Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/1/323830343a333763343a3a2f33322d3438203d3e20323636343335.roa
File:                     323830343a333763343a3a2f33322d3438203d3e20323636343335.roa (raw, json)
Hash identifier:          4lKAoBsjSwIogEcat4seh55OAbPBZV75KlRGNt9R8j4=
Subject key identifier:   8A:0D:D8:3B:F5:E2:FB:BC:C5:FD:F5:A1:3B:12:81:2E:F3:8B:BE:4A
Certificate issuer:       /CN=409869FE48EE7DF53C68EF5B513E0ADA7977FF53
Certificate serial:       4E21B246F0FF82993FF435B212EBEEE34580AC14
Authority key identifier: 40:98:69:FE:48:EE:7D:F5:3C:68:EF:5B:51:3E:0A:DA:79:77:FF:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/409869FE48EE7DF53C68EF5B513E0ADA7977FF53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/1/323830343a333763343a3a2f33322d3438203d3e20323636343335.roa
Signing time:             Thu 04 Apr 2024 09:15:08 +0000
ROA not before:           Thu 04 Apr 2024 09:10:08 +0000
ROA not after:            Thu 03 Apr 2025 09:15:08 +0000
asID:                     266435
IP address blocks:        2804:37c4::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:21:b2:46:f0:ff:82:99:3f:f4:35:b2:12:eb:ee:e3:45:80:ac:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409869FE48EE7DF53C68EF5B513E0ADA7977FF53
        Validity
            Not Before: Apr  4 09:10:08 2024 GMT
            Not After : Apr  3 09:15:08 2025 GMT
        Subject: CN=8A0DD83BF5E2FBBCC5FDF5A13B12812EF38BBE4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:82:03:b4:17:6c:a4:2a:ac:43:0b:21:f7:
                    f8:94:56:42:3e:14:9e:cc:04:20:5e:56:e8:4c:b9:
                    10:7b:eb:fb:fc:0d:af:eb:50:01:54:78:14:8c:8e:
                    2b:64:63:7c:e8:3c:4e:64:bf:a6:59:c9:7c:70:5b:
                    6b:69:0b:29:3c:c8:2c:b7:a3:61:10:1f:ee:c8:6a:
                    6c:8f:9d:be:22:73:8f:ac:c1:8a:ae:51:68:af:46:
                    bd:39:bb:12:ee:80:00:80:10:af:46:43:2a:6b:8e:
                    21:51:c7:78:58:6d:f6:a0:f6:9f:07:44:c9:20:05:
                    7f:1e:e1:0f:9b:72:9f:6a:67:40:c0:5b:f6:15:83:
                    5f:c4:23:c7:da:5c:c6:57:a5:a3:c1:5a:32:04:f3:
                    0f:e7:d8:b4:34:11:af:2c:cd:6d:99:ee:f3:1a:2e:
                    c7:95:cb:8b:df:0c:23:27:ec:11:7b:61:e2:40:15:
                    29:dd:60:58:fc:48:9a:26:8c:1a:73:42:f6:f2:f5:
                    ed:8f:63:95:c6:a7:f9:18:40:8a:cb:e5:20:3e:ce:
                    31:56:31:80:9e:ae:6f:8b:a5:c3:89:d4:c7:31:2a:
                    b8:cc:53:f3:f1:b5:d1:d6:78:b7:21:b2:3c:70:73:
                    f8:e7:1a:2e:36:8a:29:d6:c5:39:65:f6:0b:5d:6a:
                    11:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0D:D8:3B:F5:E2:FB:BC:C5:FD:F5:A1:3B:12:81:2E:F3:8B:BE:4A
            X509v3 Authority Key Identifier:
                keyid:40:98:69:FE:48:EE:7D:F5:3C:68:EF:5B:51:3E:0A:DA:79:77:FF:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/1/409869FE48EE7DF53C68EF5B513E0ADA7977FF53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/409869FE48EE7DF53C68EF5B513E0ADA7977FF53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/1/323830343a333763343a3a2f33322d3438203d3e20323636343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:6d:0e:16:bb:a7:94:ef:9e:f3:12:cf:c1:33:e7:3d:6d:0d:
         76:82:73:98:4e:0d:00:a1:89:fe:0d:6e:a7:e4:08:db:30:0e:
         56:69:2c:9c:2b:0e:17:db:99:16:d5:79:4e:f1:ee:33:de:e2:
         97:5f:b2:c2:72:89:40:84:d5:7b:0b:4e:53:13:05:f3:61:d9:
         83:64:d5:fb:48:3c:e7:c4:da:33:c5:28:5f:97:6f:db:7f:21:
         be:ab:a3:5b:03:6c:17:73:a9:b7:9c:b0:49:be:fd:c5:06:38:
         10:5f:9a:00:72:7b:98:27:a9:88:95:e9:c8:a1:7a:99:aa:ce:
         90:7e:85:03:06:8d:83:ed:16:87:87:cd:c4:3e:77:34:f6:ed:
         1f:9e:4c:69:9e:74:10:25:f6:1b:bd:78:3a:60:e9:dc:6a:f0:
         78:ad:80:8e:31:a7:04:34:05:74:e4:10:c4:5f:3d:fb:ff:f3:
         3e:21:7d:13:1d:ce:57:e5:a3:3d:ec:b4:f6:c4:fe:a2:e9:27:
         3b:81:6c:9a:ea:97:3a:c7:4f:49:a7:01:3e:ef:b4:f9:0d:fb:
         a6:2f:59:f9:af:79:02:7f:8d:8d:55:ff:05:66:e5:53:c9:57:
         35:48:8b:2b:ff:b4:94:3d:22:fe:41:77:cd:01:56:f3:1c:cf:
         56:a6:da:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----