Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/323830343a316339383a3a2f33322d3438203d3e203631363634.roa
File:                     323830343a316339383a3a2f33322d3438203d3e203631363634.roa (raw, json)
Hash identifier:          x0+p6KIVjnoS3RsgDWGCIyPvmNx0EyswlttR+7mjjAM=
Subject key identifier:   61:A0:A0:F1:8F:BD:2B:2F:72:B0:EB:4D:A0:0A:49:DC:10:6A:AE:2C
Certificate issuer:       /CN=9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC
Certificate serial:       60FD5608C9F69D6A04AB8ADED3DA8CE4C30C6AE2
Authority key identifier: 9F:B9:DC:7D:DD:18:C6:39:56:30:6C:BC:33:A5:1C:DE:FF:D2:88:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/323830343a316339383a3a2f33322d3438203d3e203631363634.roa
Signing time:             Fri 11 Oct 2024 16:37:17 +0000
ROA not before:           Fri 11 Oct 2024 16:32:17 +0000
ROA not after:            Fri 10 Oct 2025 16:37:17 +0000
asID:                     61664
IP address blocks:        2804:1c98::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fd:56:08:c9:f6:9d:6a:04:ab:8a:de:d3:da:8c:e4:c3:0c:6a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC
        Validity
            Not Before: Oct 11 16:32:17 2024 GMT
            Not After : Oct 10 16:37:17 2025 GMT
        Subject: CN=61A0A0F18FBD2B2F72B0EB4DA00A49DC106AAE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:a8:2c:50:f1:75:11:f5:cd:e3:f8:74:6e:
                    73:d4:b2:d7:dc:c6:71:77:2c:33:09:92:e6:a7:11:
                    65:b7:6c:ff:94:aa:0b:95:ce:b1:a8:f0:49:aa:9a:
                    95:0c:5e:ad:e8:1d:43:b3:d7:5b:e4:ff:a8:d2:5a:
                    7a:be:4d:b9:1e:db:3c:cd:29:ec:4e:ab:99:33:b1:
                    1b:9d:7a:fc:a8:62:71:33:b2:f8:47:7a:bf:c2:d1:
                    e0:9e:d4:71:13:9e:50:14:88:db:c0:3c:0d:4d:82:
                    44:e6:ec:64:af:c6:48:8c:ef:0d:d0:73:b9:4d:8a:
                    0a:a8:39:f1:a4:4a:cf:b1:0a:19:07:0d:ec:58:8e:
                    6a:0c:32:8a:a5:a5:96:e6:98:e2:df:a2:6e:c5:44:
                    9d:25:8e:e6:8d:18:6c:b6:ce:9b:83:86:d3:c9:ad:
                    7d:d6:9e:4e:d0:3f:bb:59:d7:0c:94:53:70:cb:fd:
                    98:2b:9e:ea:ee:74:5f:22:e1:fa:f0:5f:26:e6:de:
                    ce:cd:ed:60:84:05:e1:71:5b:20:78:0e:27:c8:55:
                    fb:b2:19:69:61:44:0a:64:a1:29:81:7b:13:a2:02:
                    08:69:55:39:62:57:27:2e:df:1a:98:cf:ae:c2:7b:
                    2a:36:29:11:47:61:fe:9c:00:4f:84:9b:be:64:86:
                    3b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A0:A0:F1:8F:BD:2B:2F:72:B0:EB:4D:A0:0A:49:DC:10:6A:AE:2C
            X509v3 Authority Key Identifier:
                keyid:9F:B9:DC:7D:DD:18:C6:39:56:30:6C:BC:33:A5:1C:DE:FF:D2:88:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/323830343a316339383a3a2f33322d3438203d3e203631363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c98::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:6c:3e:f5:2b:d8:5a:6e:c7:06:14:a3:d0:40:ba:99:1c:95:
         33:4c:5f:88:67:06:eb:20:2d:5b:dc:a3:11:a9:fd:8c:94:5e:
         c9:58:9b:be:8e:1e:35:9a:ce:04:c6:40:55:36:c6:a6:0e:64:
         bc:a8:3e:29:3f:6b:93:bb:de:2c:76:4c:25:53:5a:27:40:2c:
         8b:3e:9d:ef:7c:32:dd:1d:f6:5c:76:74:8a:bc:69:d9:31:73:
         93:45:3a:cc:68:d0:c4:e0:bf:0f:69:0d:bf:ac:22:4b:52:95:
         3f:9a:f3:f7:a9:21:94:ae:9f:0a:38:a5:eb:9d:26:38:45:12:
         5a:1e:68:b4:bd:ee:7f:9e:1e:6c:92:b9:b5:3e:24:e4:65:c0:
         3d:88:60:e2:4f:54:4f:39:99:4e:b0:0d:66:55:7e:f4:f6:99:
         3f:9d:02:aa:b6:8a:3d:2c:53:83:7d:9d:8f:2a:1e:1f:8a:47:
         59:62:9d:35:8d:46:dd:f0:9d:0e:c0:94:ea:94:3b:88:ef:dc:
         34:76:37:5e:e0:ba:c9:bf:99:e4:69:f2:26:90:7e:81:01:dd:
         d5:6d:db:2c:5a:1a:27:fe:17:33:bc:e0:bb:5e:67:bc:93:79:
         7d:c1:ac:3e:6a:ff:60:8a:fa:21:60:8d:e2:ad:74:3e:d3:bc:
         f4:10:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----