Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZo8hJajVcxPLYjvu6CZ8pWQBBfgxh7wrMXHLTuJF3GV/0/323830343a386665303a3a2f33322d3332203d3e20323733353138.roa
File:                     323830343a386665303a3a2f33322d3332203d3e20323733353138.roa (raw, json)
Hash identifier:          T8nTD5tSWTj3uHHd5/8NJTlVGxCUIcqg3VBj/rjCzhU=
Subject key identifier:   4E:28:79:BC:C0:7D:E4:E0:FB:F6:87:E4:C5:28:36:51:83:89:1E:C6
Certificate issuer:       /CN=3522D792545A0E921327122C3F67A5F8EC6EB2AE
Certificate serial:       171617B754CC425F86A6025E7A932944908B181A
Authority key identifier: 35:22:D7:92:54:5A:0E:92:13:27:12:2C:3F:67:A5:F8:EC:6E:B2:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3522D792545A0E921327122C3F67A5F8EC6EB2AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZo8hJajVcxPLYjvu6CZ8pWQBBfgxh7wrMXHLTuJF3GV/0/323830343a386665303a3a2f33322d3332203d3e20323733353138.roa
Signing time:             Mon 10 Jun 2024 13:51:50 +0000
ROA not before:           Mon 10 Jun 2024 13:46:50 +0000
ROA not after:            Mon 09 Jun 2025 13:51:50 +0000
asID:                     273518
IP address blocks:        2804:8fe0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:16:17:b7:54:cc:42:5f:86:a6:02:5e:7a:93:29:44:90:8b:18:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3522D792545A0E921327122C3F67A5F8EC6EB2AE
        Validity
            Not Before: Jun 10 13:46:50 2024 GMT
            Not After : Jun  9 13:51:50 2025 GMT
        Subject: CN=4E2879BCC07DE4E0FBF687E4C528365183891EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:aa:da:65:3c:27:34:c7:e8:43:a5:cd:a2:89:
                    51:24:23:bb:aa:6d:eb:46:a5:b1:71:2e:7f:78:40:
                    19:9c:25:ee:54:79:5e:51:e4:93:61:eb:4d:6a:11:
                    81:11:c4:03:6d:a5:e1:60:0e:0e:56:84:ff:04:d6:
                    c9:33:6a:e6:6e:d0:3a:c3:2f:a6:aa:15:46:10:40:
                    f8:10:b5:79:f1:90:e2:f7:66:d6:37:1b:ea:25:08:
                    85:17:a7:b3:34:4a:ba:88:61:d0:2c:66:1f:2b:f1:
                    01:f3:55:e6:47:f3:a5:46:a0:52:07:66:22:5d:51:
                    81:32:bf:6e:23:fb:af:ca:f2:23:6a:de:d6:1c:b2:
                    ca:c1:f3:0e:fa:6a:05:65:ae:5d:1f:cb:27:30:07:
                    99:55:8b:35:8e:8d:9b:e3:a2:03:4d:0c:8e:7f:50:
                    65:88:ec:a0:64:26:8d:22:4e:47:ec:c5:db:0e:cb:
                    53:ae:f3:d5:b4:d1:9f:10:33:74:3c:ca:20:0f:81:
                    5e:e6:2f:ed:97:53:f8:fa:f9:63:00:0a:8d:02:35:
                    91:03:6f:74:46:38:5f:77:fe:1a:7e:b3:db:55:8e:
                    0e:70:c9:26:f9:50:eb:9e:94:ff:50:6e:10:3c:1a:
                    4a:f0:83:c3:33:6d:e6:17:36:b8:9f:92:c0:20:61:
                    fc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:28:79:BC:C0:7D:E4:E0:FB:F6:87:E4:C5:28:36:51:83:89:1E:C6
            X509v3 Authority Key Identifier:
                keyid:35:22:D7:92:54:5A:0E:92:13:27:12:2C:3F:67:A5:F8:EC:6E:B2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZo8hJajVcxPLYjvu6CZ8pWQBBfgxh7wrMXHLTuJF3GV/0/3522D792545A0E921327122C3F67A5F8EC6EB2AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3522D792545A0E921327122C3F67A5F8EC6EB2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZo8hJajVcxPLYjvu6CZ8pWQBBfgxh7wrMXHLTuJF3GV/0/323830343a386665303a3a2f33322d3332203d3e20323733353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:fe:a8:12:53:1c:3e:9e:92:10:7f:63:90:55:a9:35:c2:41:
         58:2e:21:00:39:59:c5:1b:83:79:8b:f3:33:55:e3:42:ac:72:
         5a:9d:83:bd:a7:e3:42:82:88:34:12:17:d6:c6:fd:92:1a:c3:
         d9:22:79:f2:91:1a:c3:55:b7:a0:3e:ae:f0:bd:bb:9c:9c:40:
         fb:37:3e:a9:27:bf:bf:9a:c0:b4:8d:c9:61:1d:57:2a:a6:87:
         78:45:1a:b4:3a:8f:78:d6:f4:3d:52:c9:e0:f6:32:a4:5b:e9:
         8c:f6:65:25:69:5f:34:76:fe:1c:8e:36:65:f4:92:fe:02:dc:
         1d:8d:d1:6a:ad:04:b7:c7:b7:97:db:8a:75:ff:87:44:df:e8:
         dc:e5:f7:a9:ab:7f:b5:86:f0:0e:b5:6f:f2:08:87:67:c0:ac:
         b5:f7:1a:1d:c3:eb:a7:3e:8d:4c:c5:d7:82:d8:72:60:2e:47:
         c3:53:0f:b8:a4:e9:87:62:08:67:91:2b:01:46:69:c3:f3:84:
         c6:eb:0e:9e:c1:9a:94:8e:22:0f:8f:7a:f4:68:c9:54:85:09:
         14:fe:6c:46:e8:98:cf:de:a2:59:9a:cb:98:fe:1a:23:fb:a1:
         45:40:ec:98:3f:a3:da:64:2f:40:cc:fd:dc:7f:32:ec:25:9e:
         b3:d8:93:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----