Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/323830313a38303a333862303a3a2f34382d3438203d3e20323730333438.roa
File:                     323830313a38303a333862303a3a2f34382d3438203d3e20323730333438.roa (raw, json)
Hash identifier:          mElbOG/pweOlbt6Espa1wRzVrmsfiKVI9nWbtHwNP58=
Subject key identifier:   D5:17:CF:22:A2:87:7C:33:84:D9:BC:15:C7:F6:36:9D:68:61:8D:90
Certificate issuer:       /CN=788B36C2CD89F8698D3899FE503F57FCDCEF52E9
Certificate serial:       6D5F6C72F5C21922A15E2AF20D2FCF1DD680084F
Authority key identifier: 78:8B:36:C2:CD:89:F8:69:8D:38:99:FE:50:3F:57:FC:DC:EF:52:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/323830313a38303a333862303a3a2f34382d3438203d3e20323730333438.roa
Signing time:             Wed 03 Apr 2024 20:28:48 +0000
ROA not before:           Wed 03 Apr 2024 20:23:48 +0000
ROA not after:            Wed 02 Apr 2025 20:28:48 +0000
asID:                     270348
IP address blocks:        2801:80:38b0::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5f:6c:72:f5:c2:19:22:a1:5e:2a:f2:0d:2f:cf:1d:d6:80:08:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788B36C2CD89F8698D3899FE503F57FCDCEF52E9
        Validity
            Not Before: Apr  3 20:23:48 2024 GMT
            Not After : Apr  2 20:28:48 2025 GMT
        Subject: CN=D517CF22A2877C3384D9BC15C7F6369D68618D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:ee:85:2a:b7:d2:58:18:88:40:16:bc:a8:
                    38:6a:59:77:8f:c8:78:dc:6e:f8:18:8f:44:75:b4:
                    b5:8d:dd:75:96:3c:d1:10:d9:d6:76:9d:71:eb:c2:
                    07:3f:fe:fd:88:9d:64:6b:8a:93:ea:73:72:b0:51:
                    15:ef:00:3f:84:b7:8b:fd:fa:a5:e4:7e:cd:0f:19:
                    5c:28:6d:b7:b5:4e:54:e6:72:1a:b3:17:e9:e0:66:
                    c6:5f:55:78:41:eb:9d:c5:b3:08:8e:61:96:30:ee:
                    cf:a4:8d:c4:98:37:0a:dd:b1:d7:9a:38:3a:fa:f6:
                    75:6c:a2:b4:e7:76:7b:15:fc:c4:a4:6d:65:68:2e:
                    71:50:0f:1e:c6:84:e5:b0:01:00:e1:36:cf:4e:94:
                    98:ec:51:19:85:0c:08:a4:df:ff:fa:c4:8e:75:f7:
                    d1:db:8c:98:43:99:d0:b0:24:72:0e:eb:e6:5f:45:
                    37:d1:4b:8f:62:56:8d:74:fb:f6:1e:20:0f:dd:2a:
                    ee:ae:45:7d:d3:f8:52:3e:9d:59:1f:b9:43:e1:b5:
                    b5:5e:05:40:b5:d1:5c:8f:7c:ea:50:f9:34:7a:5c:
                    58:1e:c3:f4:71:26:f6:f0:13:1c:c5:a7:9c:db:4c:
                    e0:65:c8:33:c3:61:da:e1:9a:31:c8:cc:fe:01:8e:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:17:CF:22:A2:87:7C:33:84:D9:BC:15:C7:F6:36:9D:68:61:8D:90
            X509v3 Authority Key Identifier:
                keyid:78:8B:36:C2:CD:89:F8:69:8D:38:99:FE:50:3F:57:FC:DC:EF:52:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/323830313a38303a333862303a3a2f34382d3438203d3e20323730333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:38b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:d4:3d:de:b5:c6:76:8a:33:ff:7b:1b:98:bb:3c:39:5c:ee:
         7f:7b:13:04:fb:ff:68:70:42:da:fe:7f:58:b7:67:cd:6a:3d:
         46:84:3c:3e:d3:e2:7a:51:71:9a:31:c7:50:a0:a4:e8:b9:4f:
         87:a2:76:86:8b:06:fd:dd:6a:50:78:8f:4c:f4:1c:c8:80:88:
         98:cc:fd:99:aa:c8:d6:21:27:80:5f:23:fe:e5:60:26:7f:5c:
         70:ce:83:ae:33:d6:1b:0e:e4:9a:31:ff:0d:9c:6d:ce:1e:5c:
         2f:eb:7d:80:fe:2f:08:8a:d5:be:e8:87:59:00:42:c5:0e:17:
         28:8e:3a:57:44:a3:15:bc:77:bd:2f:bd:66:e9:a3:5c:07:27:
         ec:82:40:6b:5a:c0:da:fc:27:93:30:b1:2c:fb:6b:63:e2:16:
         f9:9d:28:32:ac:4f:89:7f:fe:24:8e:c0:20:01:fb:2d:75:eb:
         44:b7:3d:f7:3f:d8:27:b2:3c:9a:17:92:cd:1f:9f:97:c6:e8:
         4e:e3:88:b6:65:67:53:cb:81:03:ce:b2:1e:16:b5:61:46:e3:
         44:f5:02:10:67:33:d9:e0:86:60:e4:a0:61:30:22:cb:ee:d1:
         bb:62:45:67:d5:10:9e:57:2a:94:8b:a6:72:60:b5:0e:6a:40:
         56:db:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----