Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a663a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a663a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          QglL/onB7dUGq41r3ss7uZ3Z2+c8yrIQ2AzHMexVaMc=
Subject key identifier:   D6:4C:6F:60:EE:4E:2A:46:ED:21:FE:A3:47:9E:6E:74:4C:A0:31:27
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       56DD70776E3FF2E4A7B75E4DFD58415F320794A0
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a663a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:36 +0000
ROA not before:           Wed 03 Apr 2024 21:19:36 +0000
ROA not after:            Wed 02 Apr 2025 21:24:36 +0000
asID:                     264344
IP address blocks:        2804:2674:f::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:dd:70:77:6e:3f:f2:e4:a7:b7:5e:4d:fd:58:41:5f:32:07:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:36 2024 GMT
            Not After : Apr  2 21:24:36 2025 GMT
        Subject: CN=D64C6F60EE4E2A46ED21FEA3479E6E744CA03127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:c9:24:67:69:4d:e9:4e:ba:98:f8:78:98:
                    1a:37:fa:a8:3d:22:7c:d6:5b:a3:4f:f2:c5:1e:16:
                    c6:7c:1f:72:a5:f2:f8:67:27:03:79:5c:ba:b1:9b:
                    45:99:f2:b6:02:73:25:30:20:7f:2e:3d:e6:8c:1f:
                    fe:83:a1:03:8e:e5:ca:03:02:0f:26:2b:7e:22:5d:
                    84:47:46:68:67:40:65:a3:44:7c:96:89:7c:e2:a5:
                    c4:c3:8d:23:a9:b8:99:89:d3:b3:4c:67:93:ad:63:
                    fc:f2:d8:d4:d4:25:0b:b9:76:f5:0b:d0:5b:c7:6d:
                    a3:73:40:38:06:40:dc:10:21:9b:ab:30:81:d7:cc:
                    95:61:9d:42:bb:d4:bf:13:e2:c0:15:b1:f7:e9:d2:
                    6b:8f:d8:06:21:a0:d8:2a:e0:86:3e:a0:24:b3:e2:
                    76:41:88:26:a4:a7:25:1b:bf:57:a0:36:38:41:52:
                    b9:03:54:9d:fb:6c:d9:ca:0d:95:d8:0b:38:5e:27:
                    9a:9d:58:e9:0f:05:86:59:f5:4e:52:91:2c:8d:5d:
                    d2:c1:45:5d:f3:1f:ca:36:6f:8a:f0:da:90:fe:49:
                    0d:28:dc:35:e2:dc:6a:61:c7:cd:7d:d8:64:95:64:
                    56:0a:de:e5:58:c0:4a:97:a5:26:b4:56:3d:de:a1:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4C:6F:60:EE:4E:2A:46:ED:21:FE:A3:47:9E:6E:74:4C:A0:31:27
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a663a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:11:4a:53:53:42:83:10:6a:6a:83:a9:14:11:1d:d7:3d:47:
         d0:af:b2:e2:94:75:ff:1f:3f:fb:14:2d:10:f0:c5:80:43:95:
         e3:d7:8f:db:d4:7d:1b:a6:60:c7:00:cd:bc:f9:90:d5:46:42:
         b5:da:16:f8:90:ea:a3:fc:ec:24:b9:d9:db:37:6b:3c:d2:86:
         b0:40:e3:cb:3a:5f:03:67:77:96:4b:61:03:79:28:7e:11:20:
         cd:f0:63:8f:e9:88:6c:85:da:93:d4:22:ef:ab:e8:7f:c5:ef:
         e6:83:82:fd:04:95:96:dd:34:f7:26:ee:45:92:90:4a:b0:21:
         6b:c5:af:10:b7:89:cf:7b:a1:41:37:84:3c:7f:72:78:2c:d9:
         04:cb:dd:ea:dc:21:da:f7:e1:0d:02:de:e4:89:88:9d:c1:ae:
         48:9b:7c:9c:fb:7a:b8:40:19:3f:d1:93:0c:c9:63:47:c7:84:
         2c:34:47:e8:8f:0e:39:50:25:1e:e2:6b:4f:3f:95:fe:dc:0f:
         84:c3:02:14:4f:0a:7a:8e:4e:2d:71:5c:fb:cb:63:8b:f3:2d:
         b8:e4:57:8b:66:78:c5:7c:4e:fa:c6:65:0b:ab:88:ff:07:79:
         44:16:e0:b5:e0:ca:b8:b5:29:81:00:e3:5a:f2:af:44:8c:0c:
         22:83:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----