Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a3a2f33322d3332203d3e20323730383134.roa
File:                     323830343a6637303a3a2f33322d3332203d3e20323730383134.roa (raw, json)
Hash identifier:          abA3XBbYcQbWH5msf+RPLxf4WsWhCn2PcvHHTTgt7Jg=
Subject key identifier:   BA:22:07:71:73:5F:07:B5:72:13:A3:FA:67:BB:C4:38:FE:69:A3:4E
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       5CC1BE70AAF053B935A5A492D6120E1831829E38
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a3a2f33322d3332203d3e20323730383134.roa
Signing time:             Thu 22 Aug 2024 23:13:37 +0000
ROA not before:           Thu 22 Aug 2024 23:08:37 +0000
ROA not after:            Thu 21 Aug 2025 23:13:37 +0000
asID:                     270814
IP address blocks:        2804:f70::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c1:be:70:aa:f0:53:b9:35:a5:a4:92:d6:12:0e:18:31:82:9e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug 22 23:08:37 2024 GMT
            Not After : Aug 21 23:13:37 2025 GMT
        Subject: CN=BA220771735F07B57213A3FA67BBC438FE69A34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:87:e3:6f:57:01:71:79:23:76:56:a4:e4:
                    67:df:d2:80:93:ee:8d:80:ff:41:88:dc:e3:25:b4:
                    5e:a8:80:2a:f7:7c:02:50:7a:33:4c:f1:d2:f7:02:
                    5c:52:ed:73:7c:2c:c7:c3:4a:4d:e9:20:b0:9f:c8:
                    0f:0d:3e:0f:6f:fe:5e:80:f9:34:00:38:ae:f1:d0:
                    0d:a9:2e:9a:bd:62:ff:f5:d5:01:a2:4b:1c:d9:80:
                    33:17:e9:13:22:cb:20:5c:77:dd:50:c5:b6:1a:7d:
                    ca:c9:ce:7f:44:62:51:27:4e:a6:c5:0b:4d:db:f2:
                    86:e7:6f:39:97:d3:17:7c:0a:6c:0a:3b:9d:78:a1:
                    1a:51:43:49:73:97:8c:4d:84:9c:1f:bf:e3:81:78:
                    b0:c3:a5:25:48:bb:e2:29:4e:fa:51:fe:49:78:a3:
                    0c:68:ec:8b:1b:fc:40:a9:ab:54:50:64:6d:ff:8c:
                    f8:71:5c:5a:df:0b:1d:d4:11:ff:07:a2:b3:e9:49:
                    f5:eb:81:2a:02:54:cf:69:23:06:f1:d6:e6:52:8b:
                    3b:34:28:8a:18:00:05:e4:49:4d:ea:89:e5:39:44:
                    34:a8:43:95:ce:02:e3:49:1d:8a:98:93:ee:9c:d3:
                    2c:09:9c:b2:f4:cb:c0:cf:1d:1e:a6:72:50:99:6e:
                    9b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:22:07:71:73:5F:07:B5:72:13:A3:FA:67:BB:C4:38:FE:69:A3:4E
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a3a2f33322d3332203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f70::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:a4:88:b2:2d:6c:a2:6d:10:30:00:0e:a8:8a:10:f2:13:f2:
         56:bb:48:df:82:d2:cf:f2:5e:d0:d3:9e:2f:a0:aa:f7:32:0a:
         12:a7:6a:6b:46:a3:58:6f:64:cd:3d:f0:ec:ba:4e:36:dc:37:
         1f:b2:41:24:b5:51:30:e1:32:6d:2f:a3:6b:e7:f0:6b:c8:b6:
         1e:70:61:34:16:2d:c8:4d:6e:7e:29:9e:8e:bc:1f:57:d4:02:
         d9:db:0e:d2:19:aa:c3:6f:53:4b:33:2e:41:83:a2:75:e8:b2:
         d8:a5:09:f2:53:9f:6c:c0:2a:2b:fe:c7:4a:08:af:32:d4:c9:
         36:61:0a:aa:ec:fa:89:a6:d0:c9:d3:7f:ae:ad:2a:36:e6:8f:
         8a:d9:4a:f0:0d:73:75:6d:ea:4d:f4:ed:f2:9a:4e:60:8e:ad:
         60:b6:5b:79:a6:fb:f9:87:8a:2e:6d:a2:09:7e:71:20:12:71:
         8a:e0:66:cb:61:4d:c7:c8:e4:ca:ea:01:38:8f:ca:1a:2d:2d:
         03:76:ad:ae:da:e1:4b:4c:26:0c:4b:8e:15:e1:d8:fa:e2:c5:
         d8:27:c3:2d:05:4a:3f:0d:68:5b:18:2f:d0:c2:7e:e0:4c:d1:
         75:d1:7b:b6:cc:60:fc:0e:c7:fe:68:48:e1:15:06:d4:61:83:
         a8:84:6f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----