Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/323830343a3762633a3a2f33322d3332203d3e203532383631.roa
File:                     323830343a3762633a3a2f33322d3332203d3e203532383631.roa (raw, json)
Hash identifier:          2lmjT4CPCOOXlhznzt6MpGxSFZkUtKjuMb/aC/WNraE=
Subject key identifier:   83:75:C5:2C:6A:C4:3D:A8:D2:23:86:9C:64:DF:1C:DA:F8:CF:E7:79
Certificate issuer:       /CN=8F131A9124F4505661427DA97FDEE05C46117F4A
Certificate serial:       0A8D51E6D4C06BF60D2B5EFB06D7F97021482628
Authority key identifier: 8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/323830343a3762633a3a2f33322d3332203d3e203532383631.roa
Signing time:             Thu 04 Apr 2024 08:07:07 +0000
ROA not before:           Thu 04 Apr 2024 08:02:07 +0000
ROA not after:            Thu 03 Apr 2025 08:07:07 +0000
asID:                     52861
IP address blocks:        2804:7bc::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8d:51:e6:d4:c0:6b:f6:0d:2b:5e:fb:06:d7:f9:70:21:48:26:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F131A9124F4505661427DA97FDEE05C46117F4A
        Validity
            Not Before: Apr  4 08:02:07 2024 GMT
            Not After : Apr  3 08:07:07 2025 GMT
        Subject: CN=8375C52C6AC43DA8D223869C64DF1CDAF8CFE779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:28:cc:f5:c6:70:8a:52:0a:41:6c:fc:2e:b4:
                    fd:67:df:f4:7b:81:33:36:c0:a7:a3:e4:22:ee:a0:
                    18:3f:95:c7:da:35:5c:f7:03:c3:1a:bc:f9:42:9b:
                    62:02:70:3b:d0:44:b5:38:04:98:51:0a:4d:20:5a:
                    a0:80:c3:08:35:5a:5c:70:cb:54:af:fa:b3:67:35:
                    e4:ef:10:5a:bc:63:be:5b:3c:f7:38:70:e5:7e:b4:
                    ce:66:49:3f:56:ba:4d:45:5f:dc:76:b5:27:79:96:
                    4b:a0:9e:82:f4:fd:42:12:4d:62:22:b3:55:e8:3b:
                    26:69:f7:8c:a5:e3:8f:ae:18:80:1a:3c:75:1c:1e:
                    27:dd:82:eb:7f:77:65:34:31:78:08:e9:f0:24:8a:
                    4c:41:74:5e:16:8c:b7:34:1a:9c:be:aa:fd:e4:c3:
                    85:89:12:6e:c2:4b:84:ca:d3:91:b0:64:b9:a7:42:
                    e5:d3:8c:f1:d6:d0:dc:54:a6:9d:b7:46:92:85:e1:
                    d7:52:24:1e:f9:d3:3c:95:64:65:5f:a7:cc:f6:06:
                    e8:04:00:be:91:5d:3e:58:47:16:9e:cc:08:72:d4:
                    ad:d5:f4:f9:ad:eb:4c:eb:59:cf:42:ed:26:c6:fe:
                    0b:a1:4d:2d:bd:62:24:bf:1c:b5:92:59:6a:88:bf:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:75:C5:2C:6A:C4:3D:A8:D2:23:86:9C:64:DF:1C:DA:F8:CF:E7:79
            X509v3 Authority Key Identifier:
                keyid:8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/323830343a3762633a3a2f33322d3332203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:4c:4d:0c:8f:7b:19:c3:ca:88:01:29:0c:0d:f5:ca:16:21:
         25:ba:61:00:3e:37:24:d0:d7:ef:cb:0a:23:2e:d3:05:18:80:
         10:2f:7a:af:8d:18:2f:2a:78:04:d2:be:ea:a8:2a:de:49:8b:
         25:80:6e:e5:7b:4b:81:46:05:02:30:61:4b:f7:61:e2:d5:c3:
         49:47:f7:cb:88:7c:03:2b:d6:dd:62:0e:7f:c4:e0:15:80:bd:
         af:70:7a:c9:3a:2d:3e:8b:1c:46:ac:5f:43:1c:ba:24:be:59:
         03:4f:8a:92:c2:ab:49:c6:c8:e5:e1:f8:ed:71:a3:6f:0a:c1:
         35:14:c4:56:64:fc:db:b9:d0:0c:52:c3:bf:70:23:e0:c5:dc:
         f3:ec:0e:a8:7c:77:7b:d7:d9:da:f9:9a:a3:31:0b:96:b0:27:
         0c:0c:80:29:33:2d:17:cc:05:d0:bb:61:2d:ad:fa:3e:34:ec:
         69:cf:e5:66:cf:0a:44:51:44:1d:fc:a5:12:c1:ab:5f:28:5e:
         47:0f:10:bf:59:5f:26:7f:4a:5c:de:d5:e6:f2:8c:a9:43:a4:
         de:1f:d5:d5:04:fe:96:8c:24:f0:e0:21:3e:23:bb:30:25:bf:
         3b:83:02:8e:ce:2b:61:e9:c5:05:57:db:19:90:82:1e:ac:13:
         78:25:e8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----