Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/323830343a343535633a3a2f33332d3333203d3e20323636393231.roa
File:                     323830343a343535633a3a2f33332d3333203d3e20323636393231.roa (raw, json)
Hash identifier:          VgApVe3kRxk6lq2rBxHLUVZgWlFhqSvsRZu4PG+3Yno=
Subject key identifier:   3A:9F:D4:1B:0F:13:18:C2:38:2E:4B:A8:2E:5F:AA:75:34:F1:22:BE
Certificate issuer:       /CN=5682495E51D353D705DB42C2671D958F655DB83F
Certificate serial:       2D8460910606A4F4BF9BE43ADC350AA07544D3D4
Authority key identifier: 56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/323830343a343535633a3a2f33332d3333203d3e20323636393231.roa
Signing time:             Tue 09 Jul 2024 14:15:26 +0000
ROA not before:           Tue 09 Jul 2024 14:10:26 +0000
ROA not after:            Tue 08 Jul 2025 14:15:26 +0000
asID:                     266921
IP address blocks:        2804:455c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:84:60:91:06:06:a4:f4:bf:9b:e4:3a:dc:35:0a:a0:75:44:d3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682495E51D353D705DB42C2671D958F655DB83F
        Validity
            Not Before: Jul  9 14:10:26 2024 GMT
            Not After : Jul  8 14:15:26 2025 GMT
        Subject: CN=3A9FD41B0F1318C2382E4BA82E5FAA7534F122BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:5d:72:66:7b:2f:be:28:e0:77:17:59:5e:
                    e8:ba:7b:4a:56:66:eb:91:22:cb:c2:f0:c0:65:35:
                    a2:97:be:b0:f0:cb:6d:da:6b:26:3c:be:7e:30:bc:
                    f7:0b:72:08:d5:ca:6e:43:49:3f:2c:1f:c4:88:20:
                    26:fe:20:dc:bd:dd:60:e8:bc:a0:ba:c7:04:8f:80:
                    bb:67:07:85:41:74:47:8a:df:0d:0c:62:f6:9f:44:
                    83:d8:45:46:eb:04:e2:9e:64:f9:9a:31:f8:16:76:
                    80:05:63:db:87:21:5e:22:17:ce:36:f9:d7:55:f5:
                    ea:d1:4d:98:e9:03:3e:b5:96:02:28:03:1c:63:b6:
                    36:85:80:ef:22:fc:4d:7b:dc:2d:8a:75:ab:3d:9d:
                    88:4b:10:fd:ed:8c:56:ac:ac:4f:a0:76:94:b6:44:
                    b7:3e:49:b7:dc:ae:17:51:74:e5:5a:ea:2b:07:22:
                    61:bf:9c:f5:f4:9b:33:4f:14:87:52:89:8a:0f:f2:
                    00:0c:5c:0d:a3:c5:3c:ef:f1:78:fb:e7:e5:08:79:
                    06:09:39:b6:0d:27:ce:61:36:f7:c9:82:13:86:61:
                    b6:87:86:a8:5e:b5:87:22:b8:76:1b:44:fd:34:a0:
                    d2:08:4f:d1:56:03:58:2c:cb:6f:10:35:b8:a1:08:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9F:D4:1B:0F:13:18:C2:38:2E:4B:A8:2E:5F:AA:75:34:F1:22:BE
            X509v3 Authority Key Identifier:
                keyid:56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/5682495E51D353D705DB42C2671D958F655DB83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/323830343a343535633a3a2f33332d3333203d3e20323636393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:455c::/33

    Signature Algorithm: sha256WithRSAEncryption
         24:59:a5:bc:9c:99:a4:12:9a:9c:9a:d7:db:f5:23:b5:06:c4:
         d0:7d:26:b4:66:32:98:53:5f:75:19:33:1a:b1:aa:f3:af:e0:
         27:c6:38:ca:ce:9e:41:d7:b1:98:67:0e:8f:e4:ab:e5:ea:4b:
         89:75:32:66:3e:65:05:1d:24:0c:29:d3:9e:6c:9e:ba:f4:37:
         9c:2a:00:25:69:83:0b:e1:61:62:2b:45:c5:c3:5c:61:6b:af:
         f8:cf:97:59:b2:36:af:61:ae:8f:16:ce:d6:cc:a1:4c:53:1c:
         21:a0:e9:f6:e9:3f:4a:cd:41:70:53:ba:1a:0b:bb:8e:d1:48:
         45:95:5b:b4:0c:51:8b:05:c8:d9:f8:12:2c:56:59:ac:3b:c8:
         2a:91:08:60:83:ff:c0:4e:01:33:1d:e0:95:65:6f:a5:87:b0:
         61:ac:04:8e:4a:08:db:dd:5d:b4:2e:63:04:e5:b2:e1:c9:22:
         7f:53:f0:04:6c:1f:0f:7f:3a:74:3d:d4:8d:be:6d:73:61:e4:
         bd:0c:d7:aa:50:f8:b2:d5:3f:1f:f3:60:72:9e:67:b6:ca:db:
         4a:01:c5:5c:6a:94:ac:11:73:e6:ad:3b:0a:d6:fc:e6:04:d2:
         99:40:1f:a2:cd:4c:6c:54:0e:34:2c:81:f8:d2:74:44:37:bd:
         e0:d0:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----