Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/323830343a313562633a3a2f33322d3332203d3e203238313834.roa
File:                     323830343a313562633a3a2f33322d3332203d3e203238313834.roa (raw, json)
Hash identifier:          worH6ERWt7gZRsUcEzVE5f059GCBaZ2DeoG+VWwXu0o=
Subject key identifier:   88:24:56:78:03:F6:29:72:1D:36:92:81:8F:C2:50:50:1D:3F:C1:3B
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       7F08282A719C992AED90231BEB92991FB3FA159E
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/323830343a313562633a3a2f33322d3332203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:19:46 +0000
ROA not before:           Fri 24 May 2024 00:14:46 +0000
ROA not after:            Fri 23 May 2025 00:19:46 +0000
asID:                     28184
IP address blocks:        2804:15bc::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:08:28:2a:71:9c:99:2a:ed:90:23:1b:eb:92:99:1f:b3:fa:15:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:14:46 2024 GMT
            Not After : May 23 00:19:46 2025 GMT
        Subject: CN=8824567803F629721D3692818FC250501D3FC13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e4:48:d6:01:96:64:9a:f8:21:cf:81:d1:46:
                    60:2f:a7:24:38:e6:05:9b:01:fa:28:31:76:f3:2e:
                    c6:b5:7d:a5:f6:39:3e:92:45:ef:cc:82:bc:f6:77:
                    fd:df:f0:ea:03:85:63:98:5c:20:51:f6:2a:ee:69:
                    75:fd:a7:26:ba:35:80:cd:e1:81:57:9f:39:2a:c0:
                    b9:28:aa:96:9a:2d:80:c2:83:f3:d6:55:8f:16:8d:
                    f5:1e:cc:e4:76:2f:2a:b2:67:e7:8a:28:6e:f3:d4:
                    0b:69:4e:26:15:88:8d:48:af:a5:08:36:51:8c:b0:
                    c8:7d:c0:f1:30:ed:91:59:e7:1e:c9:2f:c7:0d:83:
                    88:ce:b2:bd:1a:48:a2:95:b5:df:6d:5a:04:2f:b4:
                    4d:3f:d6:d6:6a:6e:85:81:8c:2c:a9:76:c9:a8:b9:
                    f3:50:29:70:07:18:f0:cc:ac:86:ac:1d:f8:f0:84:
                    3b:93:ff:28:7e:98:0f:2c:20:48:2b:58:cd:96:e4:
                    99:a2:78:56:57:e7:04:5d:ae:a2:34:11:28:da:2c:
                    21:67:ff:a8:17:7a:47:ff:e9:73:25:70:d2:b7:23:
                    93:87:1e:75:0a:01:10:f5:10:ec:42:60:b7:39:09:
                    54:fd:66:e4:08:15:43:54:6a:59:c7:17:53:91:67:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:24:56:78:03:F6:29:72:1D:36:92:81:8F:C2:50:50:1D:3F:C1:3B
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/323830343a313562633a3a2f33322d3332203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:18:32:ff:c8:cc:8e:97:a6:24:ea:68:c6:8a:ea:97:c2:79:
         dc:3e:86:9c:44:c1:26:4d:a0:cc:a0:74:8b:c8:51:25:10:dd:
         83:6c:1a:a4:45:57:77:6e:1d:21:73:f1:7c:b4:3b:35:2c:23:
         14:cf:3b:19:a7:3e:1a:5f:45:db:39:e1:d4:93:3b:de:92:f2:
         c7:8d:54:85:53:20:36:69:bd:29:af:d7:fe:61:e6:72:9e:7e:
         66:91:37:f1:fb:4f:dc:1b:e6:fe:e0:bc:77:91:52:7c:20:03:
         12:ad:c7:1f:53:f3:d9:7d:bc:24:f1:9c:a0:73:b5:c4:94:c3:
         a6:07:27:fa:29:30:2f:03:b4:a0:c8:48:c1:3f:ae:50:30:e0:
         06:92:80:27:c1:30:d4:f4:05:b1:0a:02:c8:20:6e:77:ac:ae:
         9e:41:07:4c:00:b9:25:f5:30:9f:e8:10:3c:70:f2:6e:15:29:
         2a:cd:fc:7f:ae:59:4e:43:28:9e:85:59:f1:cd:22:41:68:89:
         61:0f:21:fb:74:4f:11:78:54:63:ff:4e:20:75:48:61:42:55:
         d4:7c:fa:23:6c:c4:59:3b:1f:3a:d3:5b:1c:e2:42:40:dd:39:
         fa:ac:08:6b:be:fd:4e:ea:b2:4d:40:56:d1:a6:9f:8b:35:7c:
         95:cb:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----