Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a3a2f33322d3332203d3e20323732353636.roa
File:                     323830343a383533633a3a2f33322d3332203d3e20323732353636.roa (raw, json)
Hash identifier:          MwQO/uEUD5uXpKS8mqbdqibl3Yhx+/jyaG0OtgJAvnU=
Subject key identifier:   70:DE:30:84:3B:FE:30:4F:BF:CE:AD:0E:6E:25:4E:29:34:0C:AD:84
Certificate issuer:       /CN=20EE33C957E1A859D49A5E411C799465085E928F
Certificate serial:       3C220F71F31E4B36F55FDBC81C5F5B534BF22B7D
Authority key identifier: 20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a3a2f33322d3332203d3e20323732353636.roa
Signing time:             Tue 23 Apr 2024 22:16:34 +0000
ROA not before:           Tue 23 Apr 2024 22:11:34 +0000
ROA not after:            Tue 22 Apr 2025 22:16:34 +0000
asID:                     272566
IP address blocks:        2804:853c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:22:0f:71:f3:1e:4b:36:f5:5f:db:c8:1c:5f:5b:53:4b:f2:2b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EE33C957E1A859D49A5E411C799465085E928F
        Validity
            Not Before: Apr 23 22:11:34 2024 GMT
            Not After : Apr 22 22:16:34 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:31:aa:ea:61:f9:29:ba:3d:46:10:5c:11:
                    0f:93:5d:96:1d:90:1c:8f:28:b3:61:86:fc:3f:53:
                    c0:0d:c2:38:89:6f:10:7a:02:db:05:97:14:b0:d7:
                    c9:fc:3e:00:e9:d4:b0:4e:1a:11:e6:12:58:c5:a8:
                    fa:9b:eb:49:51:e5:26:5a:02:fe:2c:fc:71:b8:49:
                    d4:5d:90:29:63:23:33:c3:53:8b:d9:58:3e:c5:e8:
                    60:95:ca:e8:15:08:4f:a6:26:6f:fa:02:65:b4:84:
                    06:f2:fe:aa:32:9d:ca:ab:88:97:0b:80:2b:62:72:
                    d8:4d:80:9a:fb:13:1c:e5:ef:13:eb:2c:87:23:92:
                    ff:43:88:41:f5:6e:ff:f4:9d:90:1f:e9:c0:f3:fd:
                    7f:10:b2:f3:25:78:e5:63:01:fc:72:48:c6:11:12:
                    68:c0:81:38:c7:9b:8c:7d:28:74:41:ce:41:ed:a4:
                    49:37:a0:b7:14:21:54:b2:87:f8:a7:cf:57:61:cd:
                    b0:00:d6:a5:fe:c8:71:6b:1e:69:bb:a3:5b:2f:c7:
                    9c:a0:34:4e:48:a1:c5:e5:f2:55:85:a1:6d:f2:35:
                    7e:9c:1e:7f:af:b2:e3:dc:15:cd:61:a5:e9:f3:87:
                    79:55:e4:38:8d:94:2f:28:11:41:cd:a6:0e:29:12:
                    c0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DE:30:84:3B:FE:30:4F:BF:CE:AD:0E:6E:25:4E:29:34:0C:AD:84
            X509v3 Authority Key Identifier:
                keyid:20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/20EE33C957E1A859D49A5E411C799465085E928F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a3a2f33322d3332203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:32:1d:fe:c6:e2:33:1d:54:fe:81:8c:95:3a:3b:77:7e:4f:
         99:e0:e8:ee:22:52:20:66:50:63:52:07:97:a2:55:62:27:c8:
         f3:f1:3f:5b:57:58:82:4d:4c:38:d7:2c:83:37:21:03:73:5c:
         90:b7:fd:80:77:62:f6:1a:33:6f:8e:6d:a7:55:4b:7a:24:95:
         1a:28:f0:ab:0f:11:5b:8b:e7:21:15:77:84:c5:72:12:cd:d6:
         7d:45:5a:fb:e4:03:d9:84:68:73:a6:10:dd:1b:97:94:f7:30:
         b1:d3:18:3f:4d:0e:38:70:2f:d6:c0:76:82:d4:c9:9e:a7:da:
         5c:81:07:4e:fd:2f:b0:2f:18:27:3a:81:e5:9c:ab:65:da:47:
         5c:67:43:58:a3:36:5d:90:00:ee:ed:f0:de:4a:e7:ca:fe:fe:
         d2:2f:0a:49:0d:73:48:43:1d:53:51:28:02:bc:41:94:cc:86:
         99:89:ad:18:a2:70:78:f6:21:7e:f1:10:d4:97:09:89:af:06:
         59:8e:fb:6c:42:3d:da:40:70:7e:95:ed:20:cc:b9:24:3a:a4:
         55:bc:08:0c:7d:d5:f3:aa:43:cf:8f:3a:77:49:3d:8e:ba:99:
         44:51:4d:84:8a:0e:6f:8a:e1:f8:09:02:b4:85:95:3a:4a:f5:
         c1:5a:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----