Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/323830343a353061383a3a2f33322d3336203d3e20323638343032.roa
File:                     323830343a353061383a3a2f33322d3336203d3e20323638343032.roa (raw, json)
Hash identifier:          Zh65QpeEE39skyIbjmRqQJ9YqPWX5AbfoJGLnTufNHE=
Subject key identifier:   03:8D:A1:F3:00:67:EC:20:D7:59:19:FA:EC:15:64:40:D6:AC:37:B8
Certificate issuer:       /CN=157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A
Certificate serial:       27D9C0F4938058B16C834AC4FF7086BB5594817C
Authority key identifier: 15:7A:1A:A8:78:EF:7E:6D:1D:53:43:28:AA:B6:FD:83:3E:1D:BE:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/323830343a353061383a3a2f33322d3336203d3e20323638343032.roa
Signing time:             Fri 14 Jun 2024 14:20:45 +0000
ROA not before:           Fri 14 Jun 2024 14:15:45 +0000
ROA not after:            Fri 13 Jun 2025 14:20:45 +0000
asID:                     268402
IP address blocks:        2804:50a8::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d9:c0:f4:93:80:58:b1:6c:83:4a:c4:ff:70:86:bb:55:94:81:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A
        Validity
            Not Before: Jun 14 14:15:45 2024 GMT
            Not After : Jun 13 14:20:45 2025 GMT
        Subject: CN=038DA1F30067EC20D75919FAEC156440D6AC37B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:31:9a:10:ed:59:35:f4:8e:b1:20:c5:b2:
                    8c:dd:e9:f6:92:39:79:ca:40:2f:75:ae:4c:93:1b:
                    27:2d:95:e4:29:20:a9:2c:31:b4:6c:29:25:14:3e:
                    08:de:14:a8:86:79:b0:72:0f:8c:58:fa:76:8e:fa:
                    25:1a:33:90:3f:05:c4:79:1f:c4:1f:68:2d:92:d5:
                    6b:04:f9:0d:b8:70:1e:26:76:f0:da:a8:50:23:dd:
                    33:d3:79:72:33:a0:29:fc:30:c3:d5:fa:c6:00:fa:
                    5f:f5:ed:d0:2c:86:0e:1f:e1:6e:cf:cf:57:e8:a2:
                    07:15:da:f9:0e:9a:fa:f1:19:31:b6:a8:65:a4:5e:
                    00:29:94:0f:b6:90:43:d1:23:ee:61:87:e7:4e:50:
                    45:b5:05:1a:ed:f8:16:4c:a4:ec:ce:3c:19:ae:63:
                    fa:3c:d6:d9:55:5e:fc:f2:de:ec:0d:92:b0:1d:7d:
                    12:3b:59:14:b1:b2:bf:9d:da:41:2d:88:1e:62:6a:
                    f5:a4:f9:ac:7b:93:11:ed:cb:78:91:8a:d1:3b:b1:
                    a8:89:15:a3:a2:b5:ac:1c:4c:2e:37:c3:13:de:2c:
                    41:67:df:dd:53:fb:2f:81:ed:b1:3c:17:07:87:b5:
                    a3:88:76:61:36:98:43:31:13:6d:cd:d8:57:b3:c1:
                    2d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8D:A1:F3:00:67:EC:20:D7:59:19:FA:EC:15:64:40:D6:AC:37:B8
            X509v3 Authority Key Identifier:
                keyid:15:7A:1A:A8:78:EF:7E:6D:1D:53:43:28:AA:B6:FD:83:3E:1D:BE:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/323830343a353061383a3a2f33322d3336203d3e20323638343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:97:6b:c4:9d:c8:d4:29:0f:6e:9f:10:3f:fa:f9:65:38:ec:
         87:54:51:cc:77:d2:27:0b:05:5c:4b:fb:03:71:7e:ea:a7:d6:
         62:e3:28:c3:7b:ce:8a:34:03:93:22:2f:2a:41:3f:9e:72:c0:
         79:d0:77:43:5e:c3:89:70:aa:15:23:27:eb:c3:4a:33:0d:bb:
         b5:ec:2d:47:be:00:a1:34:44:0d:c6:79:53:fa:d6:6e:52:23:
         b6:59:fc:b1:c7:c4:3d:3f:34:8b:59:fe:87:ef:25:52:8a:18:
         41:b1:8b:05:b3:59:68:fb:e9:f5:df:b9:06:ac:41:07:3d:f2:
         e2:9e:f5:fb:7e:49:87:f4:e5:64:4a:86:e3:bd:93:99:19:13:
         59:51:3f:38:c6:4c:f9:d8:20:ef:8c:06:56:43:b3:62:8a:c6:
         72:f7:bb:71:d1:f1:61:1c:77:57:a5:a9:a4:3f:b3:e4:4a:0c:
         55:b3:b1:98:b2:0a:7c:4c:5a:44:6a:8e:f5:8c:8e:1c:b1:47:
         62:8b:90:a9:cd:9e:91:f9:bb:0c:2b:bc:e7:8d:b6:dc:e0:ba:
         07:d0:8b:fd:9d:1b:08:3e:4f:aa:bf:fa:83:ac:0c:ca:d2:7e:
         9d:ab:04:ba:d8:2f:84:da:b3:98:8f:07:38:93:13:4d:4b:dc:
         5e:34:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----