Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3a2f33322d3332203d3e20323637343538.roa
File:                     323830343a343164303a3a2f33322d3332203d3e20323637343538.roa (raw, json)
Hash identifier:          8jX/tC8fhtq8OTms6slonqr/QwYV9n2YiXvSV+ZyQCc=
Subject key identifier:   2A:44:E8:16:E8:AD:B9:66:7D:57:77:04:85:A6:EB:B8:B4:35:0E:45
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       4C7C3980B85784A9C2BBDABE9A2BB0A7AC92D1AC
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3a2f33322d3332203d3e20323637343538.roa
Signing time:             Mon 22 Apr 2024 19:01:08 +0000
ROA not before:           Mon 22 Apr 2024 18:56:08 +0000
ROA not after:            Mon 21 Apr 2025 19:01:08 +0000
asID:                     267458
IP address blocks:        2804:41d0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7c:39:80:b8:57:84:a9:c2:bb:da:be:9a:2b:b0:a7:ac:92:d1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr 22 18:56:08 2024 GMT
            Not After : Apr 21 19:01:08 2025 GMT
        Subject: CN=2A44E816E8ADB9667D57770485A6EBB8B4350E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:fc:b6:dc:76:91:8e:76:51:61:06:39:dc:
                    0a:70:18:a3:93:2a:a2:9a:3a:79:f3:d6:33:0f:fd:
                    1d:37:29:78:54:8e:f4:1f:d6:db:8e:4b:d3:d6:9d:
                    33:05:1c:e7:32:26:8f:83:97:bb:77:17:5b:1f:b5:
                    b7:f9:39:2f:67:c6:53:33:e2:95:43:fa:94:0c:e8:
                    d1:ed:85:c2:b2:98:f3:1b:63:db:03:9c:57:cf:9e:
                    b0:0f:d2:51:60:32:7c:fa:7c:c6:d2:0f:bb:5f:ae:
                    40:21:3b:5c:03:df:a5:04:9d:47:66:af:0c:33:84:
                    88:20:0e:69:10:41:73:35:fb:68:bb:b4:4d:92:6b:
                    9e:9f:90:53:64:96:15:19:59:d9:a6:68:fa:c3:b2:
                    50:f6:7f:17:69:eb:36:c3:5d:8d:0a:36:2e:93:0e:
                    fd:60:1c:24:b2:03:79:ea:27:d5:9a:90:da:2c:f6:
                    76:0b:9c:01:a0:df:f7:d7:7f:f0:57:a4:81:0a:ff:
                    3a:2d:f5:90:e0:32:dc:0f:e0:31:2c:9f:0c:4d:39:
                    52:69:61:09:d8:31:d6:30:cc:a0:88:f9:41:54:12:
                    43:7f:26:14:03:95:10:d3:99:6e:a7:94:75:98:8a:
                    b9:48:86:5d:71:66:de:bc:96:10:2a:bd:15:88:5c:
                    3f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:44:E8:16:E8:AD:B9:66:7D:57:77:04:85:A6:EB:B8:B4:35:0E:45
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3a2f33322d3332203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:d5:d7:5b:b5:ee:43:f7:e7:04:21:99:1a:3c:ed:21:27:f0:
         b7:38:50:96:43:39:77:33:76:23:f1:1a:d4:ad:f3:ea:fe:68:
         8d:51:ef:93:81:8d:67:a5:99:76:0a:d2:aa:f9:9c:5a:7a:4d:
         c3:3c:b6:70:6a:0b:ec:83:bb:db:08:f8:af:b9:12:86:c9:fc:
         6a:75:73:42:13:48:33:df:e5:ff:da:6f:31:a0:2d:9e:8c:ca:
         19:a8:e8:6d:cd:c4:4d:71:c1:cb:9f:9b:15:21:ed:4a:81:5f:
         96:45:a6:e1:9c:b3:bf:f2:fc:2c:cd:21:e9:4f:ea:31:0c:04:
         2f:b3:08:05:17:7a:cb:e0:cb:f2:6a:bb:7a:32:6d:b0:40:b1:
         c4:34:d0:c1:13:e1:ff:b3:28:15:7d:aa:23:06:cf:2a:67:6e:
         23:95:70:01:18:af:02:28:9d:73:b8:eb:49:92:62:12:0f:ed:
         a4:79:b1:8d:f7:9e:e6:15:12:52:0b:dc:55:1b:f7:82:fd:ed:
         56:32:d5:e7:06:02:47:36:5f:e1:5f:2e:8e:0c:20:9a:e9:82:
         31:49:b5:43:d8:b8:a5:18:c9:96:60:7d:02:fc:73:9c:ed:7e:
         88:a2:e3:99:57:d8:b0:e0:ab:c7:19:13:57:b8:89:f9:0b:23:
         4b:d1:0a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----