Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a3a2f33322d3332203d3e20323731313334.roa
File:                     323830343a373663383a3a2f33322d3332203d3e20323731313334.roa (raw, json)
Hash identifier:          +aRpyB26pq8qfGzJwbnOU01JQizIw2QATC3j5A7mPXs=
Subject key identifier:   70:8F:EC:31:ED:AD:DA:7A:70:0E:EF:67:88:20:9F:14:E9:7A:37:6A
Certificate issuer:       /CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
Certificate serial:       5BC12674E00A743D3111FA00AB3ACAFA4B483212
Authority key identifier: E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a3a2f33322d3332203d3e20323731313334.roa
Signing time:             Thu 04 Apr 2024 08:42:57 +0000
ROA not before:           Thu 04 Apr 2024 08:37:57 +0000
ROA not after:            Thu 03 Apr 2025 08:42:57 +0000
asID:                     271134
IP address blocks:        2804:76c8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c1:26:74:e0:0a:74:3d:31:11:fa:00:ab:3a:ca:fa:4b:48:32:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
        Validity
            Not Before: Apr  4 08:37:57 2024 GMT
            Not After : Apr  3 08:42:57 2025 GMT
        Subject: CN=708FEC31EDADDA7A700EEF6788209F14E97A376A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:33:38:c4:72:70:e6:c5:8e:95:5e:a9:26:f4:
                    13:7d:5c:90:7e:d1:bd:f7:b7:9a:e4:c5:0a:c8:75:
                    ae:00:ba:6e:68:df:0a:2c:24:87:81:a6:1e:f4:af:
                    e5:e9:9c:b8:c3:1f:c7:89:b5:a1:ba:95:3d:74:93:
                    c3:48:7a:b6:21:cb:1d:13:36:c6:ed:3b:bd:62:09:
                    52:d8:c2:71:69:f0:df:f1:40:cb:2b:23:4a:4d:cb:
                    d4:8b:a8:cd:91:46:d7:c4:e6:e7:49:ee:be:92:d0:
                    8a:f1:ba:cb:a4:55:81:fc:66:a8:64:66:12:d8:bb:
                    25:c2:37:95:18:e6:40:40:df:33:b2:66:36:d1:fb:
                    f7:97:cd:0b:8c:70:30:97:a9:8a:83:39:2f:47:f2:
                    d4:42:78:14:5f:a9:80:24:ee:df:32:69:60:c4:3a:
                    bc:d9:54:7b:bd:eb:dd:60:61:b0:35:b5:97:8a:c4:
                    34:86:31:77:ab:2d:47:3f:79:f3:f8:92:fc:41:be:
                    00:90:80:ae:83:a1:12:67:5e:2d:68:3a:23:f6:cd:
                    45:df:6b:da:7f:0d:80:9f:02:7a:70:17:7c:00:ba:
                    2b:96:2a:d9:bf:33:07:97:ac:53:fb:0b:40:a6:c2:
                    8a:09:02:7a:1a:f7:7d:b9:42:bf:7f:7b:a1:19:d2:
                    3e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8F:EC:31:ED:AD:DA:7A:70:0E:EF:67:88:20:9F:14:E9:7A:37:6A
            X509v3 Authority Key Identifier:
                keyid:E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a3a2f33322d3332203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:28:4b:0a:9c:55:1d:69:82:5a:7c:94:6e:f3:a0:5d:39:9e:
         d6:ee:a0:a9:4b:12:0e:cc:1d:1b:b5:75:62:f6:19:46:bc:a2:
         ba:25:34:27:00:8a:e0:b9:7a:2a:6b:4f:90:4f:9d:a8:3b:f4:
         e5:be:41:c7:f7:97:52:0f:99:7f:4d:d7:cb:a6:c4:5e:5f:8e:
         a3:4d:a8:df:e3:e4:c2:40:a5:96:ad:3e:26:ae:0a:fc:b8:b2:
         61:79:37:e7:fa:d7:42:8e:fd:0f:a5:a3:59:9b:c2:19:40:af:
         ff:36:72:70:47:11:4e:62:24:cc:5c:5f:6e:c0:51:e4:2a:b6:
         18:69:d0:89:b7:af:ca:20:72:4a:0b:8c:f8:88:f3:7b:7c:58:
         47:33:dc:c1:30:6e:51:8d:be:b0:82:c0:d7:da:54:2a:79:7c:
         32:dc:4d:9c:61:cf:61:eb:48:12:78:7c:d4:6f:2c:df:e6:ec:
         7a:de:4a:da:32:64:fa:d7:52:c4:fc:d2:66:c8:d1:8c:21:f5:
         be:27:97:f7:1b:e6:62:f8:3d:b8:96:67:8c:2b:d1:ae:d5:e2:
         90:c5:11:e3:50:01:17:f0:d5:7e:e4:37:eb:ee:fa:e5:1a:41:
         13:53:cc:0e:86:51:5d:70:e1:32:ea:24:c7:37:f0:38:71:86:
         37:35:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----