Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/1/323830343a376438343a3a2f33322d3332203d3e20323731353636.roa
File:                     323830343a376438343a3a2f33322d3332203d3e20323731353636.roa (raw, json)
Hash identifier:          fyr+m82h4Dxye8P7wpMVHwS6f4lOnU1h3V9LRznooxY=
Subject key identifier:   19:70:E9:97:0D:4A:81:71:A9:79:8B:C4:89:DD:72:3D:FF:1E:F7:63
Certificate issuer:       /CN=A4126E577C99853906E6B0B4457F69D365EE7BA3
Certificate serial:       567E1CDCF5E3B49B1AAC76DCD2D814460C0684E5
Authority key identifier: A4:12:6E:57:7C:99:85:39:06:E6:B0:B4:45:7F:69:D3:65:EE:7B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4126E577C99853906E6B0B4457F69D365EE7BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/1/323830343a376438343a3a2f33322d3332203d3e20323731353636.roa
Signing time:             Thu 04 Apr 2024 09:00:45 +0000
ROA not before:           Thu 04 Apr 2024 08:55:45 +0000
ROA not after:            Thu 03 Apr 2025 09:00:45 +0000
asID:                     271566
IP address blocks:        2804:7d84::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7e:1c:dc:f5:e3:b4:9b:1a:ac:76:dc:d2:d8:14:46:0c:06:84:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4126E577C99853906E6B0B4457F69D365EE7BA3
        Validity
            Not Before: Apr  4 08:55:45 2024 GMT
            Not After : Apr  3 09:00:45 2025 GMT
        Subject: CN=1970E9970D4A8171A9798BC489DD723DFF1EF763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:32:56:0e:d0:5f:3e:bd:dd:2f:57:c4:cf:
                    f6:c9:d6:80:e7:0c:56:00:21:cd:bd:62:39:ff:8b:
                    3b:14:34:c2:f8:77:20:e1:49:ff:ee:3a:fb:c3:2f:
                    c5:84:38:70:88:9d:52:7e:69:85:49:c4:45:a8:d0:
                    6a:9f:7b:c5:f4:8a:9b:8e:01:2f:43:d2:0e:6c:8c:
                    1c:38:88:49:66:a2:0a:7f:a3:68:47:5f:75:4f:9b:
                    bc:61:9c:9e:25:de:c1:3b:42:2c:a1:76:68:8e:08:
                    e1:f6:bf:c3:af:5a:fe:82:b4:56:bd:6c:4d:2b:8b:
                    8e:a2:59:af:e1:00:cf:58:7e:e5:ae:05:7a:af:06:
                    7f:9a:be:c9:c8:b1:8f:2d:04:76:11:80:97:65:7d:
                    8b:14:69:26:c7:85:5f:96:8b:10:15:eb:fe:c7:63:
                    51:56:03:7d:c1:65:22:ae:be:96:68:01:6e:3b:ce:
                    05:09:ac:f2:5c:1a:5b:3c:48:29:96:b5:12:85:5e:
                    29:a5:56:6e:29:7b:ca:38:9b:59:2b:d1:a3:33:dc:
                    ae:60:63:f5:87:c2:31:ae:f7:ff:62:a9:5c:9d:54:
                    ef:88:1e:c3:81:e6:f5:ae:7c:5e:d5:0b:d7:81:a9:
                    f7:8a:f8:7d:37:ca:e7:cb:97:97:a1:cc:94:c3:6f:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:70:E9:97:0D:4A:81:71:A9:79:8B:C4:89:DD:72:3D:FF:1E:F7:63
            X509v3 Authority Key Identifier:
                keyid:A4:12:6E:57:7C:99:85:39:06:E6:B0:B4:45:7F:69:D3:65:EE:7B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/1/A4126E577C99853906E6B0B4457F69D365EE7BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4126E577C99853906E6B0B4457F69D365EE7BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/1/323830343a376438343a3a2f33322d3332203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d84::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:17:07:a2:f1:60:07:fd:d6:3d:0d:a8:ae:66:3a:a0:7b:1c:
         58:79:5b:a3:86:cd:61:1a:dd:9e:ef:96:6a:7f:06:69:b8:f3:
         b0:79:19:36:26:aa:8c:a9:7d:07:73:a4:fb:11:ba:ef:e1:0d:
         47:d3:ca:67:b0:4c:10:83:de:d8:1f:f6:d2:d2:3b:b2:c6:1d:
         54:3e:4c:c1:e8:49:4f:d8:25:ef:25:53:f7:09:78:de:ec:b7:
         1a:8c:28:26:86:19:79:0a:25:6e:fa:bc:97:0b:de:c6:54:00:
         4a:be:ce:45:60:8f:85:ed:27:24:6b:91:32:ff:5c:b1:82:0c:
         62:c7:2f:3d:a3:ea:97:08:7d:e3:89:c0:91:2d:1a:0f:27:b7:
         a6:7f:c9:65:93:f7:db:6f:81:6b:1a:7a:e1:98:b7:7e:b8:9b:
         08:a3:d6:0e:a7:c8:83:eb:f8:d9:5f:37:a3:e3:a1:2a:08:27:
         96:1a:91:5e:7a:9a:ed:f5:cd:03:cb:fd:5b:89:ce:c5:58:39:
         76:f0:97:b9:3a:3d:85:61:f0:be:7a:da:30:d2:09:08:d6:05:
         44:12:64:67:c1:09:28:8a:3a:54:20:60:01:9d:26:7e:b3:82:
         0c:83:82:e5:ef:46:4a:f7:78:13:0d:8c:91:1f:a4:0f:cc:c8:
         95:11:13:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----