Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsRcagYge4DdjbhLCwvjfbkpinnG7nGjNfHJJUibU8ZS/0/323830343a333866303a3a2f33322d3438203d3e20323636353133.roa
File:                     323830343a333866303a3a2f33322d3438203d3e20323636353133.roa (raw, json)
Hash identifier:          Ek95t9Vr6AM39z/Z7Sj0xqNneFEYveuAsHnq0e5TEq8=
Subject key identifier:   46:2C:F7:0B:80:90:C9:40:1C:9D:48:B8:F7:10:F7:E6:62:7E:8E:19
Certificate issuer:       /CN=594F466063EF34DEFA34B6EC7F295FCAA78F43B6
Certificate serial:       78A601FB21DEEDDC40E8AE140AF49C89EA757624
Authority key identifier: 59:4F:46:60:63:EF:34:DE:FA:34:B6:EC:7F:29:5F:CA:A7:8F:43:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594F466063EF34DEFA34B6EC7F295FCAA78F43B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsRcagYge4DdjbhLCwvjfbkpinnG7nGjNfHJJUibU8ZS/0/323830343a333866303a3a2f33322d3438203d3e20323636353133.roa
Signing time:             Mon 04 Nov 2024 17:25:13 +0000
ROA not before:           Mon 04 Nov 2024 17:20:13 +0000
ROA not after:            Mon 03 Nov 2025 17:25:13 +0000
asID:                     266513
IP address blocks:        2804:38f0::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a6:01:fb:21:de:ed:dc:40:e8:ae:14:0a:f4:9c:89:ea:75:76:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594F466063EF34DEFA34B6EC7F295FCAA78F43B6
        Validity
            Not Before: Nov  4 17:20:13 2024 GMT
            Not After : Nov  3 17:25:13 2025 GMT
        Subject: CN=462CF70B8090C9401C9D48B8F710F7E6627E8E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d5:65:37:a5:fc:e5:ea:08:30:ff:fe:7d:44:
                    5a:22:42:ab:ed:9d:48:a6:cc:08:f0:dc:b9:e0:10:
                    c6:71:dd:8a:30:28:93:bd:4c:86:0e:76:8a:34:10:
                    6b:8c:82:28:9c:e6:31:75:67:03:91:cd:12:8c:bf:
                    ee:6c:78:dd:8b:a9:f0:cb:e6:aa:aa:6d:82:a7:7f:
                    8a:ae:df:9d:a7:ba:9b:6a:43:cf:f8:ff:f4:f9:30:
                    a3:82:0a:49:5a:30:b4:2f:51:c4:31:22:3e:e8:35:
                    46:db:5a:d9:ac:b3:3d:bc:ee:bd:96:30:d4:1d:d9:
                    03:36:ab:12:35:bb:07:b0:4c:e2:da:b1:74:3e:82:
                    45:7a:f7:80:b1:3a:16:0b:d9:95:8b:ad:8e:4b:9e:
                    bb:bc:03:c2:79:8d:0a:4d:e2:bd:ff:fd:56:4f:ca:
                    9c:c4:b1:f7:bc:04:7d:59:bf:01:3c:66:6f:0a:d4:
                    0f:7b:5c:9e:0b:70:2c:ff:04:67:94:16:99:ff:1d:
                    d0:e4:4c:b0:e8:23:fb:8d:f8:3d:e4:e3:d2:e1:b8:
                    e5:65:9f:f9:07:d5:0e:bf:16:89:a8:ae:3b:cd:a2:
                    55:03:b6:ed:27:0d:94:c5:ca:be:10:b4:7f:2a:a7:
                    51:f3:e1:e3:af:cb:41:ca:5f:75:78:c7:9a:a6:65:
                    8e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2C:F7:0B:80:90:C9:40:1C:9D:48:B8:F7:10:F7:E6:62:7E:8E:19
            X509v3 Authority Key Identifier:
                keyid:59:4F:46:60:63:EF:34:DE:FA:34:B6:EC:7F:29:5F:CA:A7:8F:43:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsRcagYge4DdjbhLCwvjfbkpinnG7nGjNfHJJUibU8ZS/0/594F466063EF34DEFA34B6EC7F295FCAA78F43B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594F466063EF34DEFA34B6EC7F295FCAA78F43B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsRcagYge4DdjbhLCwvjfbkpinnG7nGjNfHJJUibU8ZS/0/323830343a333866303a3a2f33322d3438203d3e20323636353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:f3:cd:03:0c:e0:3a:82:81:0f:81:65:d1:12:c6:6f:0f:30:
         71:c3:fb:11:df:65:b5:0f:ec:84:09:55:43:ce:7f:ac:b5:80:
         b9:61:b2:bf:29:57:72:0e:ab:c8:ef:12:2a:91:73:38:44:1d:
         96:93:89:57:37:94:3b:e3:3d:7a:bb:62:1d:d6:ab:9f:02:dc:
         1d:4c:5e:33:b2:bb:33:af:67:33:8d:c1:85:c8:b5:1a:34:b0:
         01:e1:03:7b:5b:67:bd:43:fe:9c:a1:0d:85:61:8e:30:c7:01:
         85:41:8e:3c:b7:1b:39:76:d9:64:04:8d:10:ad:fc:7c:f6:c5:
         a0:ab:d9:4c:cc:15:97:d8:84:d7:e1:a3:93:4a:33:c6:3a:ea:
         64:e4:98:c6:f2:b3:06:80:dc:e0:53:1a:75:84:81:ea:6a:cb:
         8a:3c:6a:91:26:9b:0d:60:39:5c:0b:76:18:57:e7:d1:4d:9b:
         a9:3a:f4:92:32:b9:6f:2a:bc:57:67:81:39:74:51:be:26:19:
         fc:74:74:92:e2:19:c8:2d:b1:98:ad:d4:a2:4a:b6:73:94:4d:
         50:c5:66:f6:d2:75:b7:04:ff:dc:78:93:12:61:62:a6:ba:fd:
         f5:23:5a:77:f7:47:3a:30:1a:66:1f:04:e2:a9:5e:af:cc:33:
         31:02:96:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----