Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a3a2f33322d3332203d3e20323638383538.roa
File:                     323830343a356239633a3a2f33322d3332203d3e20323638383538.roa (raw, json)
Hash identifier:          4gZbKHjwegmE4XsjTM7ORaSHm287nIghsvJcoSlNdZE=
Subject key identifier:   0C:03:D2:BA:59:FF:1D:78:61:D7:61:B8:27:CB:BD:00:BF:75:72:DA
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       0AFC870A1336466A5023A0AF684B1E0D7C291EE6
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a3a2f33322d3332203d3e20323638383538.roa
Signing time:             Wed 03 Apr 2024 20:43:52 +0000
ROA not before:           Wed 03 Apr 2024 20:38:52 +0000
ROA not after:            Wed 02 Apr 2025 20:43:52 +0000
asID:                     268858
IP address blocks:        2804:5b9c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fc:87:0a:13:36:46:6a:50:23:a0:af:68:4b:1e:0d:7c:29:1e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Apr  3 20:38:52 2024 GMT
            Not After : Apr  2 20:43:52 2025 GMT
        Subject: CN=0C03D2BA59FF1D7861D761B827CBBD00BF7572DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:21:bd:d9:7b:66:3e:92:3f:15:35:a4:c5:
                    24:36:0c:a5:71:73:18:bb:2e:27:6e:b0:6f:e6:a4:
                    1b:61:4b:89:93:08:61:03:4e:99:35:68:f8:00:92:
                    66:13:68:43:33:e3:2b:cf:90:df:1a:c6:26:bb:10:
                    2b:5c:74:e7:df:3c:8e:5a:2a:35:ce:3b:a5:13:ba:
                    7e:7d:df:1c:07:8c:b5:1b:c9:75:26:c2:5a:0d:8a:
                    38:29:3f:8e:95:60:c0:01:ae:ce:42:dd:c2:94:95:
                    b4:0e:f6:91:3e:ad:8c:d2:f3:69:cc:cb:f0:d3:ac:
                    dd:df:9d:f4:d1:f5:24:b5:ec:cb:f4:9e:f6:d9:0d:
                    ba:5c:33:dd:a5:b7:22:df:25:58:c7:67:e5:86:da:
                    03:e1:bb:f7:6f:91:c5:9e:dc:9a:7f:21:16:81:53:
                    89:31:c6:8a:58:d1:37:2b:d3:a8:bd:59:43:28:51:
                    0f:60:da:2b:fc:85:3a:67:33:e2:7c:f8:f4:85:ea:
                    7f:dc:65:18:1c:23:26:fb:a7:86:02:9d:0e:55:05:
                    74:3c:ee:3e:78:ff:63:d0:b4:1b:74:49:e7:0a:c0:
                    06:5f:32:b1:8e:77:49:06:ec:e5:53:b5:0d:0f:43:
                    49:3c:17:89:b2:85:52:b3:ae:9e:09:de:6f:ce:fd:
                    db:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:03:D2:BA:59:FF:1D:78:61:D7:61:B8:27:CB:BD:00:BF:75:72:DA
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a3a2f33322d3332203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:e8:50:46:05:60:5b:22:8e:4f:78:c6:ed:71:af:21:43:82:
         81:28:c9:75:5d:7b:71:04:a7:d7:40:27:18:75:6d:3c:e9:e8:
         aa:6d:fb:b7:ca:19:a0:5e:a6:ef:83:df:2a:10:89:0c:14:8a:
         76:3a:24:3c:0a:82:70:1e:f9:d9:5a:a2:f3:46:e7:19:88:15:
         0e:d7:c1:e7:95:60:71:82:72:4f:d3:d6:c7:d7:28:5d:b3:e5:
         46:01:61:1d:51:16:63:aa:4f:3f:4e:f8:08:e8:90:d6:52:66:
         27:7e:94:dd:d7:ea:8d:f9:1d:eb:46:93:d9:db:99:d7:e6:53:
         f8:0c:81:bf:38:f8:5b:af:10:15:13:15:91:85:f6:37:28:18:
         0a:e1:80:43:8e:9d:9a:6a:59:32:0f:eb:83:c4:c1:31:4d:75:
         c6:9a:2b:90:77:a0:9f:17:d9:5d:da:a7:54:81:fc:ca:5e:d2:
         c7:d5:5e:a8:d7:01:1c:06:88:17:88:9b:0f:38:45:15:e2:07:
         77:03:65:c6:09:cf:f7:4f:90:40:e3:9f:58:c0:02:5e:27:0d:
         95:4a:10:c1:41:d4:7d:ed:15:18:f1:43:0f:c2:3a:85:92:7f:
         6b:cf:c0:06:65:00:e0:ab:eb:96:47:d0:22:e9:5a:78:bf:a9:
         2c:b3:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----