Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/323830343a353331633a3232383a3a2f34352d3435203d3e20323638353634.roa
File:                     323830343a353331633a3232383a3a2f34352d3435203d3e20323638353634.roa (raw, json)
Hash identifier:          pe+SsApdM1l81s9gJ7jaRHeBS+No4Ms0lDj6IKum12o=
Subject key identifier:   17:39:92:6F:F2:91:4B:E3:CA:D9:00:04:3A:5C:8A:02:56:BE:CD:7E
Certificate issuer:       /CN=48B65496F1100A4BEC2A103360694784DE4E87AA
Certificate serial:       10257B39870E8F82D6D51B61CBA1715E482FA8E8
Authority key identifier: 48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/323830343a353331633a3232383a3a2f34352d3435203d3e20323638353634.roa
Signing time:             Wed 03 Apr 2024 19:00:12 +0000
ROA not before:           Wed 03 Apr 2024 18:55:12 +0000
ROA not after:            Thu 03 Apr 2025 19:00:12 +0000
asID:                     268564
IP address blocks:        2804:531c:228::/45 maxlen: 45

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:25:7b:39:87:0e:8f:82:d6:d5:1b:61:cb:a1:71:5e:48:2f:a8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48B65496F1100A4BEC2A103360694784DE4E87AA
        Validity
            Not Before: Apr  3 18:55:12 2024 GMT
            Not After : Apr  3 19:00:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:16:b9:30:37:fb:12:26:78:46:97:10:23:
                    3c:b5:22:a2:51:94:05:57:a1:cc:13:bb:6b:70:a8:
                    46:4e:46:b6:4b:4c:2d:de:bd:0a:19:35:72:48:72:
                    1e:1e:ad:4e:d5:d0:24:28:52:9f:b2:25:15:41:92:
                    1b:21:b6:39:0b:37:1b:cc:99:f4:1a:a5:63:97:1a:
                    26:12:56:13:62:84:a2:0a:8d:92:e4:04:24:fd:f6:
                    ab:5c:11:3c:b2:6c:ea:45:59:64:1f:e7:2f:ee:c2:
                    9b:96:6c:47:9f:14:d1:f8:24:00:d2:ac:83:bc:a9:
                    e6:0c:ba:f7:8e:0c:74:a7:57:53:49:1a:74:b0:5f:
                    81:53:85:40:6f:ac:16:c2:2c:46:91:81:92:7b:96:
                    39:bd:e5:57:7d:04:fa:af:10:15:ce:5b:16:84:5a:
                    8c:24:b6:85:58:fe:d5:9b:bc:b9:8e:d2:e2:d0:c2:
                    2a:86:7b:f0:50:e4:c0:01:b5:1d:5e:f5:7b:b6:67:
                    71:36:f2:f7:0f:2d:1c:94:cc:fe:f0:7f:f4:ce:83:
                    ae:fd:78:33:0c:93:4d:9d:7a:64:2a:a1:bd:7a:f3:
                    3d:09:ff:f4:4a:66:5e:84:07:30:c1:78:97:c5:68:
                    e7:f1:c8:c9:51:56:97:17:0b:b8:0e:82:81:c8:6a:
                    3a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:39:92:6F:F2:91:4B:E3:CA:D9:00:04:3A:5C:8A:02:56:BE:CD:7E
            X509v3 Authority Key Identifier:
                keyid:48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/323830343a353331633a3232383a3a2f34352d3435203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:531c:228::/45

    Signature Algorithm: sha256WithRSAEncryption
         ac:77:22:61:24:11:a1:2a:d2:6b:cd:e3:d6:60:0e:8e:1e:10:
         97:1c:aa:fa:29:5a:62:33:aa:5a:bd:ce:43:c8:b6:9e:b9:69:
         2c:b1:e4:4a:cf:db:2c:f2:c0:4b:41:f5:0c:d5:30:be:fa:e7:
         d6:e9:2e:af:50:c4:41:64:35:4a:55:85:ae:96:3b:27:65:fd:
         f1:0f:17:3f:cc:e8:30:a6:ec:30:1c:45:d4:02:7c:ba:ad:40:
         95:10:31:3f:95:25:20:78:94:c2:fc:fd:e1:41:fb:42:c4:b5:
         00:9d:5e:6f:eb:e7:a1:1a:71:65:8a:39:95:8c:ff:0d:ba:0c:
         96:a8:eb:9b:ce:27:db:5e:b3:6a:05:3a:ce:48:20:55:8d:1f:
         6c:1c:05:f4:e6:5f:3a:9a:3b:70:fd:90:8b:a7:75:7a:c5:7e:
         a1:8d:23:6d:2e:ce:22:07:9b:af:89:f3:b4:de:76:90:9e:92:
         39:04:c1:5b:ff:14:ad:ee:81:57:7c:ec:79:01:3c:13:46:12:
         b8:23:a3:c8:30:d2:f1:38:34:24:38:8f:fe:f5:49:e1:f0:66:
         9d:66:70:0d:27:53:7b:52:de:2f:2e:fc:cb:b1:62:b9:b3:58:
         c9:c6:ff:ed:b9:28:00:15:9a:a8:0e:bc:86:43:2a:4e:3a:3c:
         36:f0:80:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----