Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/323830313a61343a3a2f33322d3335203d3e20323632373432.roa
File:                     323830313a61343a3a2f33322d3335203d3e20323632373432.roa (raw, json)
Hash identifier:          r+jqCzp6hpubJr2YuUfHoic46U41xT5X5YHloJjjn7I=
Subject key identifier:   A1:B9:C2:10:C1:3E:AB:A9:A1:C6:CC:0D:33:94:1C:E9:DB:2D:40:B8
Certificate issuer:       /CN=0BFDC3A598A7E4C26811166F6E8FA25023A020F3
Certificate serial:       4E278722C45F73634FE9E0CB1FC25FDE689C7138
Authority key identifier: 0B:FD:C3:A5:98:A7:E4:C2:68:11:16:6F:6E:8F:A2:50:23:A0:20:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/323830313a61343a3a2f33322d3335203d3e20323632373432.roa
Signing time:             Thu 06 Mar 2025 16:17:08 +0000
ROA not before:           Thu 06 Mar 2025 16:12:08 +0000
ROA not after:            Thu 05 Mar 2026 16:17:08 +0000
asID:                     262742
IP address blocks:        2801:a4::/32 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:27:87:22:c4:5f:73:63:4f:e9:e0:cb:1f:c2:5f:de:68:9c:71:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BFDC3A598A7E4C26811166F6E8FA25023A020F3
        Validity
            Not Before: Mar  6 16:12:08 2025 GMT
            Not After : Mar  5 16:17:08 2026 GMT
        Subject: CN=A1B9C210C13EABA9A1C6CC0D33941CE9DB2D40B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2b:bb:23:65:a9:ac:f2:2d:aa:c7:2f:74:25:
                    d8:59:3c:54:43:fb:41:a3:2e:67:7c:e2:86:20:ec:
                    b4:81:04:41:f8:ec:7a:6e:b5:b8:50:fe:c5:4d:15:
                    b6:4f:c3:04:82:08:b3:0d:04:07:2d:d8:e0:b3:5a:
                    ea:d6:ee:86:18:e6:9e:83:e6:b4:63:ba:80:cf:65:
                    78:8e:99:d4:41:9d:9c:b4:b6:dd:5e:ec:55:12:05:
                    a2:7f:ce:db:40:35:17:b9:80:aa:41:32:2b:86:50:
                    9e:ce:d6:8e:f4:b4:f3:1e:f2:29:8e:9a:fd:72:e0:
                    79:52:dd:3f:a6:a3:c7:a2:ae:69:89:74:cf:d5:f7:
                    49:34:04:f8:51:4a:6c:2e:88:43:34:7c:f0:dd:56:
                    ae:5a:f5:44:53:0c:db:8c:43:0d:d6:4a:8a:7b:5e:
                    01:6e:a1:f3:34:5c:a3:be:56:c5:a5:dc:a6:79:a4:
                    82:7b:94:4a:32:1e:30:3a:4e:50:90:5f:c6:07:78:
                    92:33:3e:c1:96:b7:6f:c0:10:37:6b:cf:e1:24:d7:
                    7b:05:66:1b:41:9f:4f:56:92:1d:0d:18:b9:16:55:
                    12:ff:53:4f:3e:49:aa:e4:c5:1b:27:5f:46:ed:77:
                    a9:18:07:72:e7:b3:7b:74:ae:98:6f:72:23:91:32:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B9:C2:10:C1:3E:AB:A9:A1:C6:CC:0D:33:94:1C:E9:DB:2D:40:B8
            X509v3 Authority Key Identifier:
                keyid:0B:FD:C3:A5:98:A7:E4:C2:68:11:16:6F:6E:8F:A2:50:23:A0:20:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/323830313a61343a3a2f33322d3335203d3e20323632373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:f3:88:fe:69:f7:96:44:a3:36:7e:94:03:1c:e9:44:57:
         31:1f:4e:be:e6:13:b4:7d:c8:72:17:cc:9f:88:b5:a6:3a:55:
         9b:6a:88:0e:f1:9f:59:c7:cb:4e:11:0b:15:d6:1c:74:55:65:
         2e:b6:91:4d:3a:d1:09:34:e0:0b:7d:33:f2:dc:ab:d7:18:0e:
         ac:e5:e8:68:fb:61:0f:c2:81:80:18:fc:90:b1:c6:64:48:8a:
         a0:e6:b1:9a:5e:07:d3:f8:9e:52:cf:be:aa:22:fb:c5:13:8e:
         29:a4:e4:96:c8:b9:c2:2e:ea:cf:5d:07:7e:03:6e:62:4d:33:
         21:80:de:76:14:4d:05:19:74:54:73:13:64:b3:cd:ad:f7:3b:
         71:1c:ce:50:a2:ef:cc:b6:bf:1a:db:9e:9b:e8:60:7b:25:2d:
         bf:61:57:5d:d3:e5:39:0d:b6:14:5b:9c:01:7d:a5:94:b8:e6:
         7a:98:9f:32:63:17:e9:0c:3f:1c:25:ac:b3:5e:7e:96:5e:ad:
         a2:04:9b:50:6e:03:94:36:10:fb:99:b3:65:81:80:8b:58:88:
         cf:b8:04:c4:71:5c:8f:31:ed:26:26:9f:4b:9d:31:35:24:bd:
         a6:07:02:bd:b2:b4:7c:01:07:df:1d:8b:2a:3a:b4:3f:47:62:
         21:af:00:42
-----BEGIN CERTIFICATE-----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