Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/323830343a343331383a3a2f33322d3332203d3e20323637353438.roa
File:                     323830343a343331383a3a2f33322d3332203d3e20323637353438.roa (raw, json)
Hash identifier:          Mzl9DQhJL3Zwcta5GMopkKQyNlkB9dDTJkMXFbT4FTg=
Subject key identifier:   61:1A:0C:07:78:39:DE:CB:2D:37:79:29:83:76:CA:81:45:70:34:87
Certificate issuer:       /CN=A5A45100954B23E22F367B3D28B2C4F896BEB17A
Certificate serial:       3EC42A6010018DAEF1560822AAECCB8D58B83973
Authority key identifier: A5:A4:51:00:95:4B:23:E2:2F:36:7B:3D:28:B2:C4:F8:96:BE:B1:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/323830343a343331383a3a2f33322d3332203d3e20323637353438.roa
Signing time:             Wed 03 Apr 2024 21:35:08 +0000
ROA not before:           Wed 03 Apr 2024 21:30:08 +0000
ROA not after:            Wed 02 Apr 2025 21:35:08 +0000
asID:                     267548
IP address blocks:        2804:4318::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c4:2a:60:10:01:8d:ae:f1:56:08:22:aa:ec:cb:8d:58:b8:39:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A45100954B23E22F367B3D28B2C4F896BEB17A
        Validity
            Not Before: Apr  3 21:30:08 2024 GMT
            Not After : Apr  2 21:35:08 2025 GMT
        Subject: CN=611A0C077839DECB2D3779298376CA8145703487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:80:7a:59:22:2a:03:71:74:2d:35:b5:8d:
                    4a:b7:74:d2:a2:3d:39:a9:04:29:d3:32:4c:53:cf:
                    5a:e4:39:d0:bd:05:52:91:c4:1d:ba:6b:8e:5c:df:
                    53:86:f1:8d:4f:80:8a:17:e2:b6:21:92:37:37:19:
                    94:4f:9d:57:d8:53:3b:ee:42:c8:06:4e:44:59:be:
                    8b:e0:11:c7:1b:e2:11:1b:59:c6:55:b1:98:dd:4f:
                    75:df:ad:26:18:d5:e4:79:0d:d2:27:ab:f6:5e:97:
                    a3:da:41:90:d1:72:25:ca:a0:f3:54:e9:6d:97:c6:
                    5e:73:ce:60:7c:c6:07:ab:bd:d5:7a:3a:74:8f:c7:
                    b8:a3:f1:34:15:36:81:76:9b:fb:14:1e:8e:a7:56:
                    fb:7d:2c:fc:cd:c3:f2:42:99:f5:20:24:3e:1d:25:
                    5c:f4:70:c6:f7:cb:43:a1:26:07:92:7b:30:a0:4f:
                    de:ae:3e:01:77:74:5d:74:a6:3b:ac:e3:65:f5:e7:
                    b1:f8:84:5f:f1:d2:07:5b:e6:1d:f2:93:0c:3f:a0:
                    74:e5:da:28:9f:27:07:bc:aa:24:42:e1:dd:51:6f:
                    1f:39:6b:3a:05:01:23:d6:f2:84:6a:12:74:d4:19:
                    8e:f5:f8:9b:96:62:cd:41:41:96:bd:65:58:45:0d:
                    6c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1A:0C:07:78:39:DE:CB:2D:37:79:29:83:76:CA:81:45:70:34:87
            X509v3 Authority Key Identifier:
                keyid:A5:A4:51:00:95:4B:23:E2:2F:36:7B:3D:28:B2:C4:F8:96:BE:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/323830343a343331383a3a2f33322d3332203d3e20323637353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4318::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:bd:f1:76:c5:c9:a6:19:1e:76:b8:8e:0e:fe:21:3b:46:2b:
         47:43:c6:c1:f1:13:61:62:0f:91:26:7b:14:bb:1d:52:ec:67:
         d6:b9:5c:25:00:70:ac:9c:e5:a4:32:67:9f:a4:ef:80:da:43:
         3e:50:86:d5:d4:c0:22:9c:dd:20:c6:d5:12:bf:4e:b7:b8:74:
         8d:23:47:6f:09:65:85:1e:04:17:d9:39:db:e4:8d:32:ac:5e:
         03:e7:d5:73:b6:59:e5:80:c6:14:03:fb:01:5a:ee:e4:f1:13:
         8b:44:2f:90:92:94:c8:56:76:cd:00:82:81:7b:49:76:25:23:
         3e:ad:b0:63:40:c5:0c:85:c0:c3:98:49:8d:e8:f6:70:3f:35:
         74:16:8c:4a:e5:59:a9:f8:5c:15:f8:d4:e2:c0:f4:98:0d:93:
         65:d8:fc:2c:26:33:28:7b:5c:03:a7:39:5a:65:04:8c:8e:92:
         d7:aa:fd:ff:65:b6:40:5a:e5:53:3e:b3:b2:84:1b:77:eb:5c:
         95:68:02:e7:2e:52:f9:35:23:4c:03:5e:ca:48:37:25:4c:ca:
         6a:c1:f8:49:e7:f5:c6:df:17:5e:29:e9:06:48:ce:d6:ea:21:
         1b:52:3c:60:41:67:30:50:7f:82:5a:92:27:a1:04:5a:de:d5:
         c1:58:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----