Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/1/323830343a356331383a3a2f33322d3438203d3e20323638383837.roa
File:                     323830343a356331383a3a2f33322d3438203d3e20323638383837.roa (raw, json)
Hash identifier:          A1XaW6lHCp4/Ac5cY4ebhpLQ+OlPWIrBipfvd/mzGdI=
Subject key identifier:   D5:EA:EF:8C:38:51:21:51:22:0B:F9:91:D5:AE:F3:86:C4:14:F3:57
Certificate issuer:       /CN=9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E
Certificate serial:       15F9BE28BCBC6B38409CAF50F0A7DBE7C8EF131E
Authority key identifier: 99:26:DA:4D:EE:27:83:7F:B8:0C:7A:7D:43:11:F5:53:7F:A2:AB:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/1/323830343a356331383a3a2f33322d3438203d3e20323638383837.roa
Signing time:             Thu 04 Apr 2024 19:43:52 +0000
ROA not before:           Thu 04 Apr 2024 19:38:52 +0000
ROA not after:            Thu 03 Apr 2025 19:43:52 +0000
asID:                     268887
IP address blocks:        2804:5c18::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f9:be:28:bc:bc:6b:38:40:9c:af:50:f0:a7:db:e7:c8:ef:13:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E
        Validity
            Not Before: Apr  4 19:38:52 2024 GMT
            Not After : Apr  3 19:43:52 2025 GMT
        Subject: CN=D5EAEF8C38512151220BF991D5AEF386C414F357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:09:44:f8:ae:ad:39:62:0e:b2:3d:fe:a3:
                    fe:f5:d2:3c:0d:18:c5:5c:b0:5a:9f:64:0e:6c:dd:
                    c2:25:2b:42:e2:ed:07:7b:5e:89:d2:2e:9b:6e:4e:
                    94:d2:d1:08:64:e4:e1:e2:75:a1:75:f3:de:14:06:
                    e8:f5:8f:97:08:c9:6a:5c:b3:c9:b6:be:bf:cd:c3:
                    82:5a:8f:cb:be:0e:08:0b:c4:c3:a4:61:14:b1:cc:
                    a3:84:ae:3d:d7:1b:d6:86:21:a0:3d:31:9b:3f:35:
                    eb:25:b7:5d:14:60:3c:58:c4:c0:2b:06:5f:ea:3c:
                    98:4c:de:c3:98:b8:1a:28:e4:e1:9a:d1:41:62:c2:
                    73:17:d4:7f:81:94:93:96:8e:b5:c8:1f:b3:c6:60:
                    74:7d:c2:32:85:6b:c1:9b:43:c5:62:7e:ab:96:4f:
                    ae:63:3a:e0:c9:bf:9d:6b:d6:41:fe:3c:97:47:0e:
                    34:20:c3:98:4e:7e:bc:6a:36:5f:2a:e3:cd:b9:df:
                    2c:db:7f:ed:fd:6a:9a:b7:a5:1f:cf:f3:1d:01:bc:
                    66:fa:77:56:6b:22:43:9f:98:36:ad:f8:06:f2:f3:
                    a8:7f:9f:d8:1c:ca:f1:d8:b3:cd:5d:0a:fc:38:d0:
                    5d:c9:37:0c:25:23:0d:1b:6a:75:8e:47:68:99:87:
                    6c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EA:EF:8C:38:51:21:51:22:0B:F9:91:D5:AE:F3:86:C4:14:F3:57
            X509v3 Authority Key Identifier:
                keyid:99:26:DA:4D:EE:27:83:7F:B8:0C:7A:7D:43:11:F5:53:7F:A2:AB:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/1/9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/1/323830343a356331383a3a2f33322d3438203d3e20323638383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:33:ca:c1:53:de:5f:34:94:a5:46:52:56:e9:7b:99:82:5d:
         cc:a9:e6:d0:28:ea:17:2a:b4:a9:a9:ab:f4:a4:0f:40:0c:b5:
         54:fc:07:63:20:a9:59:f3:56:c5:a0:3e:2c:76:bf:2d:f2:d1:
         d6:34:b8:18:be:f7:32:fd:b2:3d:8c:7e:d1:4e:b1:a9:50:34:
         a1:c9:75:c7:8f:15:f9:25:5f:b2:04:74:d0:d5:f2:e7:ab:9d:
         dd:cb:03:b0:0f:73:5c:9e:d5:a4:82:03:5c:b0:d6:5f:84:08:
         66:03:c5:ed:2b:df:d0:8a:af:6e:ba:91:dd:e1:ca:a2:07:24:
         c1:6a:b7:7f:d7:4a:e7:3d:63:32:dd:4c:2c:e5:c6:f2:be:e8:
         b5:dd:a4:af:78:fa:75:33:3a:37:bf:9a:1b:c1:5e:46:7d:72:
         31:7d:97:7c:db:85:1d:73:df:c7:b4:36:d6:d6:4a:54:57:ae:
         99:f0:ca:44:e1:f0:b1:fd:e5:b0:2b:25:56:21:71:73:45:3d:
         0a:24:d7:0a:cb:42:af:ed:79:7b:a4:2f:9c:e6:4d:c8:11:3f:
         70:bf:12:80:fc:0a:fc:7e:b0:86:ef:0b:53:e0:0f:33:90:84:
         3a:d8:1e:7d:bc:51:29:af:3b:5b:6e:aa:d7:52:df:bc:f3:f8:
         5c:59:d2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----