Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33332d3333203d3e20323730373136.roa
File:                     323830343a373034343a3a2f33332d3333203d3e20323730373136.roa (raw, json)
Hash identifier:          1GDlnNfRUzEd39VKxd/7N/WUsB3Kz5cmAoH3/lhpGTU=
Subject key identifier:   25:29:75:6B:4C:E8:4E:71:C6:41:8C:5D:E5:10:52:7F:A7:2A:84:31
Certificate issuer:       /CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
Certificate serial:       5C8780911A6DF2878A137F6B4FAA9C13C2F6A464
Authority key identifier: 88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33332d3333203d3e20323730373136.roa
Signing time:             Tue 24 Sep 2024 21:44:54 +0000
ROA not before:           Tue 24 Sep 2024 21:39:54 +0000
ROA not after:            Tue 23 Sep 2025 21:44:54 +0000
asID:                     270716
IP address blocks:        2804:7044::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:87:80:91:1a:6d:f2:87:8a:13:7f:6b:4f:aa:9c:13:c2:f6:a4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
        Validity
            Not Before: Sep 24 21:39:54 2024 GMT
            Not After : Sep 23 21:44:54 2025 GMT
        Subject: CN=2529756B4CE84E71C6418C5DE510527FA72A8431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:e1:99:9c:cc:66:cb:05:f9:46:55:f1:25:
                    ab:97:84:b7:b3:51:18:a1:ef:b4:97:df:e8:c3:4f:
                    b7:0c:8c:e4:ea:4b:6c:6d:2b:f9:f2:a3:4d:7c:3d:
                    a9:b8:02:1f:27:c9:fb:d0:4d:cf:13:c1:3b:b5:53:
                    48:59:72:3f:78:cd:a2:2e:70:ee:63:a2:6e:c2:21:
                    ea:6a:8c:2b:6c:b4:6f:8c:c6:7e:67:07:8c:53:f8:
                    5f:39:0d:7f:b6:5f:84:56:23:86:1d:d7:14:90:64:
                    7e:5c:78:2f:d8:8e:19:a3:d6:2d:48:05:85:d7:a5:
                    8b:9d:86:3d:ba:c8:d0:3e:de:2f:1f:75:42:5a:ae:
                    1a:a9:c1:5b:3c:e1:94:91:82:b6:a2:08:55:76:9f:
                    f7:9c:4e:3d:04:75:44:ae:1f:c9:11:29:73:f7:42:
                    4a:62:2b:bb:99:4e:fc:16:7b:74:77:af:fc:ab:64:
                    38:f7:c5:f0:20:7b:67:24:63:95:e4:13:f1:08:29:
                    42:22:d0:fd:06:80:7e:c2:e4:d2:65:a7:af:3c:a1:
                    c5:ce:8a:18:9a:cc:61:13:eb:6a:f9:a7:81:8d:d1:
                    98:36:79:c2:0e:e7:90:b5:f6:8b:1e:8f:68:4e:e1:
                    a3:f0:87:2a:f5:a4:af:03:fd:84:12:07:69:93:ec:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:29:75:6B:4C:E8:4E:71:C6:41:8C:5D:E5:10:52:7F:A7:2A:84:31
            X509v3 Authority Key Identifier:
                keyid:88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33332d3333203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7044::/33

    Signature Algorithm: sha256WithRSAEncryption
         88:d2:e5:21:ff:e5:6f:61:86:08:e3:e1:a9:ce:8c:6f:24:57:
         4a:93:59:ff:81:74:9e:a6:4d:c5:b3:10:34:b7:cd:57:f5:14:
         2a:ba:2c:64:2b:0b:7b:4d:08:9b:3e:42:5a:6e:c7:8e:d7:0b:
         e5:fd:b0:e2:de:6f:cf:dc:ce:7f:04:0c:ff:2d:5e:f9:8f:9b:
         fe:22:6c:32:1a:a3:57:81:a5:31:b9:48:d6:d9:79:a4:d1:d7:
         e5:fb:63:3f:8a:b7:2a:66:e4:36:80:d0:ef:59:02:34:e5:fe:
         af:72:17:81:8d:f4:d4:bc:34:9c:6f:a1:75:45:15:d0:8f:a5:
         6d:13:29:62:f0:52:1a:ab:26:20:f3:ec:65:96:47:12:b7:3b:
         6f:6e:b1:f3:a6:da:92:c4:c3:9d:ba:e0:53:23:73:e5:0b:0c:
         62:ba:ae:62:50:ee:03:df:de:61:79:3a:08:cf:7b:e1:18:ce:
         0e:3c:90:4d:5c:45:e8:47:5e:c4:0d:00:c7:31:19:57:da:67:
         07:50:e7:24:23:3f:b3:42:66:89:a4:41:1e:bd:35:70:ba:3f:
         59:1f:e1:2d:2e:d7:cf:21:97:9a:22:05:c0:c0:aa:ce:28:fa:
         8d:b4:05:00:71:bb:18:54:ba:b1:ec:a4:99:8f:1b:36:9a:ad:
         a8:39:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----