Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a323a3a2f34382d3438203d3e20323633343231.roa
File:                     323830343a313630303a323a3a2f34382d3438203d3e20323633343231.roa (raw, json)
Hash identifier:          aFdhaLmKCuc1zKtM5v19qrpsictUJFoWUTJ1mwKEWTs=
Subject key identifier:   DF:AF:AB:B4:9F:FD:A8:08:CF:03:F3:AD:E0:BE:8A:64:55:D1:B2:2E
Certificate issuer:       /CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
Certificate serial:       7D2A3293BCE24BE55C8B35547E57BB21003AF8DA
Authority key identifier: 0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a323a3a2f34382d3438203d3e20323633343231.roa
Signing time:             Thu 04 Apr 2024 07:44:48 +0000
ROA not before:           Thu 04 Apr 2024 07:39:48 +0000
ROA not after:            Thu 03 Apr 2025 07:44:48 +0000
asID:                     263421
IP address blocks:        2804:1600:2::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2a:32:93:bc:e2:4b:e5:5c:8b:35:54:7e:57:bb:21:00:3a:f8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
        Validity
            Not Before: Apr  4 07:39:48 2024 GMT
            Not After : Apr  3 07:44:48 2025 GMT
        Subject: CN=DFAFABB49FFDA808CF03F3ADE0BE8A6455D1B22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d1:42:6c:e2:77:a0:ad:47:91:fa:ba:97:59:
                    52:3c:34:d2:99:c5:d1:b0:c2:5f:12:18:cb:c7:31:
                    e6:01:ed:3f:04:cf:02:f3:67:20:bd:44:93:e4:1c:
                    b3:bd:f7:b0:76:4d:41:8b:e2:81:5a:6b:98:e3:e6:
                    d4:ec:3a:4f:15:d2:a2:fa:91:f9:b4:6e:e0:ff:28:
                    b4:00:cd:c1:44:22:00:ba:f4:02:37:df:f8:be:a0:
                    8c:07:6f:3c:3d:f3:89:87:d9:44:68:63:7d:98:50:
                    ba:aa:94:4e:30:13:ca:8a:c5:a7:b9:70:60:34:2d:
                    66:62:f8:94:8c:6c:fa:c4:76:40:c7:d9:be:d2:ca:
                    02:e3:cb:37:f6:be:e6:fd:01:e1:65:e9:72:36:be:
                    f6:db:8d:99:28:b2:01:9f:c8:cc:c8:91:56:ac:41:
                    5b:df:3b:3a:d9:78:19:b7:b3:31:f1:ca:bb:a0:46:
                    f6:2d:3b:66:f4:66:63:a2:dd:08:f0:65:99:38:ff:
                    a6:08:ce:c7:de:79:fe:6c:ae:d5:8d:7a:92:18:1b:
                    c6:84:65:4e:b8:15:e4:b0:53:e3:f0:fd:c4:a4:1b:
                    e2:dd:0e:fd:fb:8f:00:bb:82:1c:c0:20:9c:78:e5:
                    34:c7:ad:62:06:ff:fe:23:e1:52:e6:a3:d5:01:34:
                    14:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AF:AB:B4:9F:FD:A8:08:CF:03:F3:AD:E0:BE:8A:64:55:D1:B2:2E
            X509v3 Authority Key Identifier:
                keyid:0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a323a3a2f34382d3438203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:2f:58:cb:f2:d5:77:3f:b8:7a:2c:ae:d2:02:47:47:6a:ae:
         74:18:93:0f:0a:f8:91:aa:9e:f3:66:64:96:f3:d9:04:d2:ef:
         90:fb:8a:51:df:f3:4b:a3:a5:0e:eb:6c:31:39:c7:69:cb:ca:
         1f:46:28:99:79:ab:62:dc:61:af:2f:5b:e4:02:96:cc:2a:1f:
         f9:59:94:13:3f:65:14:ee:f9:d5:58:77:60:6f:96:e0:13:0e:
         b8:80:ea:82:16:2a:3a:1d:12:8a:fc:75:28:9b:b4:ad:6c:50:
         83:9c:06:97:14:52:01:67:be:f9:00:3b:44:94:5d:fd:15:95:
         59:2c:d0:22:98:b8:d2:56:51:a2:77:43:d2:36:1b:df:09:a3:
         8d:a3:63:ae:5b:e6:b9:34:00:59:b9:d9:ed:e9:a6:57:c7:2f:
         95:0c:c9:42:2d:9b:ef:2f:7b:ce:e6:e9:ad:c7:a5:39:f1:17:
         2f:e9:80:87:c6:2d:b2:61:46:bc:c5:ea:1e:47:21:b1:80:e5:
         57:57:d2:a8:1c:c9:8b:f3:57:1a:e9:36:ce:dc:8b:cc:4f:1e:
         84:4a:e4:dd:3b:ff:18:0c:4a:23:6e:56:e1:e7:68:18:f2:98:
         86:93:7d:ae:0d:f9:b3:88:14:1e:53:8f:ef:d6:70:29:9d:be:
         64:b6:94:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----