Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a343030303a3a2f33342d3334203d3e203631373337.roa
File:                     323830343a316239633a343030303a3a2f33342d3334203d3e203631373337.roa (raw, json)
Hash identifier:          E+iEsZM37n0etVZJFBvswiEqyblHr0wJlvCy956/iio=
Subject key identifier:   31:15:D6:C7:01:65:2E:C5:B7:FE:2B:EF:C7:37:73:B4:85:E9:74:86
Certificate issuer:       /CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
Certificate serial:       7C5310DA0D78AA35E202DB7DD956D444F58B9EED
Authority key identifier: D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a343030303a3a2f33342d3334203d3e203631373337.roa
Signing time:             Wed 14 Aug 2024 19:45:38 +0000
ROA not before:           Wed 14 Aug 2024 19:40:38 +0000
ROA not after:            Wed 13 Aug 2025 19:45:38 +0000
asID:                     61737
IP address blocks:        2804:1b9c:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:53:10:da:0d:78:aa:35:e2:02:db:7d:d9:56:d4:44:f5:8b:9e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
        Validity
            Not Before: Aug 14 19:40:38 2024 GMT
            Not After : Aug 13 19:45:38 2025 GMT
        Subject: CN=3115D6C701652EC5B7FE2BEFC73773B485E97486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:fd:ed:fe:78:12:ce:01:08:51:14:15:92:
                    09:c4:f3:fd:fb:ef:41:ac:a9:9c:62:09:27:68:e1:
                    99:f5:80:7f:63:44:99:9d:9e:27:cb:66:73:2f:00:
                    a4:bf:14:f6:b9:e9:11:b9:9a:f6:bd:7a:70:cd:0c:
                    ba:5f:48:53:cd:1c:1b:e0:b9:0e:e8:cf:27:93:15:
                    89:36:9f:12:29:f4:c6:e1:bf:bd:4d:5e:bb:ae:37:
                    fd:68:eb:b5:32:87:48:aa:f9:6a:a7:eb:9d:a8:3b:
                    b0:df:6b:de:05:8c:fa:ec:5e:74:4b:71:96:60:44:
                    5e:da:37:29:c4:3d:fe:9a:25:d9:33:7c:73:81:7a:
                    40:ae:c5:b7:5a:00:97:0a:17:69:67:b9:92:4c:fb:
                    03:aa:3b:b4:86:cf:af:f7:e8:ef:9a:f2:3a:16:bf:
                    4c:0c:9a:ee:27:fc:49:53:08:b8:f6:bf:b0:76:93:
                    8d:00:67:fc:18:48:22:08:33:96:6e:d6:5f:63:d2:
                    48:1e:5e:04:9b:ee:8c:60:75:88:90:7a:eb:f5:4f:
                    8f:71:f3:2c:7d:f5:54:52:53:bd:55:83:78:49:fb:
                    50:83:c4:f7:7b:c0:b3:87:61:89:b0:04:75:f2:a7:
                    30:66:c4:21:06:c3:85:b4:40:07:79:e2:b6:f5:13:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:15:D6:C7:01:65:2E:C5:B7:FE:2B:EF:C7:37:73:B4:85:E9:74:86
            X509v3 Authority Key Identifier:
                keyid:D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a343030303a3a2f33342d3334203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b9c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         41:6c:99:ff:32:07:65:ea:b0:25:10:95:66:7d:c7:51:72:82:
         8f:b5:3d:d9:0a:5b:a9:d7:9e:fc:45:84:12:eb:07:08:5d:06:
         b8:84:11:67:09:df:79:f2:93:17:d0:e4:97:eb:04:bb:79:df:
         e5:c4:27:af:4f:17:0b:2f:91:16:43:c0:11:9b:dd:51:00:ad:
         29:aa:f7:a1:cc:c9:71:f1:4c:95:4f:61:b4:85:61:3a:cf:28:
         b9:c1:e9:14:96:58:e1:9d:b0:c8:87:63:8a:77:11:64:8e:cc:
         24:16:ea:8a:38:20:ca:8c:82:49:60:94:de:f4:68:2a:c6:e6:
         db:70:94:1a:e9:c7:b0:ad:bb:e8:67:dd:3b:6d:6e:dd:e7:ea:
         9c:9b:e0:14:3b:44:24:5a:02:f1:0a:f3:ef:14:ec:14:17:02:
         59:cf:7e:9b:cb:ed:40:1c:1f:e5:a4:6e:49:30:3c:ef:d7:13:
         f4:03:96:64:1e:57:d1:45:43:6f:0a:9d:b1:f3:14:90:a1:4a:
         a5:b8:c5:77:70:cf:6e:9a:35:73:1c:ef:bf:35:cc:de:98:53:
         eb:ef:51:7c:ea:2a:9b:24:8f:d7:58:d3:53:52:fd:bf:22:fd:
         80:71:81:6c:12:6e:8b:86:62:ba:c5:00:8e:e0:f4:3b:14:c4:
         26:0a:7c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----