Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/323830343a386166383a383030303a3a2f33332d3333203d3e20323733373034.roa
File:                     323830343a386166383a383030303a3a2f33332d3333203d3e20323733373034.roa (raw, json)
Hash identifier:          14rL2Z9OBMOF3/m3l5KhpK63GaJseFinSAFapXKM4wY=
Subject key identifier:   4F:C6:C9:61:C1:54:09:C4:E3:75:7F:56:9A:38:93:72:23:02:00:EA
Certificate issuer:       /CN=6D810586866FD89F6CB1074CF17A1EAFD0196B17
Certificate serial:       7522215CCBE8045418665DAC845CBFEBD5FBEB02
Authority key identifier: 6D:81:05:86:86:6F:D8:9F:6C:B1:07:4C:F1:7A:1E:AF:D0:19:6B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D810586866FD89F6CB1074CF17A1EAFD0196B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/323830343a386166383a383030303a3a2f33332d3333203d3e20323733373034.roa
Signing time:             Thu 04 Apr 2024 13:30:49 +0000
ROA not before:           Thu 04 Apr 2024 13:25:49 +0000
ROA not after:            Thu 03 Apr 2025 13:30:49 +0000
asID:                     273704
IP address blocks:        2804:8af8:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:22:21:5c:cb:e8:04:54:18:66:5d:ac:84:5c:bf:eb:d5:fb:eb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D810586866FD89F6CB1074CF17A1EAFD0196B17
        Validity
            Not Before: Apr  4 13:25:49 2024 GMT
            Not After : Apr  3 13:30:49 2025 GMT
        Subject: CN=4FC6C961C15409C4E3757F569A389372230200EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:f5:fe:e8:af:ab:c1:cb:40:8f:28:9d:50:
                    ee:29:00:bf:66:1e:58:b5:74:7a:8c:09:c6:fa:16:
                    e8:89:a1:02:f5:b7:57:99:e7:b8:ce:e5:b9:b5:0c:
                    79:9d:80:ee:68:3b:79:fb:57:8f:b8:76:9d:f3:58:
                    1f:52:08:94:cd:0a:70:a7:b7:ae:5e:7f:6c:d1:45:
                    71:23:91:17:5f:9b:8c:4c:f1:b1:4d:7f:4c:b5:44:
                    c7:75:12:0f:db:24:2b:c5:bb:54:2f:d5:5e:49:ea:
                    29:43:3e:d9:d0:52:e6:51:6c:57:87:03:aa:1a:93:
                    fd:ac:1e:32:96:9c:48:a4:3f:49:d9:b0:99:3a:4b:
                    60:78:ae:60:97:5c:06:33:39:9a:b5:6d:6a:59:23:
                    d2:de:a3:29:11:70:80:2b:2d:9c:0a:d1:5a:a3:1f:
                    77:9f:00:10:71:a8:e4:bd:c7:5c:6f:40:e2:0b:22:
                    e9:2e:ff:f4:1c:7c:be:51:61:60:cf:4e:09:5e:51:
                    99:13:d7:ac:e2:c5:48:a0:4d:5a:9e:95:52:aa:44:
                    0e:39:3f:53:94:5a:ae:57:22:b4:31:1f:14:60:e3:
                    1d:13:eb:1a:05:19:00:fa:a5:44:b0:bf:93:f5:3d:
                    83:37:b1:d5:20:d9:f4:56:a0:47:c0:92:dd:56:24:
                    1f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C6:C9:61:C1:54:09:C4:E3:75:7F:56:9A:38:93:72:23:02:00:EA
            X509v3 Authority Key Identifier:
                keyid:6D:81:05:86:86:6F:D8:9F:6C:B1:07:4C:F1:7A:1E:AF:D0:19:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/6D810586866FD89F6CB1074CF17A1EAFD0196B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D810586866FD89F6CB1074CF17A1EAFD0196B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/323830343a386166383a383030303a3a2f33332d3333203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         66:15:38:24:64:94:f9:d8:94:3f:8d:6d:1e:8d:18:06:0b:85:
         c8:e4:da:f0:b7:57:3a:28:0a:1a:ea:1d:bc:34:d4:fe:78:8a:
         f6:93:0e:6e:b5:32:8e:88:88:2a:ce:b0:37:70:46:e6:ae:5f:
         f6:9c:16:4a:06:c2:09:cc:7f:dd:dd:76:82:fa:d7:cd:10:ce:
         99:f6:fd:8d:3e:ae:1e:1e:df:e7:47:cc:f1:a8:c4:ac:3e:37:
         58:47:04:a5:17:41:d2:ba:f6:13:87:1e:47:2d:9c:07:fb:1e:
         3c:6e:aa:34:f1:d3:b3:b1:3c:e7:ca:ef:95:8a:a9:df:c2:cc:
         3e:08:af:d2:ba:d5:6c:31:f3:ce:c1:0b:48:10:57:e2:aa:bd:
         06:75:49:b7:3d:ac:ac:6a:59:e1:7f:ab:8b:c7:20:d5:39:6b:
         21:8b:30:5f:0f:46:40:a9:cf:38:00:4f:ba:74:1f:12:b0:5a:
         5b:e3:f4:69:b2:08:11:3f:bc:66:05:4c:9e:28:18:0e:78:f7:
         57:7b:24:08:f6:80:f9:d3:8c:0f:c0:6d:0c:14:d3:c4:5e:f5:
         2d:15:ea:ba:ed:fc:eb:70:bb:c7:1a:6f:d7:15:4e:b4:02:60:
         b0:9f:e2:00:05:93:ae:de:a9:76:6c:8e:a0:38:26:b1:1c:e6:
         81:0f:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----