Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d3332203d3e20323730383738.roa
File:                     323830343a373264343a3a2f33322d3332203d3e20323730383738.roa (raw, json)
Hash identifier:          pfSxJPRZVpI5IHaxHI6ltwlIbvjMDUs6UOEz3NPbCZ4=
Subject key identifier:   2F:C2:63:A2:19:FB:E8:AA:B4:0C:B9:30:2E:25:DD:CC:A5:09:E3:66
Certificate issuer:       /CN=3D0D671BE0C71458EFE3858E85E8A94370EF97F0
Certificate serial:       14EB669C1B64F9BEA9757910A1955FB10D935103
Authority key identifier: 3D:0D:67:1B:E0:C7:14:58:EF:E3:85:8E:85:E8:A9:43:70:EF:97:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D0D671BE0C71458EFE3858E85E8A94370EF97F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d3332203d3e20323730383738.roa
Signing time:             Tue 06 Aug 2024 19:55:02 +0000
ROA not before:           Tue 06 Aug 2024 19:50:02 +0000
ROA not after:            Tue 05 Aug 2025 19:55:02 +0000
asID:                     270878
IP address blocks:        2804:72d4::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:eb:66:9c:1b:64:f9:be:a9:75:79:10:a1:95:5f:b1:0d:93:51:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D0D671BE0C71458EFE3858E85E8A94370EF97F0
        Validity
            Not Before: Aug  6 19:50:02 2024 GMT
            Not After : Aug  5 19:55:02 2025 GMT
        Subject: CN=2FC263A219FBE8AAB40CB9302E25DDCCA509E366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:17:00:d8:55:bf:f7:50:3b:90:97:d5:27:
                    d6:99:ce:ff:aa:d8:c4:7c:78:98:29:a6:dd:06:70:
                    48:9d:de:c0:c9:75:6a:04:ab:33:a1:9c:7e:3f:02:
                    a4:d0:c1:df:4b:64:0c:cc:29:0d:b3:1f:85:e9:39:
                    da:1b:8d:22:0d:f2:6f:9e:5c:ff:a5:30:62:d4:33:
                    e5:30:4f:34:79:3d:c0:7f:66:b9:39:ff:28:eb:3a:
                    0f:6b:b9:58:c8:c0:ae:54:f5:13:88:fe:72:37:04:
                    0c:cb:13:45:89:06:84:ae:6b:64:ae:a3:d5:48:8e:
                    81:56:e0:fe:6f:0f:e2:6b:10:41:44:e4:6b:a1:0a:
                    48:ea:0f:4d:81:a6:11:db:8b:3b:b7:e3:49:85:7d:
                    bc:66:f8:ea:8e:48:e2:ad:fb:35:62:41:8c:e4:c0:
                    9d:89:9e:aa:4e:36:97:cc:77:e6:8f:88:95:dc:02:
                    e9:04:24:48:dc:11:44:18:12:87:f6:85:3d:72:60:
                    c3:64:92:f0:e3:3c:ab:54:9c:31:36:fe:8e:12:0a:
                    4c:f0:8a:b8:87:c5:1a:f1:ae:c4:01:51:d2:fb:c5:
                    87:17:37:79:1e:67:55:a2:18:05:da:82:7f:15:07:
                    ed:d3:22:a3:fb:c5:95:11:e9:d0:ab:a3:08:a4:89:
                    3c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C2:63:A2:19:FB:E8:AA:B4:0C:B9:30:2E:25:DD:CC:A5:09:E3:66
            X509v3 Authority Key Identifier:
                keyid:3D:0D:67:1B:E0:C7:14:58:EF:E3:85:8E:85:E8:A9:43:70:EF:97:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3D0D671BE0C71458EFE3858E85E8A94370EF97F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D0D671BE0C71458EFE3858E85E8A94370EF97F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d3332203d3e20323730383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:cc:f3:a5:db:91:c0:93:d7:1b:8a:b6:e5:80:7f:5d:dd:dd:
         ee:8d:09:3c:92:82:f8:ca:df:ea:e5:6e:2b:95:ff:b7:06:74:
         33:17:64:81:10:e0:e5:b4:b9:b9:5e:ef:23:c0:28:b3:f8:f0:
         de:aa:ab:d2:17:9f:6c:94:b2:72:46:3c:06:19:68:c0:47:c3:
         aa:56:2e:fd:39:7e:39:9f:e1:c0:b1:e0:cd:37:57:e8:f4:fd:
         14:d2:c2:c1:10:b7:48:d0:a5:fe:37:56:df:78:e2:ec:43:4f:
         49:02:2d:bf:99:66:73:d8:04:8e:8d:d3:69:f3:53:a2:49:ef:
         80:c4:4c:93:ba:f3:30:eb:98:62:6f:c3:0e:bd:fc:9d:98:ab:
         15:95:d7:fd:e1:bf:32:54:78:56:6b:6c:d5:f7:23:3c:87:c5:
         b8:35:72:b2:bc:13:9b:d0:96:0b:fa:11:d0:b2:cf:a6:a5:46:
         d9:3d:56:b8:b6:38:e3:a3:a1:55:5e:3c:5f:db:6c:28:b2:ef:
         6f:05:c2:fe:0b:f6:9b:56:d5:10:86:bf:50:b2:9f:50:b6:ae:
         d5:a9:5e:bc:f4:dc:90:3c:6b:65:88:ea:4a:c8:a6:ec:b7:63:
         83:21:3a:03:7b:77:29:fc:a0:fc:f2:ea:d0:3f:51:9d:71:f4:
         22:62:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----