Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a363a3a2f34382d3438203d3e20323731333533.roa
File:                     323830343a376133303a363a3a2f34382d3438203d3e20323731333533.roa (raw, json)
Hash identifier:          A6G6JwPRGb1Ao9OW72nEsd19eDpEhe5ztX0lfMWwZdg=
Subject key identifier:   82:43:FC:EF:7D:EC:46:28:2B:1C:20:2F:2F:75:CB:B5:BB:77:85:AC
Certificate issuer:       /CN=49DBAD5FECCD33235162300AA0573876E9771175
Certificate serial:       2B88C8B18E51FA0011F42A8595AAD102A248AED3
Authority key identifier: 49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a363a3a2f34382d3438203d3e20323731333533.roa
Signing time:             Wed 17 Jul 2024 19:34:46 +0000
ROA not before:           Wed 17 Jul 2024 19:29:46 +0000
ROA not after:            Wed 16 Jul 2025 19:34:46 +0000
asID:                     271353
IP address blocks:        2804:7a30:6::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:88:c8:b1:8e:51:fa:00:11:f4:2a:85:95:aa:d1:02:a2:48:ae:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49DBAD5FECCD33235162300AA0573876E9771175
        Validity
            Not Before: Jul 17 19:29:46 2024 GMT
            Not After : Jul 16 19:34:46 2025 GMT
        Subject: CN=8243FCEF7DEC46282B1C202F2F75CBB5BB7785AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1e:d7:36:3b:bb:f5:3a:55:34:cc:f6:a5:2b:
                    b4:7d:cb:65:14:fc:70:ca:80:24:a0:f0:54:a5:69:
                    a6:f9:c1:96:28:51:50:40:39:da:88:2d:67:6c:aa:
                    50:6b:fc:bb:1c:9e:da:84:0d:89:3c:74:47:f0:21:
                    5e:f6:75:2b:e1:93:86:fe:4d:8f:ee:ae:d1:66:f4:
                    50:84:bc:ce:42:99:c6:64:5a:f6:ff:bd:f5:01:5a:
                    77:6a:c0:40:a5:a7:3c:8b:b1:e3:d8:88:30:c5:40:
                    6e:a9:e1:95:dd:a8:7f:7c:74:5e:aa:96:a2:cc:34:
                    cc:39:bd:bf:ac:f9:c0:1d:c2:7e:97:31:10:d0:2f:
                    d9:d1:1d:50:2b:28:05:17:62:69:8e:4a:20:9f:55:
                    14:37:24:53:ec:62:6c:e3:6c:c3:ca:69:55:db:ac:
                    de:93:fd:3f:a6:57:38:80:11:e2:10:15:c9:88:c7:
                    af:7a:d3:6b:03:ca:b6:6b:2c:45:d8:3e:3f:e4:5f:
                    ee:a0:23:b7:6d:ab:7d:1b:b0:15:7b:7d:58:08:1f:
                    09:ab:cc:69:c7:38:70:68:b8:24:2f:57:db:1d:99:
                    53:8e:c3:19:e2:77:f4:89:e0:0b:7e:6f:dc:66:e5:
                    65:5d:a2:49:af:73:94:fc:34:bf:67:06:a8:fe:1a:
                    cb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:43:FC:EF:7D:EC:46:28:2B:1C:20:2F:2F:75:CB:B5:BB:77:85:AC
            X509v3 Authority Key Identifier:
                keyid:49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/49DBAD5FECCD33235162300AA0573876E9771175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a363a3a2f34382d3438203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:32:3e:40:7f:c5:55:2c:02:e2:1e:cc:aa:d7:ba:c0:aa:46:
         43:e9:04:4d:1f:f2:6f:82:fc:79:ca:4e:8f:e9:0f:40:b3:c0:
         d3:6a:2b:aa:59:e6:79:c3:96:ee:54:45:d1:7b:1a:e5:47:d2:
         b3:7d:ba:38:f8:24:c6:e3:45:60:20:f3:56:85:4a:59:f3:11:
         da:ad:91:5a:aa:4f:07:b6:77:d4:fc:45:aa:d0:ef:12:ae:b3:
         33:9f:94:da:43:08:ff:4d:a1:99:46:28:2a:38:83:20:69:ab:
         a6:d1:f2:27:f1:ef:e4:bc:f2:75:a3:38:4f:2f:87:0b:b1:7f:
         19:d5:4b:a1:3d:68:e4:15:ac:2f:bf:2c:60:2e:7c:28:88:78:
         82:cb:4b:0f:b3:0c:87:2e:57:ec:49:81:8d:eb:ad:a3:b3:8e:
         b0:ab:7d:4d:75:79:b3:a8:d8:67:6b:d1:9f:86:44:34:cd:57:
         82:ea:d0:ae:5c:eb:50:a9:f1:86:2e:62:f7:96:2d:3e:d6:94:
         67:6b:30:ef:9d:b4:2a:89:31:11:18:09:dd:fc:c5:80:df:d0:
         ea:45:b0:15:65:b1:da:d4:2c:11:f9:ab:14:9c:b2:9e:1f:7f:
         60:04:db:db:3a:12:64:f7:9c:94:78:ee:c2:a6:46:5d:f4:9a:
         c2:82:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----