Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a3a2f33322d3332203d3e20323633363631.roa
File:                     323830343a313132383a3a2f33322d3332203d3e20323633363631.roa (raw, json)
Hash identifier:          L/9PPfrBFRAMJNqe82Q2JLoIzwX/S12UNxyxhJarDRI=
Subject key identifier:   BD:AC:A8:55:2B:DE:B8:10:90:22:A0:17:18:14:B2:81:37:C3:59:B7
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       47F4FAA24C63755873B4BB0EF0D3945EE619F360
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a3a2f33322d3332203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:22:56 +0000
ROA not before:           Mon 04 Mar 2024 21:17:56 +0000
ROA not after:            Mon 03 Mar 2025 21:22:56 +0000
asID:                     263661
IP address blocks:        2804:1128::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f4:fa:a2:4c:63:75:58:73:b4:bb:0e:f0:d3:94:5e:e6:19:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:17:56 2024 GMT
            Not After : Mar  3 21:22:56 2025 GMT
        Subject: CN=BDACA8552BDEB8109022A0171814B28137C359B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0a:3e:51:b7:93:75:e9:d9:89:8b:33:fb:e6:
                    83:ff:1b:93:35:f7:52:0e:5c:cb:40:f7:aa:61:d5:
                    d6:0a:53:c8:52:80:05:8b:31:0f:3d:c4:b5:20:d8:
                    b5:df:58:ec:61:78:57:69:27:c3:c1:ef:30:15:a5:
                    d9:89:24:a4:f7:4e:ab:46:ad:d0:f2:09:a2:dc:20:
                    a0:16:97:be:a3:e4:c9:88:e6:e1:e2:47:a0:e3:e0:
                    00:57:d1:a3:9b:85:11:09:59:3a:1d:69:3f:8b:97:
                    8c:6f:69:fc:3d:80:0d:22:86:1a:48:68:59:17:43:
                    b8:8c:93:39:c7:5c:77:a4:4c:9c:7d:3a:bb:cb:e1:
                    d1:96:63:a4:59:58:1d:a1:2a:2d:81:76:0d:63:9d:
                    c6:82:a0:3a:d8:6e:32:3b:6a:37:80:9f:19:dd:61:
                    e6:87:8f:0c:fc:d4:7d:5e:e1:e3:ad:50:1c:b6:19:
                    cb:91:6e:61:96:c7:18:64:73:63:24:ee:b5:53:bd:
                    cc:e7:6a:02:aa:47:b7:70:c0:35:e6:be:41:97:18:
                    81:d4:5f:66:36:6e:e6:83:03:90:a0:c5:8d:1f:42:
                    ff:67:bd:e0:ec:55:fb:10:08:71:b7:c0:35:f6:ef:
                    38:a4:66:30:a4:e9:13:33:35:69:b7:d6:d0:cd:02:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AC:A8:55:2B:DE:B8:10:90:22:A0:17:18:14:B2:81:37:C3:59:B7
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a3a2f33322d3332203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128::/32

    Signature Algorithm: sha256WithRSAEncryption
         e1:4a:70:7d:24:e8:cb:d2:78:12:dc:19:18:89:3b:42:44:b6:
         59:71:b2:8b:8b:21:a2:38:92:60:6b:32:68:94:a9:dd:97:54:
         b9:37:7e:6c:0f:b1:df:69:d9:8c:da:a0:31:9b:ef:f3:11:06:
         1e:da:c2:b2:be:b9:bb:88:3b:b7:12:36:a8:8c:7f:63:aa:18:
         e0:b6:ff:00:d2:a1:56:3d:ac:55:96:a6:35:6f:c5:74:44:0c:
         63:d2:2b:9c:4a:ec:52:63:2e:e7:54:73:93:ca:e8:19:51:fe:
         d9:f6:73:c8:21:ed:e6:9c:87:3d:5e:b4:71:17:af:b3:d9:80:
         c0:5e:50:ac:a6:f9:ac:29:a1:86:ee:61:8d:e1:81:bd:ee:ec:
         ea:3a:3f:fe:dd:5a:2d:5d:fd:46:0f:75:bf:73:26:66:f7:8a:
         8e:b3:2b:7f:4c:e4:00:6f:c4:4a:44:48:94:db:41:0e:f6:3e:
         db:55:90:c2:59:7d:b4:d6:9e:62:d3:46:5c:88:29:b8:75:4b:
         b9:f8:a7:9c:22:09:0e:3c:84:cc:b3:96:7a:ac:b1:24:f9:83:
         03:64:bf:81:0e:ad:61:18:18:d3:e9:87:d4:71:ef:25:7c:1f:
         6c:a0:7f:18:bb:f0:ed:03:b7:64:c5:90:28:4f:c7:d5:fd:b4:
         3b:70:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----