Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/323830343a363564633a3a2f33322d3438203d3e20323639353139.roa
File:                     323830343a363564633a3a2f33322d3438203d3e20323639353139.roa (raw, json)
Hash identifier:          fvQ85ZBTVyqDglrZUGmUX5uhAFR0hsdgd068mMbMkdE=
Subject key identifier:   B7:AA:6A:F6:98:2D:C3:BA:0C:66:D5:F9:E9:1E:E1:A2:8F:1A:DF:87
Certificate issuer:       /CN=3B3189B227E3E6004FAEF8E11BEB169F2D24116B
Certificate serial:       4244942AD07BB7284E28440518B1303BF0C426FA
Authority key identifier: 3B:31:89:B2:27:E3:E6:00:4F:AE:F8:E1:1B:EB:16:9F:2D:24:11:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B3189B227E3E6004FAEF8E11BEB169F2D24116B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/323830343a363564633a3a2f33322d3438203d3e20323639353139.roa
Signing time:             Thu 11 Apr 2024 21:54:21 +0000
ROA not before:           Thu 11 Apr 2024 21:49:21 +0000
ROA not after:            Thu 10 Apr 2025 21:54:21 +0000
asID:                     269519
IP address blocks:        2804:65dc::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:44:94:2a:d0:7b:b7:28:4e:28:44:05:18:b1:30:3b:f0:c4:26:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B3189B227E3E6004FAEF8E11BEB169F2D24116B
        Validity
            Not Before: Apr 11 21:49:21 2024 GMT
            Not After : Apr 10 21:54:21 2025 GMT
        Subject: CN=B7AA6AF6982DC3BA0C66D5F9E91EE1A28F1ADF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:70:53:2a:4b:a3:2d:1b:d8:15:31:a0:af:
                    d8:99:5f:84:c8:a8:78:13:39:fd:49:80:6e:7a:30:
                    c3:2c:58:c2:3f:34:1f:5f:ad:55:d6:10:fc:18:44:
                    8c:5c:27:7c:ee:f7:28:b7:d5:f2:d3:85:cf:05:f4:
                    ca:08:9a:10:f9:df:ef:c1:00:02:9c:57:02:de:7e:
                    04:13:c4:c6:3f:37:6c:ad:ae:12:67:db:7b:31:19:
                    0e:c3:e1:7d:27:76:13:37:e9:de:b5:ed:03:00:b4:
                    01:23:41:4b:55:84:58:5d:f8:52:ee:ea:dc:4c:80:
                    f5:46:55:2e:bb:fa:d0:58:a1:35:df:2c:c6:aa:45:
                    91:1d:fc:bc:b2:fe:99:65:23:77:c5:f9:c3:a5:9d:
                    9c:5a:ba:b9:f5:be:e3:de:fb:41:2d:43:6b:d0:90:
                    ed:74:43:3c:22:a9:85:1a:6b:dd:89:b8:83:21:2c:
                    cb:9f:a9:d8:a2:8b:37:c9:d3:70:7b:77:f0:1e:d0:
                    91:37:7a:28:ca:97:74:ba:0a:56:37:62:5d:13:99:
                    62:8c:a1:0e:2b:73:67:0f:fa:bb:f8:ca:80:52:e5:
                    a7:df:46:5b:c8:39:df:31:9d:93:23:f8:f6:c5:83:
                    f6:18:b7:79:38:eb:10:ae:3d:68:57:c1:ed:c2:cd:
                    a2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AA:6A:F6:98:2D:C3:BA:0C:66:D5:F9:E9:1E:E1:A2:8F:1A:DF:87
            X509v3 Authority Key Identifier:
                keyid:3B:31:89:B2:27:E3:E6:00:4F:AE:F8:E1:1B:EB:16:9F:2D:24:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/3B3189B227E3E6004FAEF8E11BEB169F2D24116B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B3189B227E3E6004FAEF8E11BEB169F2D24116B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/323830343a363564633a3a2f33322d3438203d3e20323639353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:6e:56:b9:df:97:4c:e8:c5:77:16:da:50:78:fd:7e:ab:
         b9:1a:7d:3b:56:0f:31:98:ed:87:f4:48:7b:c5:6d:0b:73:fd:
         94:b1:af:d7:3f:16:6f:9a:d4:99:4c:88:77:1c:0e:46:f6:44:
         0e:1d:a1:de:17:4d:5b:f2:c4:be:a1:40:e7:e4:fc:03:e3:26:
         4f:0a:03:11:3e:3e:cc:f3:bb:a0:ba:68:80:83:56:45:ed:ac:
         81:08:4e:b9:4b:1e:42:bd:b9:88:30:82:8f:e8:10:fe:f5:a0:
         85:a1:d2:f6:bc:89:c5:64:43:4f:60:21:50:0b:77:1f:4e:55:
         4f:92:7f:aa:4d:6a:9a:09:f6:29:07:f4:79:75:c2:db:09:76:
         2a:7b:3e:43:d8:8f:7f:1c:dd:12:2b:13:ee:31:c0:fb:5e:5c:
         87:08:6d:e2:ad:ff:fd:7f:a6:b5:a6:8b:7e:c9:f7:2a:1f:9b:
         e6:4a:da:3c:32:7b:d0:0e:54:7e:32:ba:b7:a2:21:ae:ba:55:
         f3:d3:5f:69:9a:43:17:41:82:94:07:5a:2d:51:c7:34:33:04:
         5b:3c:d6:64:06:28:99:11:1a:3f:ea:6a:a2:54:37:41:a2:0b:
         4b:e0:d4:b7:7b:20:92:93:e8:1f:0d:72:5f:b8:5e:85:21:c7:
         65:c1:92:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----