Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a3a2f33342d3334203d3e20323633343231.roa
File:                     323830343a313630303a3a2f33342d3334203d3e20323633343231.roa (raw, json)
Hash identifier:          cBwW6GpHlT56WKuovqy+I14yG7UnIE9wfhr+Sakb7s8=
Subject key identifier:   CB:59:21:3B:63:18:47:69:D1:25:B1:99:0D:79:58:9D:38:AB:82:0C
Certificate issuer:       /CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
Certificate serial:       6D78EB4FB003A45707234359AD7C977C8CF98435
Authority key identifier: 0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a3a2f33342d3334203d3e20323633343231.roa
Signing time:             Thu 04 Apr 2024 07:44:47 +0000
ROA not before:           Thu 04 Apr 2024 07:39:47 +0000
ROA not after:            Thu 03 Apr 2025 07:44:47 +0000
asID:                     263421
IP address blocks:        2804:1600::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:78:eb:4f:b0:03:a4:57:07:23:43:59:ad:7c:97:7c:8c:f9:84:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
        Validity
            Not Before: Apr  4 07:39:47 2024 GMT
            Not After : Apr  3 07:44:47 2025 GMT
        Subject: CN=CB59213B63184769D125B1990D79589D38AB820C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:a9:c5:85:e3:13:a4:63:27:69:49:42:1c:
                    36:33:39:20:9c:49:8f:47:92:93:51:40:62:ad:cc:
                    1b:1b:18:b4:2c:95:82:36:97:2a:9c:a5:64:3a:20:
                    e9:47:03:7a:4c:a1:bd:b0:25:a6:59:98:0a:a3:43:
                    e3:e7:6b:6c:45:22:9f:ff:16:8d:ea:be:ee:1b:ce:
                    17:63:87:b7:03:87:8e:6d:c0:55:e0:e9:38:4f:80:
                    c4:d3:be:8f:69:06:50:af:27:3b:5e:65:cf:8c:4e:
                    96:61:5c:e9:f2:5e:c2:d1:d6:c6:7b:3e:dd:a7:87:
                    0f:c8:85:e2:87:8e:ec:75:42:8e:5d:47:15:5a:85:
                    db:9c:30:38:64:b5:07:82:b2:2e:58:e6:d9:1a:df:
                    27:9e:68:1a:32:4a:b3:75:b1:68:49:98:da:28:34:
                    7d:a0:e4:22:63:de:d9:e0:5f:5e:00:4c:bd:67:66:
                    c4:6f:a6:93:69:5d:76:5b:ff:47:23:ef:d2:29:56:
                    a0:f7:f2:ba:b4:86:b1:a7:88:f6:54:2d:78:a9:3a:
                    df:f0:f8:60:9d:84:21:f9:26:6e:fc:5a:59:ee:17:
                    a8:e8:b7:ec:8f:22:0d:f5:a9:5f:22:bb:a2:da:fb:
                    3b:3f:0d:72:fa:ca:04:8d:2f:42:f5:e6:3e:80:a1:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:59:21:3B:63:18:47:69:D1:25:B1:99:0D:79:58:9D:38:AB:82:0C
            X509v3 Authority Key Identifier:
                keyid:0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a3a2f33342d3334203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600::/34

    Signature Algorithm: sha256WithRSAEncryption
         af:d8:d9:c7:54:68:f5:1f:ab:73:3c:e7:c8:6d:cb:ef:5d:91:
         39:08:2c:0b:46:27:f8:47:27:cd:c1:33:49:7d:86:da:b3:7a:
         71:44:c6:b3:37:3b:a8:ee:4c:05:3c:1b:b4:ec:c5:8a:f4:b2:
         da:ad:30:69:12:1c:6f:85:6d:b8:79:bf:14:cc:a9:ad:a9:ff:
         fd:8c:56:97:d9:e1:d3:1e:d9:46:4b:8f:f2:64:c6:a6:7d:26:
         14:5a:67:e7:97:b7:a6:24:81:0c:d0:ab:18:99:64:81:6b:74:
         fa:97:bd:5e:2b:01:14:1f:58:00:b5:cb:4f:84:50:ee:cf:ff:
         f9:d6:30:3f:76:e4:d3:a6:a0:ed:68:29:ef:94:22:dd:2c:84:
         c9:c8:17:3f:2c:df:33:2d:7d:8c:96:50:1c:01:02:75:6b:fc:
         9f:35:f7:8a:07:82:59:a0:fd:b2:7e:97:94:6c:f7:f0:82:c1:
         e7:6d:ae:33:5d:a2:7f:30:b7:28:20:c3:05:56:5b:e8:e1:7c:
         39:97:6d:0b:37:be:8f:99:b8:9f:fc:d5:f0:1c:f7:74:4e:cb:
         28:a5:c0:9c:df:35:91:31:21:14:a6:2f:cf:31:a2:bb:89:3a:
         9e:5a:32:d6:03:1f:c8:29:a4:d9:9d:04:03:ca:43:47:37:c6:
         b3:34:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----