Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3438203d3e20323633343730.roa
File:                     323830343a313235343a3a2f33322d3438203d3e20323633343730.roa (raw, json)
Hash identifier:          EFaKIak9ZYu4f2opkF2mnZFxeL+4vrthADVHagwtnlM=
Subject key identifier:   B9:D2:B9:A3:17:C5:52:FD:AA:A6:63:07:1B:F2:82:16:37:45:F8:91
Certificate issuer:       /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial:       1B3724C6154D56EB40F3B51331479C8F090CBCED
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3438203d3e20323633343730.roa
Signing time:             Thu 20 Mar 2025 16:57:22 +0000
ROA not before:           Thu 20 Mar 2025 16:52:22 +0000
ROA not after:            Thu 19 Mar 2026 16:57:22 +0000
asID:                     263470
IP address blocks:        2804:1254::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:37:24:c6:15:4d:56:eb:40:f3:b5:13:31:47:9c:8f:09:0c:bc:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
        Validity
            Not Before: Mar 20 16:52:22 2025 GMT
            Not After : Mar 19 16:57:22 2026 GMT
        Subject: CN=B9D2B9A317C552FDAAA663071BF282163745F891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3c:03:6a:8a:41:7c:f4:18:a7:b9:99:17:b7:
                    0e:c9:56:fe:52:cc:b5:df:44:7e:db:88:91:01:20:
                    ca:6e:47:a4:68:12:31:11:aa:a5:d9:a5:d8:66:e9:
                    01:83:79:a6:63:77:4c:7e:f3:b7:c4:3f:1c:2e:ea:
                    93:b9:34:8a:bf:36:de:7a:09:2a:04:bb:12:89:58:
                    36:0d:23:be:c5:7f:55:8a:5b:83:ff:52:f0:5f:96:
                    d9:d8:e6:92:ae:de:42:dc:a2:7f:1d:09:1c:df:02:
                    b2:91:69:61:d4:37:e2:80:19:00:9a:6a:3e:0e:f4:
                    80:c2:27:1c:75:86:ad:d6:a8:ba:08:26:c2:a6:40:
                    a4:85:2f:c9:5f:b6:1d:47:af:b8:25:03:4e:37:7a:
                    18:e0:ea:f7:99:5f:4d:9d:99:83:47:55:0f:87:ba:
                    1d:e9:90:b5:d3:6a:79:66:30:d9:26:55:50:18:07:
                    0b:62:cd:39:a1:8f:d7:47:e2:30:d8:18:26:f1:5f:
                    2e:63:16:90:3f:45:95:e9:c7:cd:d3:67:5e:36:f1:
                    a6:4f:9f:a7:3e:f7:5b:7e:58:52:0f:81:d6:33:27:
                    32:40:74:b5:b2:7f:20:b2:5e:64:ad:65:83:74:02:
                    e7:14:c0:21:50:a1:ff:c6:8d:7d:b3:b1:1c:c6:20:
                    3c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D2:B9:A3:17:C5:52:FD:AA:A6:63:07:1B:F2:82:16:37:45:F8:91
            X509v3 Authority Key Identifier:
                keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3438203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1254::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:9a:2c:85:66:8f:6f:24:cf:7e:aa:4d:69:a1:33:7f:06:e8:
         f2:6b:cf:22:ad:72:34:cd:4c:71:6f:5f:c0:f6:66:fa:ff:21:
         cc:80:3c:7d:40:3f:74:bc:bd:1c:cb:a7:35:51:d6:1e:95:50:
         79:47:1b:20:db:65:71:fa:c9:a4:9b:5e:d2:f7:d5:61:0e:3d:
         51:a1:40:e3:ae:b8:9e:09:ba:b3:2b:88:1e:f8:59:0c:48:fb:
         3b:b3:b2:27:98:78:a9:8b:43:11:3a:a7:13:bc:f4:09:30:1c:
         e3:9d:79:2d:7e:03:1d:b1:ea:c6:af:37:f7:f2:f6:6a:c2:e2:
         ff:55:23:c1:c5:03:44:c3:45:84:6f:a2:03:fd:63:27:f2:c8:
         cb:da:01:44:ab:a9:27:d6:f2:a3:eb:89:a1:67:ad:c2:d9:08:
         2f:43:41:b5:92:da:a0:bc:10:f4:4d:0e:4e:9b:5d:99:7f:3e:
         9f:ee:1e:20:25:a6:d7:33:ff:7e:c9:30:54:14:f4:13:2a:16:
         af:ed:6f:12:e0:19:bf:98:41:40:78:49:25:82:bd:08:33:e8:
         e3:c4:38:b7:85:10:0d:02:e5:7a:a1:87:f2:b4:5f:74:82:aa:
         bf:ed:42:35:b9:fd:8d:9f:2d:93:a8:7b:f3:38:28:b9:05:7b:
         69:97:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----