Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/323830343a356630633a3a2f33322d3438203d3e20323639303733.roa
File:                     323830343a356630633a3a2f33322d3438203d3e20323639303733.roa (raw, json)
Hash identifier:          iiHa5YdeZa6gqQfAhO83QrBG4rN5Dif1gL627o/wb0I=
Subject key identifier:   95:7F:1F:2C:84:F7:B0:B3:9F:67:98:E5:1D:25:13:A0:9B:0A:CD:33
Certificate issuer:       /CN=7C85DCA145843B801E0DE7F701B0084B2991189D
Certificate serial:       677144D74199BD579FEA541D210ED2F6AD41F635
Authority key identifier: 7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/323830343a356630633a3a2f33322d3438203d3e20323639303733.roa
Signing time:             Fri 19 Apr 2024 20:18:34 +0000
ROA not before:           Fri 19 Apr 2024 20:13:34 +0000
ROA not after:            Fri 18 Apr 2025 20:18:34 +0000
asID:                     269073
IP address blocks:        2804:5f0c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:71:44:d7:41:99:bd:57:9f:ea:54:1d:21:0e:d2:f6:ad:41:f6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C85DCA145843B801E0DE7F701B0084B2991189D
        Validity
            Not Before: Apr 19 20:13:34 2024 GMT
            Not After : Apr 18 20:18:34 2025 GMT
        Subject: CN=957F1F2C84F7B0B39F6798E51D2513A09B0ACD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:04:8e:cf:88:75:b6:8c:f9:59:86:e3:e3:
                    a3:26:0f:80:ec:4a:e1:90:6b:c1:88:d6:4b:fc:be:
                    69:af:89:d2:42:17:75:44:d1:81:b9:3b:f8:ca:cc:
                    62:e5:d9:4b:b8:25:0b:8d:6d:8c:6f:1d:70:b8:7d:
                    6c:41:ae:db:1d:82:17:0c:f5:a4:d2:d4:79:b3:3e:
                    10:0f:3e:a1:a1:21:85:0d:33:d0:e2:8c:c5:4d:ef:
                    c4:a9:09:c0:ff:82:42:89:3e:e3:e7:4c:f2:55:63:
                    17:d5:2a:4e:fe:54:d0:40:8e:7f:e5:19:fd:1b:09:
                    14:81:09:ca:2e:79:6a:d8:fe:16:e0:db:91:12:ac:
                    0e:e8:c7:17:12:66:18:90:f2:54:de:ea:85:90:a4:
                    ed:bb:63:7f:59:cf:53:f6:c1:b9:a7:e4:e2:b2:02:
                    de:1a:3e:42:b1:66:88:58:44:ca:a2:5a:e4:bd:54:
                    b5:b5:50:7d:c7:69:e9:9e:16:07:c9:92:ac:7d:ee:
                    1b:da:de:19:de:93:ff:8c:cd:68:c5:b9:a6:ba:cc:
                    d7:ee:1c:e1:af:68:3b:f2:87:5e:7e:fd:51:95:79:
                    c3:d4:bb:c5:37:3c:33:81:85:33:7f:86:57:be:77:
                    3c:34:6a:b1:8c:7e:35:2d:d8:c6:28:de:85:12:b2:
                    51:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7F:1F:2C:84:F7:B0:B3:9F:67:98:E5:1D:25:13:A0:9B:0A:CD:33
            X509v3 Authority Key Identifier:
                keyid:7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/323830343a356630633a3a2f33322d3438203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:23:e3:d0:5c:60:7c:95:6b:70:4f:e3:0d:1e:bf:66:46:9d:
         f4:12:af:1a:02:8a:f1:06:09:db:89:c9:df:70:ca:6e:5b:f8:
         68:7b:c9:6d:17:4b:e9:49:9e:02:63:92:50:e4:5c:37:e4:69:
         01:b1:33:33:26:31:0c:55:d1:3e:4e:51:2d:57:c9:29:38:01:
         5d:34:6e:85:30:29:0a:92:c7:31:ea:90:b2:44:24:95:49:26:
         fd:fe:ed:47:52:b7:82:74:f9:08:e1:62:ba:a9:4d:5a:d5:ae:
         8d:02:33:af:37:50:d6:85:1b:a1:81:1f:9c:ba:d9:b7:65:ae:
         62:40:96:a7:b1:3a:39:f4:82:d9:e2:8f:25:29:7e:4c:d0:e7:
         92:2a:b2:59:14:44:da:eb:da:ea:0a:ca:20:fa:cb:35:0c:9a:
         6f:56:74:e7:c4:4c:e7:09:35:1f:e4:fd:79:4a:51:26:a2:31:
         65:c6:83:49:cf:e4:1c:3a:9f:bf:83:9e:44:8f:46:6a:4f:0c:
         ef:09:de:49:bb:cc:c1:95:61:32:ff:78:8e:9c:f2:ca:5d:d1:
         f0:13:f3:e7:51:7c:51:79:f4:8e:57:e9:e0:cf:18:97:7e:7a:
         56:e7:ef:96:98:8a:d5:3a:28:bf:f9:7c:25:ff:8a:d9:cd:8f:
         cd:44:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----