Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/323830343a386634633a3a2f33322d3332203d3e20323733343832.roa
File:                     323830343a386634633a3a2f33322d3332203d3e20323733343832.roa (raw, json)
Hash identifier:          2LeqCloMK7tZS893vGsJ7oNBmmNme0dTiTTDJYF3d3I=
Subject key identifier:   49:1B:63:8E:D8:DC:08:48:8A:CC:25:DB:BD:49:FB:B4:47:75:26:44
Certificate issuer:       /CN=FA1CBB25D0C026E2646F44107ABBC3B08879B290
Certificate serial:       1D2C663970A702474C0D77B65D910B5A35C93E57
Authority key identifier: FA:1C:BB:25:D0:C0:26:E2:64:6F:44:10:7A:BB:C3:B0:88:79:B2:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1CBB25D0C026E2646F44107ABBC3B08879B290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/323830343a386634633a3a2f33322d3332203d3e20323733343832.roa
Signing time:             Tue 27 Aug 2024 21:31:07 +0000
ROA not before:           Tue 27 Aug 2024 21:26:07 +0000
ROA not after:            Tue 26 Aug 2025 21:31:07 +0000
asID:                     273482
IP address blocks:        2804:8f4c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2c:66:39:70:a7:02:47:4c:0d:77:b6:5d:91:0b:5a:35:c9:3e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1CBB25D0C026E2646F44107ABBC3B08879B290
        Validity
            Not Before: Aug 27 21:26:07 2024 GMT
            Not After : Aug 26 21:31:07 2025 GMT
        Subject: CN=491B638ED8DC08488ACC25DBBD49FBB447752644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:e4:5d:0f:a6:3e:e0:f1:71:30:f5:0e:44:
                    0e:27:47:53:68:fd:a7:f8:6a:d4:63:f4:d8:ca:29:
                    52:2b:75:20:f4:29:f9:8f:ec:20:7b:6c:57:e0:fc:
                    fb:5a:89:e4:5d:d0:15:60:da:41:65:5b:be:17:3d:
                    40:3a:cc:87:bb:34:3c:d1:bc:6e:65:fb:d4:e6:bc:
                    48:63:13:b7:2d:69:2b:0b:88:0a:87:7b:4c:1a:80:
                    93:12:83:68:1d:51:e1:8b:eb:1a:75:00:78:3b:29:
                    97:3b:b4:38:18:2f:4f:ba:dd:61:fb:73:a2:3b:eb:
                    2e:5a:e8:67:91:b2:4e:3f:c2:e0:60:8b:6e:16:31:
                    64:b8:70:4a:cb:44:2f:d1:33:51:68:0b:9e:46:13:
                    4d:2a:c8:3e:5f:eb:13:60:3a:11:a4:85:ea:c1:b9:
                    ea:42:f6:6f:4f:e4:07:cc:49:03:42:5e:7b:3b:18:
                    e4:e5:33:52:63:44:ad:51:2b:b8:9d:4a:af:ea:34:
                    16:5f:4b:a0:5d:d4:83:a8:b7:c2:95:bc:72:0e:af:
                    3c:2f:c4:7a:e0:4e:9a:69:f3:53:42:4b:bb:2b:36:
                    24:a8:57:af:14:1d:fb:53:77:20:4d:bb:fd:a5:f4:
                    58:87:e6:e8:e6:37:09:6e:cc:d1:51:7f:bf:00:19:
                    5b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1B:63:8E:D8:DC:08:48:8A:CC:25:DB:BD:49:FB:B4:47:75:26:44
            X509v3 Authority Key Identifier:
                keyid:FA:1C:BB:25:D0:C0:26:E2:64:6F:44:10:7A:BB:C3:B0:88:79:B2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/FA1CBB25D0C026E2646F44107ABBC3B08879B290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1CBB25D0C026E2646F44107ABBC3B08879B290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/0/323830343a386634633a3a2f33322d3332203d3e20323733343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:6c:36:c9:28:38:03:47:25:21:4d:9b:a5:46:c5:88:fd:1d:
         0b:56:d4:82:b2:6e:71:e2:4f:99:5b:9a:b9:a1:1d:e5:34:7f:
         f6:08:36:7a:20:ad:33:c7:7d:d0:d4:95:d0:7c:15:ec:be:b1:
         a8:39:e9:af:13:f1:4c:b8:ab:41:7f:fd:d1:82:74:08:2b:72:
         81:0c:63:0b:2c:2c:73:14:1f:06:97:e4:9c:39:f4:fc:ed:55:
         43:6f:35:53:b2:87:b8:09:cd:18:b9:7b:12:7e:f0:cf:5c:2c:
         1a:7d:98:d9:06:e7:d4:6c:10:41:be:c6:f5:13:d4:89:02:4d:
         86:cf:f4:9c:96:4e:8c:55:f5:1e:12:11:ea:db:6b:f2:55:1c:
         e6:13:f4:f6:d6:14:e9:5e:c9:58:2f:ff:47:b7:7d:5b:8c:e6:
         00:ff:b3:20:f7:89:25:95:ea:da:4e:8a:1f:63:7b:60:5c:17:
         ce:0a:27:3d:86:4a:34:46:e8:9e:58:b4:88:52:fc:5c:8d:f6:
         67:21:89:6b:97:19:0c:c6:79:1a:b0:6c:50:fe:a2:c2:3f:99:
         4a:f0:49:cc:4e:68:61:3d:9d:76:4e:d8:5e:96:67:9d:70:b3:
         a8:99:95:97:0b:a7:fc:7b:dc:c7:58:61:74:e9:cd:f0:e0:c7:
         fb:cd:6f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----