Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/323830343a366262383a3a2f33322d3438203d3e20323730343139.roa
File:                     323830343a366262383a3a2f33322d3438203d3e20323730343139.roa (raw, json)
Hash identifier:          Nf6nYBXjIrovo1030v+uhjQYw/CSDAHDEq7HgLwuY3E=
Subject key identifier:   17:08:77:24:2C:97:EB:4D:20:E7:A2:A6:46:07:42:5A:6F:19:0B:27
Certificate issuer:       /CN=0EC76131F254246D686B276B2642FC2CEC73E076
Certificate serial:       3CCD80947EB3888C0F0BE79B763E7B630B4721D5
Authority key identifier: 0E:C7:61:31:F2:54:24:6D:68:6B:27:6B:26:42:FC:2C:EC:73:E0:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC76131F254246D686B276B2642FC2CEC73E076.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/323830343a366262383a3a2f33322d3438203d3e20323730343139.roa
Signing time:             Mon 17 Jun 2024 11:41:25 +0000
ROA not before:           Mon 17 Jun 2024 11:36:25 +0000
ROA not after:            Mon 16 Jun 2025 11:41:25 +0000
asID:                     270419
IP address blocks:        2804:6bb8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cd:80:94:7e:b3:88:8c:0f:0b:e7:9b:76:3e:7b:63:0b:47:21:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC76131F254246D686B276B2642FC2CEC73E076
        Validity
            Not Before: Jun 17 11:36:25 2024 GMT
            Not After : Jun 16 11:41:25 2025 GMT
        Subject: CN=170877242C97EB4D20E7A2A64607425A6F190B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:d2:79:ff:cd:81:7f:2f:74:3a:7c:ea:15:
                    0f:b5:91:45:0b:5e:ae:4a:1c:9a:97:88:d8:5d:db:
                    49:c9:b9:dc:4f:a5:ba:dd:b4:29:cd:34:25:31:2c:
                    28:be:9e:7b:82:a8:f2:ab:58:6a:96:60:dd:43:7c:
                    23:d8:6b:a6:3c:67:50:d8:93:01:76:ca:1c:1c:30:
                    11:7a:bf:0e:40:76:b9:5d:7e:86:04:2f:2a:df:26:
                    83:2f:22:5a:58:c8:b4:4f:a6:cd:44:c7:cd:3a:58:
                    1a:80:a8:d0:5b:64:f0:5a:34:3f:a2:6e:c2:12:a6:
                    7a:12:34:2f:19:09:df:5f:75:e2:e2:e9:fe:2b:df:
                    0d:de:6d:59:26:fb:c5:4a:e8:d7:2f:8c:32:a5:da:
                    6f:79:6c:ac:fd:3b:4c:2c:03:62:38:d9:b1:d0:f9:
                    95:e4:5c:b5:b0:08:d0:d4:a0:e7:23:c4:a8:84:98:
                    23:78:5c:eb:b1:23:45:56:0f:b4:84:b6:49:9b:cf:
                    f5:5d:15:4a:73:3e:a4:22:24:f3:6a:1e:10:86:cf:
                    4f:03:47:91:ce:5a:b8:3c:67:05:f7:a9:40:e4:54:
                    64:c6:56:be:0d:50:1d:a8:58:13:c6:74:06:9b:d0:
                    4d:c7:53:6b:93:0b:3f:5c:a2:9d:8e:85:c0:25:3e:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:08:77:24:2C:97:EB:4D:20:E7:A2:A6:46:07:42:5A:6F:19:0B:27
            X509v3 Authority Key Identifier:
                keyid:0E:C7:61:31:F2:54:24:6D:68:6B:27:6B:26:42:FC:2C:EC:73:E0:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/0EC76131F254246D686B276B2642FC2CEC73E076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC76131F254246D686B276B2642FC2CEC73E076.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/323830343a366262383a3a2f33322d3438203d3e20323730343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:3f:a2:60:c1:68:55:1c:86:b1:f5:d7:22:62:9b:75:13:66:
         f0:27:cf:78:c2:c6:4b:77:95:cb:a9:f5:08:a7:ff:03:01:f7:
         d1:3d:06:2b:c2:45:89:a8:f1:30:80:f4:1b:aa:4a:ca:35:30:
         cc:57:2f:3b:1d:5a:75:96:57:05:37:5b:32:af:8f:d3:af:73:
         07:44:be:6a:67:21:a3:8c:83:15:47:b1:88:6d:79:6f:97:f3:
         5b:81:4f:9c:20:2c:eb:c1:3d:55:fc:ff:34:c0:e1:93:12:04:
         60:ee:20:dc:76:c6:95:d5:f4:4e:73:47:35:bc:28:cd:d9:5e:
         2e:07:75:69:6f:d9:f7:b9:13:3f:f1:0a:66:12:4a:bb:fe:78:
         c9:b3:43:88:29:b0:6c:92:80:3f:e8:42:c6:40:87:48:a4:9a:
         bc:91:d3:48:2b:7e:36:f1:29:14:81:f3:c2:ae:f9:cf:f0:df:
         6c:8b:3c:14:8a:db:44:13:00:82:f0:b5:94:28:a0:3c:19:82:
         02:2f:e1:19:58:8b:78:79:88:bc:37:e3:bb:83:62:5f:33:d7:
         30:27:dc:2b:62:39:15:9c:5f:00:27:3f:da:a8:16:39:4b:22:
         9b:ca:2c:21:a3:eb:90:d1:33:ea:88:2f:d9:0e:ba:b5:52:cf:
         f8:3a:5d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----