Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a3a2f33332d3333203d3e20323633353733.roa
File:                     323830343a6634303a3a2f33332d3333203d3e20323633353733.roa (raw, json)
Hash identifier:          x7f5vA3t0KqrDNzfPR2GiFwaPfJeiLicsDxnUFHME3g=
Subject key identifier:   0A:2C:DC:EC:82:3C:BD:37:D2:0A:6B:3F:32:92:75:96:83:65:B8:0F
Certificate issuer:       /CN=A45DD70E2EF647983066A1251557308D780CDF5E
Certificate serial:       4226E9B1743E60EC08C2BB10FFCCC17AC450CE66
Authority key identifier: A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a3a2f33332d3333203d3e20323633353733.roa
Signing time:             Wed 12 Jul 2023 14:20:08 +0000
ROA not before:           Wed 12 Jul 2023 14:15:08 +0000
ROA not after:            Wed 10 Jul 2024 14:20:08 +0000
asID:                     263573
IP address blocks:        2804:f40::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:26:e9:b1:74:3e:60:ec:08:c2:bb:10:ff:cc:c1:7a:c4:50:ce:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45DD70E2EF647983066A1251557308D780CDF5E
        Validity
            Not Before: Jul 12 14:15:08 2023 GMT
            Not After : Jul 10 14:20:08 2024 GMT
        Subject: CN=0A2CDCEC823CBD37D20A6B3F329275968365B80F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:1b:00:38:2b:7e:ae:ad:02:e2:a0:d0:ea:
                    6a:50:63:0f:ef:2e:4d:90:f6:54:f0:83:cf:e1:d8:
                    81:17:7b:fc:e7:49:28:d2:8a:65:2b:d0:1a:c6:24:
                    bd:ed:07:47:1c:5d:a6:be:06:97:e8:0a:bc:e7:a1:
                    bd:dc:a0:f7:d2:2d:10:44:e5:69:dc:a7:7e:2e:86:
                    68:5b:b6:aa:fc:04:ac:02:6c:d9:40:66:a1:9a:8b:
                    73:94:d4:51:31:18:90:80:cb:0f:60:27:4b:6d:e9:
                    4c:52:91:d3:7b:9f:03:f2:ed:42:78:f6:fc:ea:c5:
                    f5:d1:e8:b0:d2:06:da:da:d9:a8:88:b6:f3:f4:47:
                    ad:25:55:52:b0:39:48:80:9f:1a:b1:df:1a:d0:9b:
                    b1:7d:c3:f6:46:3e:0e:bb:45:9f:31:d6:bc:e2:69:
                    11:d6:66:4f:ee:18:09:28:6a:4a:6f:91:3c:c7:73:
                    ec:a6:98:af:db:18:b1:e4:5a:ab:04:31:e8:4a:a6:
                    37:fa:79:42:d3:b1:85:2e:da:75:7a:74:59:4a:ad:
                    97:1f:d4:14:15:c2:24:06:ba:ed:26:b9:d1:45:ac:
                    a6:e9:84:ec:1e:98:25:bf:b5:a7:ca:f1:17:8a:6b:
                    59:b3:1b:ea:4a:b7:25:8c:11:7d:4b:57:32:0f:33:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2C:DC:EC:82:3C:BD:37:D2:0A:6B:3F:32:92:75:96:83:65:B8:0F
            X509v3 Authority Key Identifier:
                keyid:A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/A45DD70E2EF647983066A1251557308D780CDF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a3a2f33332d3333203d3e20323633353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f40::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:25:5f:d6:31:12:68:52:28:a3:2f:dc:dc:0c:80:99:8e:7f:
         5d:12:02:39:75:8c:7d:63:20:1e:3f:b5:08:ce:55:c5:f4:40:
         d9:c7:a0:12:ba:79:97:06:66:e9:6c:b9:46:a9:e2:e5:e5:bb:
         6f:e9:a1:f8:84:53:a9:96:bc:04:0b:64:d4:2d:cb:1c:d8:3a:
         3b:14:42:24:d0:3b:58:58:84:74:b7:f9:76:d2:5f:a4:df:33:
         9e:0c:81:5a:6f:04:df:32:83:b3:d6:06:48:3c:34:a8:79:0c:
         a5:e2:d1:83:14:3c:af:b9:aa:e3:d9:2d:89:62:b1:c2:09:2f:
         70:a3:27:e7:0d:2d:d6:c6:2e:56:91:e0:7c:93:cd:1d:44:b6:
         dd:af:52:0b:ca:c9:63:b7:eb:d4:fb:17:83:8e:2a:11:6a:ae:
         29:40:e9:77:d4:71:52:bf:b3:c4:35:71:bc:4e:04:8a:e8:d3:
         38:35:b3:5e:1b:5a:d7:12:a9:5b:3b:b4:4a:7a:fe:3c:30:a5:
         8b:9d:3b:5a:eb:3d:bf:09:e2:69:b0:8f:6d:d0:bb:26:09:88:
         49:d5:00:55:26:a8:62:45:d5:54:43:55:c2:bb:9a:18:76:d5:
         ba:7c:36:32:d3:82:1a:29:1d:a8:6d:53:c6:ad:19:d2:9d:02:
         e2:5c:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----