6a:aa:e7:e5:4a:bb:11:c8:69:5d:bc:4f:56:
                    df:99:b5:30:bc:3a:73:e1:94:37:d5:df:15:48:e8:
                    e2:4e:99:62:10:0d:f1:f2:e1:6e:90:dd:56:89:86:
                    9e:9b:05:3e:f8:ab:5f:77:6d:e9:c0:b1:3f:e4:fa:
                    4d:70:72:fe:a0:15:81:62:63:ca:25:a9:89:af:51:
                    d3:e6:82:52:e9:dc:be:4e:fe:d1:c4:b6:2a:1b:13:
                    e0:ac:32:eb:e5:a8:1e:c1:47:f5:4e:81:63:86:6a:
                    20:54:e5:19:51:08:8b:c1:98:9d:ef:e1:d9:15:0e:
                    86:60:b1:2a:f5:05:59:8e:32:58:61:51:5b:42:35:
                    ae:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:07:C4:BA:D7:39:81:C8:CF:0B:4E:CD:08:0B:55:2A:C2:6F:F6:F9
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a343a3a2f33322d3438203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:ae:c4:b4:6c:22:c6:74:ce:e9:d8:46:81:c6:6b:ed:87:
         34:8e:fc:7e:ba:85:e1:8c:91:d4:af:9a:73:b5:88:2c:74:08:
         c7:4c:7a:21:98:18:d0:71:55:09:48:75:ac:0e:5a:1d:6c:9c:
         e4:45:26:ef:22:4b:4d:d0:7e:d0:2b:da:46:d0:76:52:60:05:
         c3:c8:a9:26:c5:b1:83:6a:70:00:09:ba:7e:c0:3d:11:46:3e:
         83:e5:36:ed:72:5a:79:86:7b:02:88:70:b7:01:8e:3e:13:4b:
         21:a2:9a:0f:58:a7:08:3a:6c:5f:12:69:94:09:67:2d:31:9e:
         04:69:68:31:d3:f7:3f:9e:61:82:4e:61:94:1f:90:14:b5:83:
         93:ff:46:b9:ae:18:40:38:75:00:cf:70:b9:45:a6:0e:a0:78:
         91:19:a1:d3:c0:5b:bd:4c:60:86:52:2f:0a:14:7b:94:04:85:
         e5:b3:85:71:e2:12:19:12:d7:07:57:b9:95:41:f4:ff:95:30:
         0f:49:d7:64:39:c9:25:62:30:8f:91:bb:a7:a3:d0:8e:2a:12:
         95:fd:b0:99:09:1d:c9:6d:6e:31:4f:2f:ee:57:40:5d:91:14:
         4d:b2:2e:0d:4a:cd:8c:d8:10:da:00:cf:5b:e5:1a:55:b6:97:
         63:62:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----