Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/323830343a316437633a383030303a3a2f33332d3333203d3e20323634333733.roa
File:                     323830343a316437633a383030303a3a2f33332d3333203d3e20323634333733.roa (raw, json)
Hash identifier:          B3ZyYPg6y1kF7cIf7x4Nk7z64r8tqqOR2MgJUJYZat8=
Subject key identifier:   89:DF:FB:DE:15:50:BD:B3:C0:D5:47:03:44:2B:74:AD:1B:6E:D0:A7
Certificate issuer:       /CN=C0103B8E7179240C3C384BF92594051EBD742508
Certificate serial:       5B9205BC96D7D443AF093899EB623160D67DBDEB
Authority key identifier: C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/323830343a316437633a383030303a3a2f33332d3333203d3e20323634333733.roa
Signing time:             Mon 16 Dec 2024 18:38:03 +0000
ROA not before:           Mon 16 Dec 2024 18:33:03 +0000
ROA not after:            Mon 15 Dec 2025 18:38:03 +0000
asID:                     264373
IP address blocks:        2804:1d7c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:92:05:bc:96:d7:d4:43:af:09:38:99:eb:62:31:60:d6:7d:bd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0103B8E7179240C3C384BF92594051EBD742508
        Validity
            Not Before: Dec 16 18:33:03 2024 GMT
            Not After : Dec 15 18:38:03 2025 GMT
        Subject: CN=89DFFBDE1550BDB3C0D54703442B74AD1B6ED0A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:00:22:0b:12:d7:1c:c4:9b:b3:f0:1c:85:
                    9d:39:cb:c7:89:b4:dc:0e:d1:b9:30:51:c9:48:ed:
                    83:31:ca:13:b2:d7:fe:9d:52:43:0d:62:56:d8:5f:
                    48:97:d8:af:38:cd:89:b1:00:1d:15:21:b8:a4:c4:
                    e2:b9:6e:96:c3:0c:b9:e2:71:3f:a0:93:2e:aa:4c:
                    90:46:c4:0d:e1:2b:29:5b:ac:c8:8e:be:49:fd:87:
                    d8:f9:e4:f1:5e:80:88:c0:fe:d6:49:61:eb:38:55:
                    6f:fb:4d:40:42:48:6b:39:01:ee:3e:19:d6:85:0f:
                    aa:f4:ee:a4:ba:2f:f3:15:32:b8:e2:3c:da:88:bf:
                    98:db:bb:b7:ef:85:e8:62:6b:34:da:28:40:12:03:
                    a8:6b:99:2c:80:55:79:c8:a7:5f:90:1a:87:be:f9:
                    0d:ea:77:3a:7b:4d:56:62:ba:98:6f:0b:a8:45:5d:
                    a8:1b:1f:51:b4:d6:12:93:56:bb:5d:3e:18:50:26:
                    de:ee:2a:d9:28:c9:d8:6e:4d:a6:7d:15:51:f0:6a:
                    ee:01:f2:d9:b4:69:37:bf:8c:1f:e4:d9:2a:bd:d2:
                    5d:dd:10:58:9f:74:3f:61:99:3c:8a:bd:30:05:1b:
                    65:a1:e2:cb:df:88:ab:cd:4f:d3:81:9a:d9:e3:9b:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DF:FB:DE:15:50:BD:B3:C0:D5:47:03:44:2B:74:AD:1B:6E:D0:A7
            X509v3 Authority Key Identifier:
                keyid:C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/C0103B8E7179240C3C384BF92594051EBD742508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/323830343a316437633a383030303a3a2f33332d3333203d3e20323634333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d7c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         62:85:39:b9:fa:1e:b4:40:59:df:cc:6a:c9:04:2f:80:56:03:
         bc:c7:78:b1:f7:4c:4d:29:3a:d6:b0:57:4d:6b:c9:f2:f7:ac:
         48:08:b3:b3:09:5c:b2:26:30:ce:9b:0f:4f:cd:58:97:3f:0c:
         5d:48:e1:5f:2f:24:fe:3a:6e:f3:51:f2:d7:c1:d0:75:21:88:
         65:26:dd:00:5b:7c:c1:70:e1:3d:71:d3:9e:e2:53:81:7c:21:
         95:b5:08:76:6b:d0:09:0d:16:74:b5:5e:13:fd:43:13:f2:df:
         a2:da:01:7f:da:f6:c1:08:ba:63:08:4a:c2:a8:4a:a8:1e:ba:
         3c:23:c3:c3:f0:78:0a:3e:af:d0:77:d3:52:63:e0:e2:18:96:
         c9:58:07:de:00:1f:fd:96:1a:f6:7a:3d:95:5e:a4:5d:6e:b6:
         5f:2e:7e:6a:02:ff:5b:6b:5a:66:e9:44:81:c4:1f:d2:48:8a:
         40:88:67:26:d5:60:22:d3:61:f7:b0:78:76:d1:57:69:04:c9:
         3a:b1:5b:1d:72:ae:28:8d:85:e3:21:dd:70:ba:e6:29:8d:9a:
         e6:43:8d:8c:4b:bd:7c:81:03:cb:84:20:1f:70:b6:fd:6a:8c:
         5a:60:e1:2c:f6:9f:23:8e:d1:3e:2f:de:fd:ea:7f:82:a4:9d:
         db:e9:90:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----