Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a633030303a3a2f33342d3334203d3e203631373337.roa
File:                     323830343a316239633a633030303a3a2f33342d3334203d3e203631373337.roa (raw, json)
Hash identifier:          TSBrKOeDOlTDFoQxokI5rEH0D12QNg1wzLIwXZHv45M=
Subject key identifier:   6D:E9:14:68:CA:3F:12:BB:48:E7:3F:7D:E4:64:EB:12:B2:9D:75:8A
Certificate issuer:       /CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
Certificate serial:       1A1CC88979FC2D77C0E473C07FD750315382E099
Authority key identifier: D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a633030303a3a2f33342d3334203d3e203631373337.roa
Signing time:             Wed 14 Aug 2024 19:45:38 +0000
ROA not before:           Wed 14 Aug 2024 19:40:38 +0000
ROA not after:            Wed 13 Aug 2025 19:45:38 +0000
asID:                     61737
IP address blocks:        2804:1b9c:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1c:c8:89:79:fc:2d:77:c0:e4:73:c0:7f:d7:50:31:53:82:e0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
        Validity
            Not Before: Aug 14 19:40:38 2024 GMT
            Not After : Aug 13 19:45:38 2025 GMT
        Subject: CN=6DE91468CA3F12BB48E73F7DE464EB12B29D758A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b1:4f:ae:c6:cb:5c:c5:5b:aa:eb:a1:6e:7e:
                    29:6c:18:fe:ee:67:26:4a:7b:04:7a:8c:96:cc:13:
                    e7:f6:00:37:c2:b3:ad:03:12:f7:1f:90:4d:67:f9:
                    55:e0:f4:dc:9a:3c:cc:64:37:e9:9b:7d:e0:da:81:
                    5c:6b:29:cb:28:f8:bf:04:47:c5:29:4b:ff:d3:8b:
                    4b:dc:65:35:51:f9:aa:94:8f:0d:88:9b:3d:ca:f9:
                    96:68:a5:82:56:ed:de:dc:1b:6f:b9:38:45:15:2c:
                    c1:bd:d4:a9:ae:b0:47:07:31:90:08:e8:a6:57:57:
                    6c:28:f7:a7:fa:aa:32:7e:ae:e5:70:cd:7c:a8:c5:
                    a9:17:8b:78:e9:d0:df:d9:ed:95:86:4b:43:1c:94:
                    3d:44:d4:e6:9f:25:80:3a:60:d5:7c:f9:59:71:d1:
                    05:58:23:a8:69:8d:7b:9f:2a:10:4a:c9:6d:0e:21:
                    f6:86:d7:c7:d1:c2:a6:fe:4d:f1:a6:8a:98:8c:bb:
                    73:d2:f1:34:60:24:70:cb:e1:69:34:09:80:40:e8:
                    a7:8a:6d:77:06:0f:2b:04:e7:26:e7:9b:8c:f2:e3:
                    05:09:1d:74:72:b9:ce:d1:9f:dd:6d:3a:72:79:01:
                    8d:f6:d6:9d:6b:66:7d:89:c1:cb:06:b9:63:c5:7f:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E9:14:68:CA:3F:12:BB:48:E7:3F:7D:E4:64:EB:12:B2:9D:75:8A
            X509v3 Authority Key Identifier:
                keyid:D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a633030303a3a2f33342d3334203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b9c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         90:13:2b:1f:d2:cd:70:32:17:3b:c6:e0:a9:b6:61:eb:4e:5c:
         d0:81:63:b9:c7:99:04:f1:ab:78:58:2f:95:85:ce:16:78:a4:
         95:e4:75:42:9c:d4:90:a8:07:19:b2:a7:b3:76:91:20:f5:2f:
         db:d4:33:ad:20:ac:84:c4:26:6a:28:de:89:ad:e1:4d:79:8a:
         64:1a:3c:39:18:af:1f:40:fb:30:a4:80:95:61:f8:28:d5:0a:
         20:ae:7f:2c:a9:ea:9d:b4:82:8f:ed:15:99:a3:10:c9:f6:5c:
         0c:84:35:66:83:0b:21:6a:89:d6:13:1c:00:a4:88:9a:ae:7a:
         49:7f:fd:36:28:7f:1c:2a:6c:54:7a:f4:dc:15:76:89:27:ef:
         c5:ec:69:a1:34:0b:fc:7c:3d:26:c2:eb:df:9d:9c:2b:f3:f1:
         49:82:9c:66:39:ca:6e:71:01:4b:d8:88:c2:75:ef:8d:5c:32:
         2c:27:a8:df:66:88:74:47:56:f7:e5:2f:e2:3c:0c:81:db:86:
         e8:81:8a:8c:9a:4e:be:31:3d:82:41:cd:04:35:bf:53:75:7c:
         c2:76:64:28:c9:cc:8f:48:5d:6f:e5:1f:1b:66:47:ee:56:78:
         6b:52:88:0d:df:99:cd:e6:c0:cf:28:c6:f6:39:ff:64:a7:51:
         61:bb:5e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----