Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/1/323830343a386232343a3a2f33322d313238203d3e20323733373134.roa
File:                     323830343a386232343a3a2f33322d313238203d3e20323733373134.roa (raw, json)
Hash identifier:          Se3dHnxfFG9qhUrR2TrSgscE/ltjK2Y+t5EahNbbL3Q=
Subject key identifier:   FB:FA:81:0F:6A:00:2F:50:E3:C7:80:6D:A1:4C:1A:38:53:10:81:DE
Certificate issuer:       /CN=E68E37E7148EA9F2ACAAF02328DE764438A84B3A
Certificate serial:       347B615CC5392D1DB11B4E7B2B4256C8B7F32483
Authority key identifier: E6:8E:37:E7:14:8E:A9:F2:AC:AA:F0:23:28:DE:76:44:38:A8:4B:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68E37E7148EA9F2ACAAF02328DE764438A84B3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/1/323830343a386232343a3a2f33322d313238203d3e20323733373134.roa
Signing time:             Thu 04 Apr 2024 11:41:09 +0000
ROA not before:           Thu 04 Apr 2024 11:36:09 +0000
ROA not after:            Thu 03 Apr 2025 11:41:09 +0000
asID:                     273714
IP address blocks:        2804:8b24::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7b:61:5c:c5:39:2d:1d:b1:1b:4e:7b:2b:42:56:c8:b7:f3:24:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68E37E7148EA9F2ACAAF02328DE764438A84B3A
        Validity
            Not Before: Apr  4 11:36:09 2024 GMT
            Not After : Apr  3 11:41:09 2025 GMT
        Subject: CN=FBFA810F6A002F50E3C7806DA14C1A38531081DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:bc:28:c6:b7:fe:10:63:f8:de:68:f0:7e:
                    c5:11:2c:71:9f:cb:57:d6:a5:d5:3b:7c:80:6f:77:
                    0e:50:42:71:c6:a8:ad:32:56:91:ec:80:09:77:0a:
                    f8:10:fd:b1:fd:36:5e:6f:b5:92:0d:ee:f8:2a:5d:
                    aa:9b:59:72:71:05:95:9d:df:47:50:69:61:21:3e:
                    e6:64:75:c4:d1:5a:ca:9d:4e:a9:a0:e8:81:15:26:
                    8b:27:7c:eb:0a:dc:e8:e9:b3:20:40:88:40:7a:59:
                    00:bc:97:22:c3:a5:a3:da:00:b7:9a:fc:b7:dc:ea:
                    4b:33:cc:76:83:01:66:6a:63:ac:ee:83:9b:c0:14:
                    04:0e:d6:d4:75:04:43:92:f8:3c:7f:6e:c0:c1:e3:
                    bd:96:e5:45:7c:e3:02:e0:47:3f:b2:12:2d:c6:e0:
                    c8:3e:f1:87:bf:f4:89:3a:e6:64:59:f7:19:76:20:
                    b4:cb:6c:db:4c:ce:5f:b2:49:75:36:0d:f5:3e:e3:
                    87:1a:e0:43:9e:37:eb:78:94:59:1e:d7:eb:77:4a:
                    82:d6:94:ff:6d:54:b4:6d:f2:ae:82:3e:c2:4f:a8:
                    46:45:d0:d5:1e:67:68:7d:9c:25:45:16:f3:bc:45:
                    eb:8f:3d:c0:cd:64:06:b3:c4:0a:23:b8:3b:4c:60:
                    04:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FA:81:0F:6A:00:2F:50:E3:C7:80:6D:A1:4C:1A:38:53:10:81:DE
            X509v3 Authority Key Identifier:
                keyid:E6:8E:37:E7:14:8E:A9:F2:AC:AA:F0:23:28:DE:76:44:38:A8:4B:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/1/E68E37E7148EA9F2ACAAF02328DE764438A84B3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68E37E7148EA9F2ACAAF02328DE764438A84B3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/1/323830343a386232343a3a2f33322d313238203d3e20323733373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b24::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:33:cd:b2:e4:b6:fc:f0:9f:91:ad:10:33:63:23:d3:4c:61:
         ff:80:da:af:bd:f8:c1:43:c5:34:35:29:b0:97:6b:bf:25:4d:
         24:49:ff:f1:38:0b:c1:1f:fa:61:49:74:41:c7:ea:d5:08:de:
         7e:c7:4c:7c:f1:56:9b:08:18:ae:56:b9:21:b6:e9:1b:69:d1:
         1f:8d:57:f1:0e:13:4a:b5:35:76:9f:55:3c:dc:13:a1:52:e9:
         d2:2e:ca:48:ae:0c:82:85:a8:45:3c:50:06:87:b2:79:31:7c:
         7b:13:b7:fd:d3:6e:73:c8:87:f5:93:ee:95:a4:50:13:f7:f5:
         27:88:75:1c:88:5d:b3:35:01:7f:fa:92:70:c4:6b:3d:cf:3b:
         a5:53:62:25:2f:3f:b1:1d:6f:cc:e0:8f:32:7d:92:cc:04:34:
         83:c7:bb:ea:82:bf:a2:96:b4:ee:80:04:24:8f:e5:9f:08:4d:
         5b:85:23:47:7b:06:41:8c:5a:92:41:bd:74:2e:af:8e:41:14:
         9a:4d:d3:c9:a1:57:4e:9d:77:81:1b:7b:66:53:15:f3:d6:81:
         6e:6e:24:46:7c:74:02:e5:86:ae:7a:27:17:43:cc:0a:8b:4c:
         41:9e:83:38:ea:91:e7:1a:28:83:95:26:a5:99:c2:33:80:9d:
         ce:f9:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----