Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a353a3a2f34382d3438203d3e20323731333533.roa
File:                     323830343a376133303a353a3a2f34382d3438203d3e20323731333533.roa (raw, json)
Hash identifier:          Rxq+aj4wNbcURVMCeaPO9WiI6LtyIN6qmjhwNx9kkpw=
Subject key identifier:   88:75:5C:7E:B3:B8:C6:B4:68:6C:61:62:A8:55:C4:15:A6:81:00:93
Certificate issuer:       /CN=49DBAD5FECCD33235162300AA0573876E9771175
Certificate serial:       2D66FE9BF614E147B1B58A294D8590CED9136C3B
Authority key identifier: 49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a353a3a2f34382d3438203d3e20323731333533.roa
Signing time:             Wed 17 Jul 2024 19:34:45 +0000
ROA not before:           Wed 17 Jul 2024 19:29:45 +0000
ROA not after:            Wed 16 Jul 2025 19:34:45 +0000
asID:                     271353
IP address blocks:        2804:7a30:5::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:66:fe:9b:f6:14:e1:47:b1:b5:8a:29:4d:85:90:ce:d9:13:6c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49DBAD5FECCD33235162300AA0573876E9771175
        Validity
            Not Before: Jul 17 19:29:45 2024 GMT
            Not After : Jul 16 19:34:45 2025 GMT
        Subject: CN=88755C7EB3B8C6B4686C6162A855C415A6810093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:a0:23:d5:3b:de:d4:48:eb:76:f7:2f:44:
                    00:b1:90:7c:12:12:20:62:96:9c:ba:ce:de:8f:e8:
                    a4:d7:b0:7e:f5:ef:1b:a9:94:b8:f1:df:33:d7:c5:
                    58:14:2e:ae:27:eb:1a:ec:59:49:52:14:fa:b7:39:
                    c1:99:53:3f:85:fe:67:52:dc:4b:b9:01:ca:a7:b4:
                    65:c4:64:aa:f9:a4:85:15:5b:1b:cf:04:f2:9a:03:
                    f1:fe:6b:83:e2:e6:fc:f6:b1:94:c3:82:4a:d5:77:
                    1f:3a:a9:b5:23:37:ee:80:1e:28:f7:7b:88:19:61:
                    99:00:83:f5:38:bf:82:fb:35:37:1a:87:30:21:85:
                    06:21:53:07:23:af:bd:d5:68:f0:be:16:df:0f:be:
                    38:6d:8e:0e:19:83:07:4c:c7:d8:66:b8:e8:07:fb:
                    ed:25:b4:f0:a7:c7:e9:13:ee:25:56:7c:a7:39:9f:
                    a4:00:e2:d6:b9:12:e8:07:d1:78:49:27:89:28:a1:
                    80:58:a3:84:b7:2e:38:b5:da:41:12:bd:78:05:cc:
                    8a:f4:cc:3f:f3:c1:a6:2b:3f:60:ea:e3:22:0a:ed:
                    99:f2:30:66:73:c3:40:7f:b2:1b:d0:38:74:63:28:
                    44:6b:e4:25:00:f1:a7:8a:98:1d:11:e7:64:7f:ab:
                    b5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:75:5C:7E:B3:B8:C6:B4:68:6C:61:62:A8:55:C4:15:A6:81:00:93
            X509v3 Authority Key Identifier:
                keyid:49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/49DBAD5FECCD33235162300AA0573876E9771175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a353a3a2f34382d3438203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:6e:9e:93:f5:81:b6:a5:0a:29:30:fd:a4:7e:28:27:4e:4d:
         74:7c:8a:4e:50:2a:d2:f0:4f:fa:01:30:b9:e8:33:e0:08:05:
         6e:90:0b:e6:b6:07:5b:0b:9e:a5:02:85:7b:7d:d6:7a:c5:01:
         2c:ce:94:af:2e:e3:c8:c2:0d:e8:cd:96:ec:86:ce:d8:8e:34:
         9e:d4:60:f6:60:47:ac:d5:fb:de:3b:8a:7b:19:56:83:50:a6:
         91:30:a9:49:fd:54:64:7a:da:08:ee:8d:ef:ec:46:f9:3a:26:
         c1:83:99:50:70:d1:17:d7:d3:34:e5:94:04:fe:5f:7b:70:e5:
         e9:02:e5:9f:54:16:87:2a:68:c7:91:44:a9:50:f1:e7:95:22:
         46:35:f6:09:de:5e:5c:1e:a1:d0:3a:85:81:d0:e0:f4:e2:9f:
         13:db:5c:88:f6:db:4e:b6:4a:15:8b:cd:61:b0:1d:78:85:bc:
         b4:9f:8a:f3:16:c1:37:48:62:29:f9:c4:72:a7:50:c6:fa:6b:
         f0:71:3f:91:76:9d:8d:87:94:3d:39:72:62:f6:c8:72:dc:d0:
         f9:2b:b3:44:0e:2c:bc:b1:2c:5c:bf:52:db:e0:73:e2:33:07:
         31:14:60:63:ab:df:a2:3f:d5:21:eb:1d:87:9b:ec:2f:73:90:
         47:ea:32:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----