Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/323830343a353330383a3a2f33322d3332203d3e20323638353539.roa
File:                     323830343a353330383a3a2f33322d3332203d3e20323638353539.roa (raw, json)
Hash identifier:          Aq5RxYHjubPFwup9Pzecluca9a+IsCUZcWdTwofSozI=
Subject key identifier:   06:7F:B0:C4:9A:8B:B6:E8:D5:65:62:17:34:E1:FF:48:9B:52:8B:04
Certificate issuer:       /CN=D952D52C9488DCC508F4E6D82D87F98C778EB09B
Certificate serial:       61311E16C05FFB7E03F076DB9EE0F3695EA7DA3E
Authority key identifier: D9:52:D5:2C:94:88:DC:C5:08:F4:E6:D8:2D:87:F9:8C:77:8E:B0:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D952D52C9488DCC508F4E6D82D87F98C778EB09B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/323830343a353330383a3a2f33322d3332203d3e20323638353539.roa
Signing time:             Fri 17 May 2024 19:32:29 +0000
ROA not before:           Fri 17 May 2024 19:27:29 +0000
ROA not after:            Fri 16 May 2025 19:32:29 +0000
asID:                     268559
IP address blocks:        2804:5308::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:31:1e:16:c0:5f:fb:7e:03:f0:76:db:9e:e0:f3:69:5e:a7:da:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D952D52C9488DCC508F4E6D82D87F98C778EB09B
        Validity
            Not Before: May 17 19:27:29 2024 GMT
            Not After : May 16 19:32:29 2025 GMT
        Subject: CN=067FB0C49A8BB6E8D565621734E1FF489B528B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:75:6a:65:6e:4f:a2:eb:2c:bc:27:71:26:
                    48:73:22:ee:b7:84:5c:49:d3:32:a0:fc:52:e8:26:
                    ca:a2:ac:c3:1e:75:2f:d3:ae:e9:60:29:27:3a:99:
                    7f:08:b0:2b:e3:1e:32:a0:7e:fb:bb:9a:ca:31:f2:
                    d0:ac:92:e3:59:4f:52:79:6a:ea:d3:81:1e:ec:7c:
                    4a:ca:ef:ed:d4:4a:12:f4:d9:1b:7a:87:86:4a:26:
                    dd:2e:3c:30:2a:e1:f6:70:f6:44:de:54:6f:fc:09:
                    d3:4b:6a:49:70:46:95:65:18:40:26:6f:af:4a:ce:
                    5b:f7:be:52:9c:ee:8f:24:0f:fa:ea:26:74:e8:4c:
                    3d:c5:ad:78:42:34:4b:d2:a8:ea:27:e5:83:7e:f6:
                    8b:da:84:ee:a1:c7:95:66:1d:92:dd:38:d8:d3:d4:
                    a2:84:0b:98:f8:cf:24:f8:1b:d6:47:ed:e3:9f:7e:
                    00:f4:0a:25:17:7b:3b:65:82:bb:ae:6a:c7:7f:e3:
                    74:3b:ea:ee:51:45:6d:5d:5e:c0:05:34:e6:92:de:
                    ea:34:65:d9:de:e8:4f:4c:4c:83:6f:ee:31:a5:f0:
                    b9:02:58:10:a6:1c:58:8b:66:54:d2:47:ee:1f:55:
                    f3:d6:76:e7:e8:1c:3a:dd:9b:ca:23:48:7a:24:4a:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7F:B0:C4:9A:8B:B6:E8:D5:65:62:17:34:E1:FF:48:9B:52:8B:04
            X509v3 Authority Key Identifier:
                keyid:D9:52:D5:2C:94:88:DC:C5:08:F4:E6:D8:2D:87:F9:8C:77:8E:B0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/D952D52C9488DCC508F4E6D82D87F98C778EB09B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D952D52C9488DCC508F4E6D82D87F98C778EB09B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/323830343a353330383a3a2f33322d3332203d3e20323638353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5308::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:1e:40:c2:f0:8e:48:61:64:3b:ca:25:60:22:c2:6c:e9:8d:
         36:70:a4:cb:db:bc:17:d8:7a:cf:c5:f2:70:11:03:cb:8f:4e:
         30:16:bd:38:f3:d6:40:7f:87:c6:ab:ce:25:20:fc:7f:da:4f:
         5a:67:04:f8:ab:50:10:23:ed:3a:e5:3d:4a:67:2a:7f:93:55:
         a3:81:9a:61:8a:fc:0d:00:ea:2c:d0:63:a1:ae:6e:72:a7:a1:
         81:f7:c4:ee:10:5f:29:4e:c7:26:65:34:10:b4:09:d6:18:7c:
         97:15:13:95:61:31:04:f5:b3:4c:7e:81:62:8b:d9:93:8c:8c:
         44:8c:34:f9:cf:bf:53:a5:e2:6b:f8:3e:e0:d9:d4:90:0f:6a:
         b9:11:97:6d:f9:cd:b0:7b:a3:16:a5:0c:76:1a:e0:56:01:26:
         65:e2:a6:6a:fd:c8:82:ca:f0:6f:3d:a0:da:a5:94:bc:6c:5d:
         87:4b:14:35:fb:fe:c2:d4:8a:23:e6:75:d1:87:a4:60:68:b1:
         de:ca:2c:1e:2e:40:b8:18:15:77:23:12:11:16:32:9f:a6:5c:
         e1:3d:fe:35:ca:92:be:bf:c1:6b:e7:7e:0b:e8:9b:70:fe:b3:
         a4:f7:18:68:43:90:5c:9c:f1:75:51:ca:47:ce:e9:45:81:8a:
         4d:cb:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----