Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa
File:                     323830343a356161343a3a2f33322d313238203d3e20323638373836.roa (raw, json)
Hash identifier:          U2K+yzUGSmnogE01+R8GyOFshcSv+d/slfTYJBCbxxY=
Subject key identifier:   2B:0D:83:9C:8F:21:00:F5:43:B2:EE:8E:4F:5F:A5:F8:3B:AA:0F:2F
Certificate issuer:       /CN=FF0A9222DC08A63B5F325E52AF79B0BB4820EA45
Certificate serial:       73DC1C7371A804D5B0E13103774029DD589334B6
Authority key identifier: FF:0A:92:22:DC:08:A6:3B:5F:32:5E:52:AF:79:B0:BB:48:20:EA:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa
Signing time:             Thu 25 Jul 2024 13:18:39 +0000
ROA not before:           Thu 25 Jul 2024 13:13:39 +0000
ROA not after:            Thu 24 Jul 2025 13:18:39 +0000
asID:                     268786
IP address blocks:        2804:5aa4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:dc:1c:73:71:a8:04:d5:b0:e1:31:03:77:40:29:dd:58:93:34:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF0A9222DC08A63B5F325E52AF79B0BB4820EA45
        Validity
            Not Before: Jul 25 13:13:39 2024 GMT
            Not After : Jul 24 13:18:39 2025 GMT
        Subject: CN=2B0D839C8F2100F543B2EE8E4F5FA5F83BAA0F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cd:04:e6:0c:10:37:2c:6d:c2:49:9e:43:b8:
                    57:c6:fa:ce:28:bb:5a:d3:de:04:db:f1:d5:7b:b3:
                    f2:a2:c8:be:3e:85:3c:8d:e2:28:6e:93:0b:72:0b:
                    17:fe:60:d9:8c:98:03:ae:58:bc:f8:9d:30:ce:25:
                    d7:e4:da:43:0d:5b:80:65:1b:ef:d7:6c:b5:5f:31:
                    c8:a9:a9:1c:ac:a2:0a:a9:a9:84:a2:b6:f6:fb:d3:
                    9f:01:5c:0d:d7:0f:50:b3:59:23:84:18:da:11:d6:
                    2f:50:3d:42:2b:e5:83:4c:71:9b:0b:7d:7c:08:38:
                    1d:30:a9:c7:7d:ca:03:64:cd:89:05:b4:ea:3f:83:
                    b9:c9:3e:0e:bb:7e:4f:93:c7:7e:6b:ee:c1:46:85:
                    db:22:61:e9:68:12:d1:b8:8d:d4:a6:52:97:04:44:
                    e7:f6:9a:a0:1e:05:18:30:60:4f:ec:a9:7d:69:95:
                    7e:26:62:22:3b:6f:04:01:a0:4d:b8:74:45:0d:37:
                    f9:f3:19:18:19:3d:cf:3d:de:aa:e1:04:8a:8c:bc:
                    ad:c3:8f:ed:03:66:7b:0d:62:81:d7:70:46:e0:98:
                    b4:d9:2b:a8:17:79:bc:77:65:b4:1b:6b:43:a9:fe:
                    02:c8:47:96:a4:22:d3:6a:8c:c0:d0:e7:29:5a:f4:
                    96:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0D:83:9C:8F:21:00:F5:43:B2:EE:8E:4F:5F:A5:F8:3B:AA:0F:2F
            X509v3 Authority Key Identifier:
                keyid:FF:0A:92:22:DC:08:A6:3B:5F:32:5E:52:AF:79:B0:BB:48:20:EA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:bb:4b:33:73:fb:f6:cd:f6:47:e0:be:c6:f5:10:ee:fd:77:
         e0:26:a9:f5:63:03:20:e1:7e:01:83:33:08:48:d0:74:ff:0f:
         2b:5d:3c:5e:23:33:3c:bc:cd:8d:40:f7:db:e0:a5:98:b1:d8:
         5e:9e:cc:8d:11:b5:ac:2b:76:a2:8a:af:9a:7f:08:66:69:e3:
         0d:f0:63:ca:2d:c0:ce:cb:ea:b6:4d:ee:eb:da:c8:f5:0c:24:
         56:ee:e1:79:fd:9b:b0:bf:7c:4f:ff:aa:4e:c3:16:71:5b:41:
         a6:61:6f:d5:86:0e:ae:27:95:a0:79:f7:a8:ed:16:96:db:95:
         2e:a7:6d:e5:2b:c7:bc:09:2c:55:3b:18:d6:47:7d:5d:14:49:
         49:19:cd:f4:47:2f:f0:cf:1e:a9:1f:fa:7b:6d:ee:0c:2c:04:
         99:22:04:2f:f6:f5:9c:95:e9:5f:32:ba:e7:bc:8d:a9:bc:42:
         bf:fa:46:c5:ab:22:52:51:57:c0:3f:da:b5:4b:52:2d:76:d3:
         ec:f3:ea:79:07:e9:16:4a:f1:52:cd:6a:60:04:dc:9c:35:c7:
         7d:1a:f4:58:d1:48:de:3e:a3:1b:fd:75:1f:84:80:e6:42:1b:
         cb:6a:45:ef:3e:b4:09:43:db:fc:80:da:b4:bf:e3:d8:a4:5e:
         8f:96:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----