Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa
File:                     323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa (raw, json)
Hash identifier:          pEmv6w75xj8Wkxjlk/vxdnImhO9fMJYFpS8p0UhFqVM=
Subject key identifier:   C7:C3:18:C6:D7:45:28:DB:05:2B:64:56:69:7F:CC:6F:B7:1F:06:FA
Certificate issuer:       /CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
Certificate serial:       491F06C22204F689AAF420636CE405D2CBB5C27D
Authority key identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa
Signing time:             Mon 19 Aug 2024 18:28:14 +0000
ROA not before:           Mon 19 Aug 2024 18:23:14 +0000
ROA not after:            Mon 18 Aug 2025 18:28:14 +0000
asID:                     271504
IP address blocks:        2804:7c90:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1f:06:c2:22:04:f6:89:aa:f4:20:63:6c:e4:05:d2:cb:b5:c2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
        Validity
            Not Before: Aug 19 18:23:14 2024 GMT
            Not After : Aug 18 18:28:14 2025 GMT
        Subject: CN=C7C318C6D74528DB052B6456697FCC6FB71F06FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:69:e6:fb:44:68:73:f0:ca:39:48:5c:96:17:
                    06:e0:55:2b:6f:a3:c5:1c:59:1a:14:37:61:38:03:
                    3f:83:4f:0e:b1:5f:c0:56:10:8e:1c:91:39:dd:91:
                    92:d0:d2:19:26:6b:df:71:b9:a8:ba:9b:f3:06:3b:
                    8e:b5:81:9c:05:d5:38:a3:80:b3:40:6f:e5:d8:a6:
                    09:3e:e2:5b:bc:bd:73:19:c4:0c:63:ff:5d:e5:44:
                    57:7b:7f:60:2d:9c:d8:25:f1:2b:47:3d:69:fa:ef:
                    69:86:b3:8e:2d:87:58:02:1a:80:b1:4c:47:f0:4b:
                    e1:b1:d7:90:fa:40:6e:4d:96:dd:c8:e8:3c:af:84:
                    7f:4e:af:00:76:71:a3:30:b3:8e:cc:94:23:c0:d2:
                    ea:84:85:6c:e5:b3:25:97:f9:4a:63:39:f6:ad:60:
                    38:7b:bc:61:51:7d:fc:08:ea:3a:e8:8a:af:38:f5:
                    a2:b6:be:d3:f5:c1:9c:6c:1a:38:ed:5b:00:07:b2:
                    78:1c:f9:2c:5a:0e:09:9e:3a:0e:53:14:ec:c7:f3:
                    ab:b3:00:83:5d:55:13:d4:06:4a:72:38:09:5d:16:
                    67:30:83:ee:11:46:38:87:35:93:b2:d4:b9:a0:9a:
                    93:1f:d9:de:da:67:76:02:3e:cc:fd:f5:6a:53:71:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C3:18:C6:D7:45:28:DB:05:2B:64:56:69:7F:CC:6F:B7:1F:06:FA
            X509v3 Authority Key Identifier:
                keyid:8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c90:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         99:57:aa:3d:89:f9:87:24:d4:d0:95:d3:50:87:3a:b8:6c:78:
         0e:f8:66:10:15:d7:cc:77:48:d4:a1:d8:ae:5c:6f:c5:ac:40:
         d2:17:37:97:c0:dd:44:1b:cb:dd:91:0d:08:5e:e4:11:78:5d:
         1a:d1:bd:67:8a:c4:31:e7:4d:9d:1c:e1:4f:8f:00:42:0b:bb:
         ab:34:42:86:e9:7e:22:34:bf:67:14:7c:ff:c4:2d:c0:4c:57:
         c1:30:d5:a0:dc:f8:5a:e4:9a:d5:97:27:2a:b7:b6:68:58:a8:
         36:1b:37:e6:38:78:a8:fc:3a:09:22:0e:ed:01:ca:c1:3e:2f:
         9f:64:dc:d7:9b:20:f2:8b:a9:0e:8d:9e:28:ce:eb:7d:8a:f0:
         54:a5:ef:3f:ad:8b:a8:78:5a:15:94:6a:db:78:44:9c:4a:34:
         de:0c:78:1b:d1:a4:56:bf:d8:73:9f:89:25:a2:fb:1d:87:a2:
         88:03:e5:d5:25:dd:3b:04:a5:47:c0:83:62:41:8a:5a:04:8c:
         76:f0:25:91:6e:06:8d:2b:91:a8:ba:45:8d:86:ee:9a:6f:bd:
         6e:04:50:f0:16:37:a3:56:c6:f1:01:bc:81:18:fe:36:a3:67:
         11:10:70:b8:f1:cf:b1:0d:ac:a6:87:e1:85:1f:bb:ba:d9:77:
         b4:69:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----