Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/323830343a326464343a3a2f33322d3634203d3e20323635333036.roa
File:                     323830343a326464343a3a2f33322d3634203d3e20323635333036.roa (raw, json)
Hash identifier:          krYaouxjFQhxEIIGRcWsO/t/Uw+afnH+8nW5y/7IOGo=
Subject key identifier:   56:59:89:11:59:76:22:E9:E3:03:98:8A:B6:73:3D:94:70:60:BB:E0
Certificate issuer:       /CN=197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE
Certificate serial:       75C36CE62F511A246B5246A6A2172D7D948EF2
Authority key identifier: 19:7B:E1:FE:7B:FF:56:11:CC:4F:71:29:CE:2D:A3:B3:84:8C:3C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/323830343a326464343a3a2f33322d3634203d3e20323635333036.roa
Signing time:             Mon 07 Oct 2024 17:02:51 +0000
ROA not before:           Mon 07 Oct 2024 16:57:51 +0000
ROA not after:            Mon 06 Oct 2025 17:02:51 +0000
asID:                     265306
IP address blocks:        2804:2dd4::/32 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c3:6c:e6:2f:51:1a:24:6b:52:46:a6:a2:17:2d:7d:94:8e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE
        Validity
            Not Before: Oct  7 16:57:51 2024 GMT
            Not After : Oct  6 17:02:51 2025 GMT
        Subject: CN=56598911597622E9E303988AB6733D947060BBE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:5f:0a:ce:a1:5e:53:90:3c:7f:e3:cc:5f:
                    62:d6:5b:9c:1f:46:17:ce:63:b7:69:49:e0:d6:2c:
                    2a:2f:27:fb:80:ef:36:3d:4f:4b:73:79:aa:8a:79:
                    25:d7:e0:ec:91:65:88:84:7e:78:f1:40:a6:6f:2d:
                    ce:cd:6d:8e:4a:06:88:47:45:d3:b1:16:54:98:f8:
                    ef:d4:98:48:31:3b:2a:27:09:16:74:75:40:bb:a2:
                    dd:cc:7b:7f:de:69:a3:e9:62:bc:f0:61:be:13:f0:
                    b9:c6:64:0e:f9:6f:13:fb:3c:a9:7a:7f:b0:b4:8b:
                    86:b7:0f:56:62:ed:ad:89:63:ad:e1:9b:dd:87:8b:
                    4f:29:93:ff:8f:84:10:36:a9:18:85:cb:4e:a4:27:
                    08:38:6f:f7:d4:bf:7f:f7:b9:8d:7e:eb:39:ad:d4:
                    27:80:34:7b:f4:0a:ca:18:bd:93:46:8f:ba:f0:96:
                    44:d4:2a:7b:02:75:67:0d:92:ad:8a:99:d0:11:31:
                    f1:2c:87:ed:aa:6e:8f:6e:0c:e6:e5:a7:f0:e6:e7:
                    48:df:50:b6:ee:7b:ae:b2:de:63:fe:8a:05:1e:24:
                    d8:71:8d:3a:ec:7a:97:38:5a:ac:ac:27:a5:77:e5:
                    2e:af:ba:1d:f5:32:ec:6e:97:c0:15:4a:16:8b:91:
                    07:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:59:89:11:59:76:22:E9:E3:03:98:8A:B6:73:3D:94:70:60:BB:E0
            X509v3 Authority Key Identifier:
                keyid:19:7B:E1:FE:7B:FF:56:11:CC:4F:71:29:CE:2D:A3:B3:84:8C:3C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/323830343a326464343a3a2f33322d3634203d3e20323635333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:68:27:c0:2d:54:21:35:ea:ef:92:52:a2:97:eb:6b:01:38:
         02:1c:5f:4f:c7:f1:63:18:d3:bd:d9:2f:a3:5f:c6:a7:39:61:
         32:c5:5f:6f:25:c9:14:aa:73:01:e7:6b:bd:db:a6:cd:0d:5f:
         77:fc:58:52:8f:5e:28:3a:2a:5b:58:ce:75:03:81:f4:c3:2e:
         7b:de:38:be:7a:4c:13:54:01:0a:23:d5:b1:ff:5a:95:03:c2:
         f9:6f:9b:9b:20:44:6e:f1:66:58:e6:c9:13:4a:4f:19:17:bc:
         2e:0f:6a:0a:7a:8c:6d:a8:d7:29:4c:74:7c:ab:62:a6:b7:47:
         ff:ee:82:3b:45:15:d8:7e:2c:a6:18:7d:c4:d8:41:11:13:6e:
         b6:cf:c6:b8:6e:a9:28:88:42:11:ae:31:a1:91:61:04:2d:c7:
         d2:5d:0e:ad:40:a7:95:a8:60:fb:a9:b6:87:66:81:07:40:89:
         c0:6d:6a:79:6c:e8:97:8e:23:85:50:35:96:d1:9d:90:0b:14:
         91:55:5b:1f:e9:60:a8:c2:78:e1:43:32:85:08:2d:84:33:ad:
         20:3b:50:82:c8:3a:fc:8e:50:a8:d0:e2:8a:3a:9f:ba:f5:4a:
         6d:2f:5f:95:0f:02:d7:8b:33:e0:98:26:bf:0a:74:79:84:e2:
         ab:36:63:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----