Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33322d3332203d3e20323635343834.roa
File:                     323830343a333464383a3a2f33322d3332203d3e20323635343834.roa (raw, json)
Hash identifier:          oO2rSfbbHvXtfcMkNEmZNO8z0RFYTyvjPSO3RvwF9Fw=
Subject key identifier:   8C:35:F5:5C:1A:03:38:4B:42:3C:66:93:51:DB:A8:54:B8:E7:C8:EA
Certificate issuer:       /CN=282867FDA1906735DA18D9838B50748AC97E1655
Certificate serial:       46D656D52E3E1D9E4194C24818842C34DFBC0B88
Authority key identifier: 28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33322d3332203d3e20323635343834.roa
Signing time:             Tue 16 Apr 2024 18:44:59 +0000
ROA not before:           Tue 16 Apr 2024 18:39:59 +0000
ROA not after:            Tue 15 Apr 2025 18:44:59 +0000
asID:                     265484
IP address blocks:        2804:34d8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d6:56:d5:2e:3e:1d:9e:41:94:c2:48:18:84:2c:34:df:bc:0b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282867FDA1906735DA18D9838B50748AC97E1655
        Validity
            Not Before: Apr 16 18:39:59 2024 GMT
            Not After : Apr 15 18:44:59 2025 GMT
        Subject: CN=8C35F55C1A03384B423C669351DBA854B8E7C8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:38:ce:ea:95:2d:38:f9:48:ea:c0:fd:2e:06:
                    6c:c8:b6:dc:8f:78:73:77:39:67:39:2c:f6:37:6c:
                    1e:22:3d:b6:0b:d2:00:cc:42:45:33:b3:a9:cc:95:
                    1d:2d:2d:ca:fb:80:6d:25:d2:72:ee:b3:aa:6e:86:
                    69:ff:a5:f8:f0:5b:55:06:c0:46:f4:8a:9c:19:e6:
                    85:41:5d:32:ac:1b:cb:83:06:5b:9c:8e:4c:c3:60:
                    04:8e:10:5f:95:12:e8:8b:f7:3b:11:b8:20:8a:e1:
                    e1:7c:9a:aa:5c:35:4d:9e:99:5a:86:a6:2e:99:51:
                    5b:fa:fe:33:71:1b:ea:fb:13:de:31:77:4a:e5:5d:
                    2e:69:4d:e3:c4:d6:80:9f:67:f9:ad:2e:ef:3a:55:
                    60:a8:27:00:0c:f2:f1:1d:53:2c:b2:00:11:50:58:
                    ab:b8:3a:01:ff:6a:90:fd:31:bb:8e:04:d8:d8:5a:
                    a0:b3:fc:b9:0b:4f:de:ed:29:2c:dd:50:02:a8:7b:
                    28:32:d3:2f:f4:f6:53:a2:10:cd:e5:df:da:18:f9:
                    f4:7c:16:31:b6:1c:7a:9e:27:60:f9:c7:4b:33:54:
                    b4:fb:98:85:53:68:ae:8b:27:0b:cf:12:e0:99:ab:
                    f0:9f:9e:2e:07:ad:62:39:b4:77:73:a1:de:f6:03:
                    3e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:F5:5C:1A:03:38:4B:42:3C:66:93:51:DB:A8:54:B8:E7:C8:EA
            X509v3 Authority Key Identifier:
                keyid:28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33322d3332203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:a5:73:8f:a9:57:57:27:64:27:02:0c:68:24:eb:3d:b4:58:
         9a:99:b0:9b:34:a0:b2:0a:d2:cb:d4:83:b7:0b:5d:09:a0:c2:
         8c:23:79:50:18:4d:5a:69:d4:41:98:07:6d:e9:8d:55:28:35:
         7e:8c:0a:95:19:c1:b7:cf:5d:06:01:f7:95:02:b1:c1:7b:2f:
         9d:38:5c:cd:6e:e8:9d:39:13:90:63:3a:e5:8d:24:39:2a:fb:
         68:a8:5a:14:4f:69:ae:a5:cb:1e:1f:dd:07:e6:85:be:ab:6b:
         2f:5d:7a:1e:67:b0:70:f1:cc:44:9e:64:64:61:48:c1:b3:51:
         2f:e5:d4:c4:3f:87:c2:b3:dc:9e:5e:ec:06:3e:cf:d8:a1:df:
         37:16:e0:28:d3:83:df:d4:fe:7a:2f:ea:68:d9:b6:00:14:04:
         21:eb:3e:d6:44:08:97:bc:14:5a:61:a7:f7:19:39:75:fd:d7:
         99:27:f1:07:f4:df:91:c7:2c:b8:2c:a6:aa:ca:6e:72:67:7a:
         bb:f4:a8:0e:30:bd:35:9c:6a:17:3e:8b:ef:35:29:a2:80:c0:
         21:4a:6b:6b:8e:c9:f0:05:02:3e:e1:7e:e0:4d:61:45:97:0d:
         49:1a:3a:51:7e:0f:12:aa:be:6d:07:bc:aa:a4:74:f4:01:d3:
         2f:62:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----