Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a3a2f33322d3332203d3e203631363035.roa
File:                     323830343a376461343a3a2f33322d3332203d3e203631363035.roa (raw, json)
Hash identifier:          npmKsDPaFQkSlQGEGL12zA7Uw9+5yKToxPDVrzIgO+c=
Subject key identifier:   76:8C:70:EF:3B:AC:44:A7:FC:0C:80:4A:AB:7A:95:88:28:A3:8B:61
Certificate issuer:       /CN=95A9B935AF7391D649D034160A7150D2138ECFBC
Certificate serial:       21872825E34CA08A4DCC654C7AA2AC7C3568157C
Authority key identifier: 95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a3a2f33322d3332203d3e203631363035.roa
Signing time:             Wed 23 Oct 2024 18:55:34 +0000
ROA not before:           Wed 23 Oct 2024 18:50:34 +0000
ROA not after:            Wed 22 Oct 2025 18:55:34 +0000
asID:                     61605
IP address blocks:        2804:7da4::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:87:28:25:e3:4c:a0:8a:4d:cc:65:4c:7a:a2:ac:7c:35:68:15:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A9B935AF7391D649D034160A7150D2138ECFBC
        Validity
            Not Before: Oct 23 18:50:34 2024 GMT
            Not After : Oct 22 18:55:34 2025 GMT
        Subject: CN=768C70EF3BAC44A7FC0C804AAB7A958828A38B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:9d:25:50:7a:5b:60:54:7e:0d:a6:49:18:
                    68:e7:9c:20:60:1e:bd:b7:72:1d:63:64:4d:10:e3:
                    0d:49:6a:71:fc:da:b5:5e:af:fd:cf:4b:2e:8d:8d:
                    5a:99:7a:58:4a:6b:00:bc:4b:ec:8d:09:b5:c4:35:
                    29:c5:4f:62:cd:1a:e6:2d:93:b3:8f:93:ca:66:05:
                    bc:49:1f:10:0f:6c:6d:f3:b7:cd:c8:2e:f4:15:8f:
                    3e:8e:e0:da:0c:78:2f:26:79:47:8e:76:ad:d4:79:
                    f9:c6:5f:49:00:9e:3d:2f:ad:ae:46:58:fb:95:c9:
                    44:b2:12:73:d0:f7:40:c0:17:69:23:96:5b:6b:59:
                    20:9c:70:8b:a9:73:e8:44:e8:45:fe:11:f5:42:74:
                    1d:4a:9b:5f:fd:0e:22:45:3d:47:6b:36:7d:59:83:
                    e5:51:aa:83:79:e0:97:77:17:49:a9:74:77:05:41:
                    29:ed:a5:48:fd:1e:9d:fe:3a:f8:17:d6:fe:ed:b5:
                    ca:f9:68:59:72:82:c2:69:5b:ef:a0:d0:e5:33:e8:
                    99:87:2d:15:b0:b4:2e:ba:ac:ea:ba:e4:1c:76:e4:
                    02:5a:8c:38:e8:0f:5b:92:5b:2a:c1:88:24:5d:79:
                    35:1d:92:b4:28:bc:9f:c6:7b:51:bb:d2:98:f7:b6:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8C:70:EF:3B:AC:44:A7:FC:0C:80:4A:AB:7A:95:88:28:A3:8B:61
            X509v3 Authority Key Identifier:
                keyid:95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/95A9B935AF7391D649D034160A7150D2138ECFBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a3a2f33322d3332203d3e203631363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7da4::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:47:c6:98:f9:b8:99:1e:af:7e:48:f5:ab:be:52:24:e4:36:
         f5:95:fb:74:8f:b2:70:6d:f1:60:00:77:f3:a5:ac:7b:05:9f:
         d4:ff:57:a7:b7:42:cd:69:b1:cc:33:36:2c:5f:7d:ff:05:fd:
         cb:56:45:05:c4:0b:c7:cf:49:ec:14:99:83:93:65:01:2c:95:
         d7:8b:7b:0b:3b:23:e9:f0:a2:39:7e:fb:dd:97:f2:bc:12:97:
         81:c9:8a:85:49:92:36:02:e3:b9:e5:4f:21:78:21:17:bc:c7:
         a8:78:4d:6a:fc:50:40:5d:63:e8:f0:f5:eb:66:ec:a1:d8:3f:
         2b:b2:14:54:ab:31:9d:0d:0d:4a:a1:0a:1c:e8:28:1e:e8:93:
         94:25:66:c4:ba:46:87:d9:37:82:0e:31:11:75:5f:4d:6a:2f:
         ec:fe:90:16:5c:df:54:46:dc:1c:76:53:92:4f:1f:1b:df:25:
         38:bf:b4:8b:29:c2:af:31:e7:d1:52:81:2d:79:7b:75:23:31:
         f3:b1:8c:e8:02:9d:4a:d3:c5:a1:2d:5d:58:42:a2:e2:16:b9:
         ce:5f:f9:06:6a:2d:30:9e:59:b6:56:c4:58:6b:29:0e:e8:92:
         fb:18:99:df:f4:e6:82:f8:1b:d0:f9:9e:6b:d2:07:51:b9:e1:
         9d:c2:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----