Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/2/323830343a376162383a3a2f33322d3438203d3e20323731333838.roa
File:                     323830343a376162383a3a2f33322d3438203d3e20323731333838.roa (raw, json)
Hash identifier:          4CeDWUflu+oOWeUsOl271c3CFXudgyHFYJWOo1wN5RU=
Subject key identifier:   C6:5F:8C:E6:71:2F:E0:61:E9:95:28:8E:CD:FD:9F:56:64:2E:38:51
Certificate issuer:       /CN=F7BE09AF8165E9D220AB178AFD5E7F0E7532F727
Certificate serial:       683BD44A603C52FDFBF25898103FBFA24C77F129
Authority key identifier: F7:BE:09:AF:81:65:E9:D2:20:AB:17:8A:FD:5E:7F:0E:75:32:F7:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7BE09AF8165E9D220AB178AFD5E7F0E7532F727.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/2/323830343a376162383a3a2f33322d3438203d3e20323731333838.roa
Signing time:             Thu 04 Apr 2024 03:24:58 +0000
ROA not before:           Thu 04 Apr 2024 03:19:58 +0000
ROA not after:            Thu 03 Apr 2025 03:24:58 +0000
asID:                     271388
IP address blocks:        2804:7ab8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3b:d4:4a:60:3c:52:fd:fb:f2:58:98:10:3f:bf:a2:4c:77:f1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7BE09AF8165E9D220AB178AFD5E7F0E7532F727
        Validity
            Not Before: Apr  4 03:19:58 2024 GMT
            Not After : Apr  3 03:24:58 2025 GMT
        Subject: CN=C65F8CE6712FE061E995288ECDFD9F56642E3851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:59:03:7e:30:6a:1a:76:e9:31:9c:51:df:
                    39:74:0f:cb:d7:4a:67:7f:58:d5:22:9e:c2:54:9b:
                    8b:d7:78:a4:ab:b0:d1:57:4c:97:bf:f7:ef:8e:20:
                    9e:b8:33:e7:81:b9:b9:9a:8c:99:c0:a2:d2:eb:e8:
                    af:b5:46:19:4d:b4:03:93:bc:6b:26:53:cb:70:d9:
                    2d:7a:64:54:73:ee:63:f3:b9:77:c8:ad:fa:2d:d5:
                    56:36:db:fe:8e:57:63:c1:c5:72:ea:f6:64:61:12:
                    5b:8b:a0:d9:8c:75:ec:d5:35:99:3a:ba:1d:88:eb:
                    a4:06:d8:13:fb:bf:3a:0c:b2:0b:8e:37:bc:d3:68:
                    1a:8c:3e:94:8b:4e:8f:42:27:bf:57:a4:cb:04:a8:
                    4e:63:d5:dd:ae:8d:c6:1d:76:fa:8f:75:c0:10:6d:
                    df:60:ce:20:48:d6:54:cb:f3:67:18:97:53:08:2b:
                    42:f8:28:71:5f:7e:46:0f:fa:53:7e:d7:95:10:31:
                    58:e0:9e:10:c0:47:f1:3a:0d:dc:59:cd:3d:d7:82:
                    2f:96:ef:2b:cf:d3:a7:48:81:3f:2f:ce:1b:f4:ce:
                    2f:e4:b1:b9:33:37:6c:53:07:25:52:2a:a7:02:42:
                    70:43:e6:ce:c1:84:21:51:4d:6f:a5:75:fc:c5:fa:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5F:8C:E6:71:2F:E0:61:E9:95:28:8E:CD:FD:9F:56:64:2E:38:51
            X509v3 Authority Key Identifier:
                keyid:F7:BE:09:AF:81:65:E9:D2:20:AB:17:8A:FD:5E:7F:0E:75:32:F7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/2/F7BE09AF8165E9D220AB178AFD5E7F0E7532F727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7BE09AF8165E9D220AB178AFD5E7F0E7532F727.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/2/323830343a376162383a3a2f33322d3438203d3e20323731333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ab8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:35:f2:ef:3f:9b:4b:b0:31:df:4f:04:fe:b3:dc:fe:bb:ac:
         bf:ef:5e:ec:14:75:ec:b2:0f:8a:55:3c:03:4d:ad:a4:22:4e:
         d2:d5:f9:37:75:44:d7:ef:f5:2d:26:8f:cc:6e:49:28:80:8b:
         8b:83:20:a9:08:c3:7a:b8:d9:23:56:2d:19:b1:2b:f5:bb:6c:
         56:50:87:92:3c:04:40:43:33:98:1f:c4:55:07:0f:07:da:f5:
         4f:08:5d:0a:72:b7:d5:46:52:f4:38:eb:7f:5a:0c:12:30:fc:
         1c:58:d0:5d:95:4d:58:a2:63:6d:a0:ad:43:91:61:09:c6:d0:
         72:1d:35:65:8d:e9:00:ce:5d:a9:07:82:e9:08:09:4a:43:f5:
         a8:86:ac:76:08:a4:a1:df:4e:db:d4:9e:06:2e:c4:0e:62:73:
         73:e4:3b:0d:9c:fe:80:4f:0b:9a:a4:99:41:46:d8:cf:35:36:
         9b:34:91:5f:6f:53:9c:7e:a2:a6:52:6c:cf:76:56:70:13:6e:
         36:67:e1:49:a4:c5:38:06:c3:0d:de:b6:ce:0b:e0:50:fa:2f:
         2b:1d:e0:68:1a:14:78:76:58:a6:ce:41:e0:31:15:22:29:ac:
         61:70:16:76:67:a5:9f:0c:56:dd:c4:e2:ab:78:63:1d:df:8d:
         a5:ee:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----