Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqqASvj9jUwRfgiejmK57B6TPDm5EPmWrPeBbzbkUE4p/0/323830343a356637343a3a2f33322d3438203d3e20323639313030.roa
File:                     323830343a356637343a3a2f33322d3438203d3e20323639313030.roa (raw, json)
Hash identifier:          n5dthl2ywvjUgTVK6L09COLsChMsb5zweV49XuUqx4U=
Subject key identifier:   D7:24:D6:27:33:3A:ED:F2:C9:E7:4A:F1:3B:18:94:A9:BA:02:40:E8
Certificate issuer:       /CN=37E828440D52263C9689551A3A808A658D6B34EA
Certificate serial:       399ABEFD900A62614DDDF7C3635BBE902B49D493
Authority key identifier: 37:E8:28:44:0D:52:26:3C:96:89:55:1A:3A:80:8A:65:8D:6B:34:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E828440D52263C9689551A3A808A658D6B34EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqqASvj9jUwRfgiejmK57B6TPDm5EPmWrPeBbzbkUE4p/0/323830343a356637343a3a2f33322d3438203d3e20323639313030.roa
Signing time:             Fri 26 Apr 2024 13:38:56 +0000
ROA not before:           Fri 26 Apr 2024 13:33:56 +0000
ROA not after:            Fri 25 Apr 2025 13:38:56 +0000
asID:                     269100
IP address blocks:        2804:5f74::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9a:be:fd:90:0a:62:61:4d:dd:f7:c3:63:5b:be:90:2b:49:d4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E828440D52263C9689551A3A808A658D6B34EA
        Validity
            Not Before: Apr 26 13:33:56 2024 GMT
            Not After : Apr 25 13:38:56 2025 GMT
        Subject: CN=D724D627333AEDF2C9E74AF13B1894A9BA0240E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:20:f4:9a:75:c8:cc:74:4d:67:79:71:d4:
                    e1:39:72:84:80:a3:a8:f0:1a:ec:ff:30:68:dd:00:
                    00:44:bd:f7:af:b1:ac:14:64:15:10:57:99:c8:63:
                    c7:c3:00:ea:08:d0:b3:ee:a2:5e:72:b3:65:66:5f:
                    83:97:6d:22:1b:b2:d0:d4:8c:a2:09:59:de:a9:6e:
                    dc:2c:59:39:d4:d9:7c:00:54:88:27:a7:9d:c5:07:
                    0e:2a:36:c9:83:ed:03:26:58:e9:d4:4b:ac:3d:19:
                    ed:2d:56:55:49:cc:b0:02:4c:c1:a9:b9:8d:64:8c:
                    ed:d2:1e:ea:a2:25:26:d8:5a:82:cf:88:3b:55:03:
                    11:8b:b9:50:d4:db:94:85:34:c7:98:a0:8f:40:7d:
                    68:48:6b:86:82:c4:eb:26:46:01:1d:9b:74:c4:12:
                    e5:14:81:df:e7:95:24:ae:53:13:34:fc:d6:2c:6f:
                    a2:f8:3f:08:e1:9b:bf:36:cf:f5:0e:66:23:b5:fc:
                    89:9b:a7:98:08:23:1c:ef:94:7a:7a:b6:3f:b9:c7:
                    df:6f:9d:00:2d:41:dd:47:4d:d4:fd:03:51:c0:02:
                    03:94:f5:59:b0:43:fd:37:0f:c2:a6:1a:e1:07:d7:
                    4f:28:c7:ac:e8:31:db:ff:92:0b:93:b6:7c:ea:aa:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:24:D6:27:33:3A:ED:F2:C9:E7:4A:F1:3B:18:94:A9:BA:02:40:E8
            X509v3 Authority Key Identifier:
                keyid:37:E8:28:44:0D:52:26:3C:96:89:55:1A:3A:80:8A:65:8D:6B:34:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqqASvj9jUwRfgiejmK57B6TPDm5EPmWrPeBbzbkUE4p/0/37E828440D52263C9689551A3A808A658D6B34EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E828440D52263C9689551A3A808A658D6B34EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqqASvj9jUwRfgiejmK57B6TPDm5EPmWrPeBbzbkUE4p/0/323830343a356637343a3a2f33322d3438203d3e20323639313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f74::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:f1:91:91:fd:05:77:b8:24:16:24:16:36:9c:e2:83:ae:13:
         dd:e7:19:94:85:f3:cd:a7:d8:78:cc:ba:77:7e:fc:e8:85:6d:
         3f:0e:e6:3f:87:b9:ca:cf:c8:e2:8a:11:34:d4:9e:8b:cb:81:
         18:b1:83:af:c3:e1:d7:96:26:f5:06:cd:5d:51:7c:29:65:1f:
         f3:10:08:51:2d:15:30:f4:cc:d4:41:ba:6c:30:12:c6:8c:bf:
         c8:76:d8:fa:93:63:7b:c8:47:95:9a:0a:20:20:48:ef:c8:18:
         a3:d6:35:6f:53:f0:fe:59:00:60:26:c8:d1:f0:ed:e4:87:6e:
         74:a9:be:79:3d:08:96:4a:07:c0:30:76:e2:96:b8:3a:34:8a:
         c2:97:9b:85:bb:69:29:e5:8a:b1:76:cb:05:e9:3e:37:73:a3:
         4d:7a:3c:06:d6:9a:42:8a:89:18:bc:5b:08:67:f7:eb:51:21:
         8e:dc:64:83:bd:27:68:d7:fe:6b:54:90:cd:3f:b0:e3:98:71:
         12:64:f6:7b:9d:18:45:9f:75:32:e3:93:f9:4c:b6:cc:de:de:
         55:a2:7b:01:b2:60:c7:b7:52:80:b5:bb:84:8a:c5:04:b1:a7:
         b7:14:c5:5a:c0:f4:84:9e:6f:d3:cc:a5:5f:ab:f8:bf:c2:99:
         eb:9d:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----