Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a3a2f33342d3334203d3e20323731313334.roa
File:                     323830343a373663383a3a2f33342d3334203d3e20323731313334.roa (raw, json)
Hash identifier:          q7dQg5AaOfsr24w36UblCi2SapB2sTUbSGpKdDIPOmQ=
Subject key identifier:   CA:47:6B:58:61:3E:18:78:42:D5:8F:81:B6:FA:2D:C0:EC:7F:84:ED
Certificate issuer:       /CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
Certificate serial:       25106CCE8C2D939C0E31CF3599FF4A908985832A
Authority key identifier: E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a3a2f33342d3334203d3e20323731313334.roa
Signing time:             Thu 04 Apr 2024 08:42:55 +0000
ROA not before:           Thu 04 Apr 2024 08:37:55 +0000
ROA not after:            Thu 03 Apr 2025 08:42:55 +0000
asID:                     271134
IP address blocks:        2804:76c8::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:10:6c:ce:8c:2d:93:9c:0e:31:cf:35:99:ff:4a:90:89:85:83:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
        Validity
            Not Before: Apr  4 08:37:55 2024 GMT
            Not After : Apr  3 08:42:55 2025 GMT
        Subject: CN=CA476B58613E187842D58F81B6FA2DC0EC7F84ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c3:5d:22:7b:9b:7d:72:6c:ba:fe:83:82:e4:
                    29:a4:5a:8e:c6:fa:3a:c5:3f:8e:c4:24:da:de:f7:
                    fd:46:3b:dd:29:6d:5e:32:d1:a3:69:93:ad:86:73:
                    49:72:38:b2:15:7d:73:3e:ed:b9:0f:a3:6d:58:91:
                    ba:0f:34:1a:23:68:42:73:ab:04:0b:c9:e5:13:8e:
                    e5:ab:7c:a6:94:fc:ad:4c:70:45:68:04:cb:26:ca:
                    65:ac:3c:0f:92:d7:f5:18:3b:09:9a:6e:80:b3:c3:
                    53:f5:25:d7:cf:21:43:07:2d:81:19:4b:f3:31:9e:
                    90:3b:d2:f6:f0:6d:b0:a3:62:16:da:5d:f6:5d:d1:
                    f7:8d:55:a8:f4:c3:6d:f5:5d:fe:ef:16:e2:c7:0b:
                    1a:23:6f:76:b6:a2:48:3b:8e:2e:eb:2d:d4:ee:ce:
                    3a:eb:0a:c3:68:05:e6:44:01:92:9d:b3:dc:c1:6f:
                    c8:f8:52:ca:8b:ed:3d:a7:2d:6a:2f:68:78:95:f7:
                    37:8e:84:c3:7a:e6:58:11:71:06:dd:fd:2f:7a:cd:
                    1b:13:2a:d5:1a:6f:c0:35:49:6a:51:86:e3:7b:2f:
                    a6:5d:49:1d:d7:29:52:21:b5:e8:4a:b3:12:38:63:
                    b3:0a:68:b9:d6:a6:73:64:bf:36:ea:64:01:a3:52:
                    31:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:47:6B:58:61:3E:18:78:42:D5:8F:81:B6:FA:2D:C0:EC:7F:84:ED
            X509v3 Authority Key Identifier:
                keyid:E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a3a2f33342d3334203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76c8::/34

    Signature Algorithm: sha256WithRSAEncryption
         b9:88:5b:33:4e:40:75:c6:20:dc:cb:77:a4:b4:18:07:45:cf:
         77:63:16:fb:a5:94:37:65:6a:9c:be:76:02:f1:ed:88:ee:b1:
         bd:72:92:df:2a:23:13:59:3b:db:81:d0:53:76:eb:07:3c:36:
         02:b8:a9:25:a4:fb:8d:10:d8:89:98:37:a2:2a:91:75:87:8b:
         9c:cc:7a:e4:3f:44:81:70:a7:a0:80:16:1d:a9:04:2d:a0:48:
         16:11:81:b3:7d:a7:ab:1c:8a:a9:07:61:68:87:8b:ac:c9:b1:
         3b:b3:66:64:95:e9:77:0c:60:54:80:f3:eb:3e:ee:75:0c:99:
         5a:1a:b4:55:5b:86:77:bb:28:46:60:e4:f8:94:11:0b:12:57:
         31:50:dd:15:6d:1d:df:54:8b:db:e4:9f:65:22:a1:2b:de:44:
         ba:99:2d:12:eb:4f:27:45:a3:3b:75:81:83:5f:68:8e:fa:a7:
         92:d7:10:85:4f:9c:89:f3:8c:75:c0:3a:2c:8f:c1:da:e3:be:
         25:de:e1:5a:05:84:87:67:d5:53:7b:07:08:8d:d3:7e:2b:57:
         d6:31:51:b8:fb:46:fb:b4:ee:58:98:8f:4f:35:b3:9d:32:ca:
         0a:86:5d:9b:41:dc:7c:58:ee:f3:f5:5a:e1:29:9d:b1:35:ff:
         96:cb:ce:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----