Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYGWenfmfEwAVowtMTK6uH6F7C6otqFLqAF5rFnha264/0/323830343a323065633a3a2f33322d3336203d3e20323634353231.roa
File:                     323830343a323065633a3a2f33322d3336203d3e20323634353231.roa (raw, json)
Hash identifier:          sNss+KUUTsYflRPPrYyEKpT/DjED42/qUraZeGwe3l8=
Subject key identifier:   64:5E:E9:D4:40:6D:5C:CC:AF:09:D9:D1:8C:E2:C6:3F:42:BF:89:25
Certificate issuer:       /CN=5590E7442A6BC0AF4641BB5E09FEDCA90A20D666
Certificate serial:       354AE6AC4038F3546C9E48E1893214C8537EFD6A
Authority key identifier: 55:90:E7:44:2A:6B:C0:AF:46:41:BB:5E:09:FE:DC:A9:0A:20:D6:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5590E7442A6BC0AF4641BB5E09FEDCA90A20D666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYGWenfmfEwAVowtMTK6uH6F7C6otqFLqAF5rFnha264/0/323830343a323065633a3a2f33322d3336203d3e20323634353231.roa
Signing time:             Fri 21 Jun 2024 11:48:14 +0000
ROA not before:           Fri 21 Jun 2024 11:43:14 +0000
ROA not after:            Fri 20 Jun 2025 11:48:14 +0000
asID:                     264521
IP address blocks:        2804:20ec::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4a:e6:ac:40:38:f3:54:6c:9e:48:e1:89:32:14:c8:53:7e:fd:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5590E7442A6BC0AF4641BB5E09FEDCA90A20D666
        Validity
            Not Before: Jun 21 11:43:14 2024 GMT
            Not After : Jun 20 11:48:14 2025 GMT
        Subject: CN=645EE9D4406D5CCCAF09D9D18CE2C63F42BF8925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:52:34:9b:5a:69:43:d5:33:3b:f6:9f:a1:
                    e1:b2:e8:4e:57:e9:db:f7:a0:da:24:9a:e9:b2:77:
                    b9:39:35:97:4b:04:38:a5:49:59:da:9f:a3:20:61:
                    5d:65:d5:8a:89:ba:43:e0:78:39:00:41:de:b2:4a:
                    f9:64:21:67:77:fb:40:fc:f3:b8:82:a8:93:35:19:
                    4f:e8:66:9c:4b:85:fd:83:07:f7:6c:f2:80:29:64:
                    50:9a:05:41:ce:5a:14:e8:77:42:af:52:57:b5:73:
                    5f:f2:b4:7a:98:c1:d9:6b:5a:48:e7:b2:37:cb:1f:
                    be:14:94:b8:f2:7d:91:37:50:2f:c0:57:f7:12:59:
                    7a:71:a1:68:6a:e5:68:95:03:02:cb:1f:1e:1f:7d:
                    4b:d0:19:ec:e9:9b:c3:b2:8e:8b:52:ea:c8:d4:6b:
                    f8:fd:e6:8e:5f:b9:5f:56:ec:97:5f:ef:3c:f1:9c:
                    ec:77:6d:1a:9c:cb:f6:56:ce:85:55:d7:41:e1:30:
                    29:c6:9f:4a:40:f8:51:51:52:83:49:e4:07:f5:78:
                    e9:65:96:5a:73:e1:fd:d7:f5:93:f8:30:f9:50:97:
                    08:49:18:92:4c:d3:fb:76:3e:6d:9a:7d:7e:98:1d:
                    13:b1:b2:7f:77:5b:3a:8f:34:f6:29:a8:19:71:76:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5E:E9:D4:40:6D:5C:CC:AF:09:D9:D1:8C:E2:C6:3F:42:BF:89:25
            X509v3 Authority Key Identifier:
                keyid:55:90:E7:44:2A:6B:C0:AF:46:41:BB:5E:09:FE:DC:A9:0A:20:D6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYGWenfmfEwAVowtMTK6uH6F7C6otqFLqAF5rFnha264/0/5590E7442A6BC0AF4641BB5E09FEDCA90A20D666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5590E7442A6BC0AF4641BB5E09FEDCA90A20D666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYGWenfmfEwAVowtMTK6uH6F7C6otqFLqAF5rFnha264/0/323830343a323065633a3a2f33322d3336203d3e20323634353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:9f:25:2e:b9:3c:a3:eb:eb:49:7c:84:02:00:2a:e7:0d:a6:
         32:21:e0:9b:de:00:5f:7f:af:51:d9:b3:04:a8:3a:58:69:79:
         31:0b:4b:cd:3a:36:12:83:41:ae:cf:af:28:82:86:20:03:f6:
         3e:70:47:5a:f3:1c:12:3c:99:f9:8d:73:6e:6b:01:17:f6:d9:
         02:ad:62:74:77:62:14:bb:44:7a:f4:10:e9:98:55:9d:99:b5:
         a7:37:c3:2f:c6:d9:a7:4e:a8:ed:e9:ba:00:b5:12:6a:c4:fc:
         a4:45:0b:24:85:49:cb:9c:03:0c:f1:91:7f:07:3b:54:d8:94:
         8f:60:2e:f8:e7:dd:b7:4e:db:0a:4a:f9:6d:f7:2d:31:5e:e1:
         85:12:74:e6:e1:55:49:c0:67:bc:cd:c1:e1:8c:c9:f7:a4:1e:
         ca:f3:a0:2d:ba:0c:9e:78:30:0b:4f:65:25:e5:a4:f7:66:a0:
         8a:3f:2c:b0:a5:de:12:c4:50:17:0f:b8:1b:bd:9c:37:cc:28:
         4e:05:d5:a5:5b:06:dd:20:f1:91:aa:58:41:1d:31:02:d4:a8:
         00:23:21:8b:8c:c8:10:b1:0f:4b:83:1b:ca:2f:7c:60:dd:f5:
         0a:15:4c:49:50:d6:0e:99:9f:1a:69:a4:41:ac:71:9f:47:93:
         98:5d:12:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----