Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/323830343a373736343a3a2f33322d3332203d3e20323731313735.roa
File:                     323830343a373736343a3a2f33322d3332203d3e20323731313735.roa (raw, json)
Hash identifier:          Rg0oljeVnYfheq4aJk3M1ryJHOGISBtpbzmH36qPknI=
Subject key identifier:   6E:E8:89:67:40:0C:21:FF:69:DA:E4:F7:B1:F0:C3:31:9E:04:F9:D8
Certificate issuer:       /CN=F784BDE64A499E22AF72A68DDB38EDB2FCF15519
Certificate serial:       71C37D9D00BC7572956B29F6FA5D11E14CBFC45F
Authority key identifier: F7:84:BD:E6:4A:49:9E:22:AF:72:A6:8D:DB:38:ED:B2:FC:F1:55:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F784BDE64A499E22AF72A68DDB38EDB2FCF15519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/323830343a373736343a3a2f33322d3332203d3e20323731313735.roa
Signing time:             Wed 17 Jul 2024 18:07:27 +0000
ROA not before:           Wed 17 Jul 2024 18:02:27 +0000
ROA not after:            Wed 16 Jul 2025 18:07:27 +0000
asID:                     271175
IP address blocks:        2804:7764::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c3:7d:9d:00:bc:75:72:95:6b:29:f6:fa:5d:11:e1:4c:bf:c4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F784BDE64A499E22AF72A68DDB38EDB2FCF15519
        Validity
            Not Before: Jul 17 18:02:27 2024 GMT
            Not After : Jul 16 18:07:27 2025 GMT
        Subject: CN=6EE88967400C21FF69DAE4F7B1F0C3319E04F9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:64:fe:46:76:66:a6:d9:11:c1:42:90:96:7e:
                    3b:3f:9b:e5:4e:ef:b6:33:25:fc:30:ea:26:5a:14:
                    7e:9a:41:c6:bb:19:60:1e:b2:b0:58:85:95:9b:8b:
                    8f:d8:d3:65:cb:6f:ce:77:33:2c:4c:48:5f:f0:9c:
                    70:67:ac:ff:59:84:9d:24:2a:c1:2a:39:5f:18:58:
                    46:3d:db:20:88:f4:1f:a4:9d:28:c1:d3:77:9b:34:
                    97:b7:9d:31:d9:f8:ce:0d:a6:ba:e1:68:ba:02:82:
                    78:04:f5:b7:bc:51:5d:28:76:32:90:57:33:75:1f:
                    c2:6a:f0:82:e3:66:78:8b:52:62:56:b0:4f:03:05:
                    29:a9:c1:8c:3e:01:33:7d:98:73:22:5f:46:4f:b8:
                    5f:7d:89:bd:e8:45:4b:27:37:6e:35:8d:58:e5:29:
                    17:68:39:88:1d:26:16:76:1a:40:01:c2:a9:49:44:
                    0a:46:bb:4e:68:2c:64:e1:e7:d0:9e:b2:bb:f2:c8:
                    83:82:45:61:9b:2f:7e:63:f3:86:ee:90:ed:1a:67:
                    7f:a4:d4:67:a4:a7:81:6e:6b:db:65:9e:dd:85:93:
                    45:bc:7d:c8:3e:9a:3c:c4:a8:bf:80:2a:1a:ed:cd:
                    f4:bc:f8:a7:84:50:31:e9:64:cd:9f:69:f6:6a:13:
                    fc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E8:89:67:40:0C:21:FF:69:DA:E4:F7:B1:F0:C3:31:9E:04:F9:D8
            X509v3 Authority Key Identifier:
                keyid:F7:84:BD:E6:4A:49:9E:22:AF:72:A6:8D:DB:38:ED:B2:FC:F1:55:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/F784BDE64A499E22AF72A68DDB38EDB2FCF15519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F784BDE64A499E22AF72A68DDB38EDB2FCF15519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/323830343a373736343a3a2f33322d3332203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7764::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:11:c5:6d:5d:56:7b:23:30:cf:a5:21:1a:0d:bd:35:66:8a:
         d2:47:ba:dd:15:88:ee:1f:63:7e:5b:2a:34:1c:fd:43:2f:61:
         56:23:c9:e9:ad:fd:d6:9b:07:31:a6:5d:ed:68:e9:12:57:eb:
         0e:80:8d:4a:27:cc:7b:63:d1:24:a4:47:48:9b:10:e0:ad:88:
         2e:2c:6e:2d:3d:9a:e2:bc:0d:29:7f:04:1e:91:6c:53:91:b5:
         18:59:d8:e4:1f:98:76:a5:54:06:d5:ee:12:4b:c3:af:c1:13:
         78:f3:f9:c7:b9:a9:a9:9a:d1:c6:07:55:f1:00:76:8b:f7:ac:
         1a:44:23:18:3f:0b:07:b7:79:93:ff:24:ac:d8:dd:e8:dc:7f:
         7a:77:b2:7f:73:ea:00:cd:3d:9a:7c:df:08:05:4c:dd:98:a4:
         60:fe:a4:0d:63:98:20:ac:b5:b5:53:4d:2e:bc:ba:75:bf:d7:
         58:1e:ce:cf:bf:3e:74:a7:47:cc:e5:42:ce:4d:41:0a:fc:4c:
         89:8d:4f:cd:b6:a9:80:a2:f3:cc:b0:5e:2b:1d:a7:1c:40:15:
         d0:19:21:bd:2b:a6:be:4a:da:b9:ff:95:69:73:1a:7e:30:ab:
         33:68:60:97:8a:94:a4:6d:d3:cc:4f:d1:0c:b6:78:2b:7d:87:
         8d:c5:c8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----