Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/323830343a316530303a3a2f33322d3438203d3e203532353636.roa
File:                     323830343a316530303a3a2f33322d3438203d3e203532353636.roa (raw, json)
Hash identifier:          Vf6PqJ97mxPnotgeVZTQuFOA82Vl+QqkDjXj+1I/eeU=
Subject key identifier:   EC:78:30:80:28:2F:91:B3:45:AC:5B:D6:34:88:9A:C8:80:45:1B:16
Certificate issuer:       /CN=14B962ABE21D40B706A7569A8F9E3D36A760B30A
Certificate serial:       34C6C3B2D93C07DA1DE195C9DFB593D6C835A72B
Authority key identifier: 14:B9:62:AB:E2:1D:40:B7:06:A7:56:9A:8F:9E:3D:36:A7:60:B3:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14B962ABE21D40B706A7569A8F9E3D36A760B30A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/323830343a316530303a3a2f33322d3438203d3e203532353636.roa
Signing time:             Sat 27 Jul 2024 23:20:19 +0000
ROA not before:           Sat 27 Jul 2024 23:15:19 +0000
ROA not after:            Sat 26 Jul 2025 23:20:19 +0000
asID:                     52566
IP address blocks:        2804:1e00::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c6:c3:b2:d9:3c:07:da:1d:e1:95:c9:df:b5:93:d6:c8:35:a7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14B962ABE21D40B706A7569A8F9E3D36A760B30A
        Validity
            Not Before: Jul 27 23:15:19 2024 GMT
            Not After : Jul 26 23:20:19 2025 GMT
        Subject: CN=EC783080282F91B345AC5BD634889AC880451B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:06:21:ef:2d:fa:62:33:d8:79:d8:7b:37:51:
                    ae:e9:0a:4c:4f:24:2a:b0:94:a9:85:93:29:40:5e:
                    b9:af:54:f1:c7:be:b5:b4:cb:a8:8d:df:8e:4b:e9:
                    01:82:e9:c3:d9:9d:46:5b:56:14:cc:81:74:a1:a8:
                    5d:e8:54:73:9e:2e:73:4d:5b:4a:3c:54:e4:e3:ed:
                    bf:b2:d5:9a:1a:fe:d3:2d:40:9d:97:a5:17:6c:71:
                    04:d5:4d:87:e0:a0:4b:80:ce:23:b0:21:e4:e3:db:
                    bd:ec:f6:08:5d:d0:76:0a:12:0f:f1:83:ac:fc:57:
                    fa:09:13:ec:ec:51:97:e9:7e:22:47:1b:65:d0:ef:
                    e2:cb:03:ce:23:77:92:48:a0:8d:10:f5:22:7a:1f:
                    8c:fd:ab:0e:78:0e:ee:11:d0:af:ac:c1:4c:bd:15:
                    6f:1d:3e:fb:2e:0c:af:ef:23:8e:5e:2f:0f:c8:c8:
                    81:a5:16:12:73:eb:7b:27:9a:46:e7:96:75:52:8a:
                    5f:f8:e4:e4:dd:7d:5a:96:f3:2f:fb:71:ff:1b:e6:
                    ff:b9:05:12:e5:d9:76:ca:35:f0:7e:71:25:99:c3:
                    a6:38:d6:96:15:aa:b2:31:28:bf:8d:84:1b:93:4f:
                    c5:1a:73:53:07:a4:52:40:57:3b:59:75:d5:56:4b:
                    a1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:78:30:80:28:2F:91:B3:45:AC:5B:D6:34:88:9A:C8:80:45:1B:16
            X509v3 Authority Key Identifier:
                keyid:14:B9:62:AB:E2:1D:40:B7:06:A7:56:9A:8F:9E:3D:36:A7:60:B3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/14B962ABE21D40B706A7569A8F9E3D36A760B30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14B962ABE21D40B706A7569A8F9E3D36A760B30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/323830343a316530303a3a2f33322d3438203d3e203532353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:1f:2e:e1:d5:7d:3e:6f:4b:1e:84:1e:1b:a9:48:ac:9a:6c:
         ba:97:3b:dd:ab:99:83:1e:14:1b:5d:4e:12:a2:f1:59:4a:22:
         7b:99:a4:60:7f:44:cc:f5:f0:f9:48:c3:34:22:33:bb:ff:41:
         a2:66:14:a6:9f:b1:d8:44:94:28:45:cc:c3:35:17:5d:8e:ef:
         f1:aa:63:19:9f:c3:26:c5:40:b9:8a:6e:33:3a:04:27:5d:90:
         59:87:14:05:0c:53:c4:85:e0:f6:9e:ec:26:1f:c3:6b:e7:96:
         83:90:2a:cb:4c:7c:39:d4:3e:86:1e:ab:d6:00:5a:ee:f0:ba:
         0c:68:4d:b6:ec:de:b3:e7:23:ec:a8:a1:1f:09:f0:44:c1:17:
         55:b3:38:db:82:07:a6:e8:16:bf:87:60:99:bb:0d:7c:b4:10:
         e5:31:5b:0e:87:1c:75:ca:54:5b:c7:ff:4e:ba:53:9f:6d:b3:
         e1:96:27:81:41:c3:75:1c:76:90:75:55:b2:96:fb:71:72:5d:
         a5:62:54:7e:ee:26:84:d6:a7:ad:9e:ab:53:47:01:10:93:68:
         2b:42:63:9b:1d:cf:af:ab:60:eb:9d:e3:51:84:00:a3:97:2b:
         a4:a0:7f:4b:0c:af:26:e8:cd:89:15:d3:03:0f:d0:f8:3a:4f:
         a1:f0:8b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----