Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/1/323830343a333835383a3a2f33322d3438203d3e20323636343731.roa
File:                     323830343a333835383a3a2f33322d3438203d3e20323636343731.roa (raw, json)
Hash identifier:          CGZpZ2UIXrHvaZ5t8d3MIRFJ4n+5vGS4PmFrrMbVnj0=
Subject key identifier:   E5:F1:A6:8D:68:23:7E:BB:4D:19:4C:43:5E:56:A9:76:3B:92:DE:F2
Certificate issuer:       /CN=6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C
Certificate serial:       60A3D5206CEF84C6F468FD25586E4E6335895EFA
Authority key identifier: 6B:5F:9A:6F:36:6F:99:E7:01:F3:9E:2E:BA:71:CA:D7:4C:DB:6D:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/1/323830343a333835383a3a2f33322d3438203d3e20323636343731.roa
Signing time:             Thu 26 Sep 2024 16:56:33 +0000
ROA not before:           Thu 26 Sep 2024 16:51:33 +0000
ROA not after:            Thu 25 Sep 2025 16:56:33 +0000
asID:                     266471
IP address blocks:        2804:3858::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a3:d5:20:6c:ef:84:c6:f4:68:fd:25:58:6e:4e:63:35:89:5e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C
        Validity
            Not Before: Sep 26 16:51:33 2024 GMT
            Not After : Sep 25 16:56:33 2025 GMT
        Subject: CN=E5F1A68D68237EBB4D194C435E56A9763B92DEF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:33:4e:41:cd:32:8b:41:6f:0c:55:99:91:3b:
                    77:a1:ae:0a:57:39:2b:c9:f8:0a:a7:a1:b1:08:3f:
                    36:99:a0:75:3b:29:8b:79:c5:53:d5:a8:8e:4b:a3:
                    e4:ff:af:b2:60:88:56:d8:c9:bf:27:6b:2e:06:be:
                    bc:53:06:ae:3a:a2:f9:4b:a8:4c:75:e1:16:33:06:
                    f0:52:dc:24:0b:77:90:58:a3:d1:98:4d:2c:2a:5f:
                    ea:0e:58:aa:5a:b7:f9:77:1d:ac:ed:e8:48:2a:ff:
                    fc:1b:dd:f8:9a:b5:12:2f:97:d1:c8:3a:e3:c1:11:
                    70:14:a1:ea:d7:0a:ba:ab:0d:57:f3:3e:06:28:5b:
                    94:37:ac:69:65:fe:26:c5:16:52:16:fa:10:10:3b:
                    e8:a8:2c:b4:5d:a9:63:0e:50:1e:5e:b4:0b:86:6b:
                    47:90:5a:90:72:64:cf:ec:bf:38:45:83:5a:e5:d4:
                    e3:11:da:64:8d:c6:74:17:03:ca:5d:d3:43:5a:82:
                    4d:70:90:93:48:79:02:8b:67:39:14:dc:cf:c4:3b:
                    b0:a0:6f:0b:e0:0d:dc:af:a8:b3:cf:03:d6:f4:4b:
                    db:eb:a0:d8:71:fd:23:a5:6b:c1:e9:df:70:d2:8c:
                    70:60:96:c9:f8:95:a8:89:2d:70:80:21:34:15:8a:
                    49:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F1:A6:8D:68:23:7E:BB:4D:19:4C:43:5E:56:A9:76:3B:92:DE:F2
            X509v3 Authority Key Identifier:
                keyid:6B:5F:9A:6F:36:6F:99:E7:01:F3:9E:2E:BA:71:CA:D7:4C:DB:6D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/1/6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/1/323830343a333835383a3a2f33322d3438203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3858::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:58:01:61:65:85:13:8e:4b:db:a8:89:f7:19:2e:05:4c:fc:
         d3:0a:52:42:37:d3:b8:98:68:df:70:63:7b:5c:f1:cb:f7:ea:
         9f:27:6e:ee:82:23:90:b8:a2:a8:5a:7b:98:10:66:bc:01:82:
         98:a8:c8:53:16:f9:ab:5b:da:98:e9:e7:9f:49:44:e9:92:2c:
         9a:84:a0:7f:31:99:e1:83:5e:54:59:b7:74:e5:4f:60:e1:0e:
         2c:10:3b:23:ca:83:ed:2b:2d:07:5b:cf:10:77:8a:e3:00:59:
         9d:59:f7:87:a5:82:b0:16:b5:bc:bd:7d:9e:07:aa:dc:fe:8d:
         8f:2b:02:a9:ff:7e:cd:a2:8c:ae:04:5b:56:92:4c:00:a4:06:
         e8:61:5c:12:3c:1c:12:f5:98:ef:5f:39:64:d9:f0:4d:61:2f:
         63:f3:56:8d:0a:10:97:a1:77:42:d0:57:06:04:f0:c3:ac:a8:
         ca:4f:7f:81:81:cc:2b:64:20:8f:8d:2d:3c:db:12:7b:b3:66:
         6c:6a:ea:93:f1:6c:2a:7a:13:e9:83:42:f8:58:f9:4d:da:88:
         d9:cf:01:f1:40:af:24:1e:36:d1:5c:78:10:8e:13:ba:05:11:
         19:d4:5d:2c:04:c7:25:8f:17:46:5b:65:97:0f:8d:18:5a:b9:
         63:e9:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----