Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a343963383a3a2f33322d3438203d3e20323637323033.roa
File:                     323830343a343963383a3a2f33322d3438203d3e20323637323033.roa (raw, json)
Hash identifier:          UkCzp+KgHZeHSYkX77+Dp2Fzwa4hF+GpU4anpmX/rXQ=
Subject key identifier:   31:22:58:C9:1B:EB:B5:36:75:19:27:5D:8F:74:5A:68:D0:13:4A:4D
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       029954DD6A4A7620EE0B1CD1C51188581A5D06CA
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a343963383a3a2f33322d3438203d3e20323637323033.roa
Signing time:             Thu 04 Apr 2024 19:59:31 +0000
ROA not before:           Thu 04 Apr 2024 19:54:31 +0000
ROA not after:            Thu 03 Apr 2025 19:59:31 +0000
asID:                     267203
IP address blocks:        2804:49c8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:99:54:dd:6a:4a:76:20:ee:0b:1c:d1:c5:11:88:58:1a:5d:06:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:31 2024 GMT
            Not After : Apr  3 19:59:31 2025 GMT
        Subject: CN=312258C91BEBB5367519275D8F745A68D0134A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8c:9e:4a:50:c8:51:29:0a:8b:3b:9b:0d:76:
                    58:ee:65:32:4e:4d:d8:a1:cc:19:1e:d6:28:3b:6c:
                    d3:8c:e6:4e:71:6e:e7:c3:d6:a8:ba:25:7a:e8:81:
                    8f:ba:7b:d5:55:f9:f3:e3:a5:c4:18:5e:04:9f:9e:
                    02:12:6f:a1:4e:1a:05:57:0c:f9:0d:53:9d:9d:68:
                    08:17:ad:63:1f:44:4b:37:16:5b:b3:20:35:bf:a7:
                    9c:d0:cf:c3:8e:b3:17:6a:f4:29:6c:8a:a5:19:0a:
                    34:04:03:b9:af:1f:e3:95:23:85:83:e9:94:8d:c8:
                    d4:aa:d4:65:52:b0:78:c2:b3:bb:3c:7c:4e:dc:bf:
                    b9:4a:c7:47:29:2e:9c:94:8b:f7:99:0c:b4:c2:f8:
                    68:00:5a:bc:a8:90:3d:83:63:bc:7b:db:24:87:8f:
                    3f:fa:10:1b:22:e0:9d:83:8e:37:72:66:a7:46:05:
                    18:c9:e6:e3:04:4f:d0:b4:ba:ce:49:6b:0b:46:18:
                    76:c1:96:40:cb:fe:12:b4:88:b0:db:5d:59:c0:5e:
                    d2:56:1b:77:6d:79:19:d6:78:ea:04:7b:1a:c7:77:
                    f9:77:ee:4a:23:c2:61:fd:17:39:34:52:7d:78:67:
                    6b:c2:13:e0:02:66:e4:61:1b:f0:cd:01:b7:b8:41:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:22:58:C9:1B:EB:B5:36:75:19:27:5D:8F:74:5A:68:D0:13:4A:4D
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a343963383a3a2f33322d3438203d3e20323637323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:1d:fd:ab:79:8e:a2:00:5f:98:f8:50:e8:85:fc:70:69:6e:
         0a:e2:d2:56:c4:e0:9f:cc:a8:71:6d:a2:a9:5b:92:40:af:df:
         f4:2e:02:e8:e7:b9:ff:a0:6e:65:24:62:18:24:77:0e:fe:e7:
         38:29:d4:a7:50:4f:de:2f:72:97:6c:72:0d:b1:ba:3a:b8:eb:
         c2:f0:58:e7:3a:6f:b2:f0:53:84:2d:9d:eb:27:fc:fc:55:1a:
         26:02:49:14:20:36:db:0e:e2:56:93:9f:66:08:75:d0:59:fa:
         bd:c0:b9:a0:29:20:7d:7e:f4:a9:6d:a8:9a:f6:4e:80:ec:02:
         eb:b8:cc:c7:c4:3b:56:a0:8f:ae:6b:c3:d8:84:8b:2d:7d:13:
         25:2b:ee:00:2c:b3:73:af:6a:9a:8f:1b:28:d3:b1:87:0a:65:
         f2:49:4a:80:19:b3:2e:ff:64:cc:0b:8a:5b:14:f8:07:0c:54:
         a6:ad:7f:79:6c:ac:f5:cf:26:dd:a0:00:64:74:ab:32:37:77:
         3e:69:54:23:be:ce:cd:9e:d0:37:19:e2:e2:b0:6f:57:3b:55:
         b6:4e:32:4b:38:dd:80:d2:e0:fe:1b:84:45:41:fa:40:60:ba:
         a2:15:7f:80:3d:76:8d:de:5d:ab:41:34:87:ca:5f:e3:fa:af:
         81:93:ca:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----