Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a33323a3a2f34382d3438203d3e20323638383039.roa
File:                     323830343a356166343a33323a3a2f34382d3438203d3e20323638383039.roa (raw, json)
Hash identifier:          zciQQK5ikHJ5bd3SVQniWKFB1UZ3WZaYo2lDD8+hsKU=
Subject key identifier:   B0:58:78:19:AB:CB:22:95:E1:57:C7:F3:AB:28:FB:FF:CF:D7:44:F9
Certificate issuer:       /CN=B37291E6021BB75C026BEA016CB480944391AEB5
Certificate serial:       19C9DF509CFB12597020531BCA6ABA225295255E
Authority key identifier: B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a33323a3a2f34382d3438203d3e20323638383039.roa
Signing time:             Tue 20 Aug 2024 14:00:56 +0000
ROA not before:           Tue 20 Aug 2024 13:55:56 +0000
ROA not after:            Tue 19 Aug 2025 14:00:56 +0000
asID:                     268809
IP address blocks:        2804:5af4:32::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c9:df:50:9c:fb:12:59:70:20:53:1b:ca:6a:ba:22:52:95:25:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B37291E6021BB75C026BEA016CB480944391AEB5
        Validity
            Not Before: Aug 20 13:55:56 2024 GMT
            Not After : Aug 19 14:00:56 2025 GMT
        Subject: CN=B0587819ABCB2295E157C7F3AB28FBFFCFD744F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:86:9f:91:de:56:59:8c:70:57:42:5e:ed:
                    54:e4:ad:4c:3b:ae:a6:bb:9c:30:b0:2b:83:34:ac:
                    51:62:a2:a8:e4:0c:51:14:38:ca:b0:f6:c2:c7:2a:
                    a2:f5:37:d7:e1:32:d5:da:17:f9:8c:9a:36:3a:91:
                    90:76:f1:d4:fe:13:a9:05:9b:65:e6:53:74:99:e2:
                    74:e8:a9:92:de:4a:ed:f4:9e:c4:5d:f9:64:ef:71:
                    94:2a:b8:5c:32:20:97:44:ce:c0:c6:c6:f7:4e:26:
                    ac:0b:d1:77:47:28:89:8f:73:5f:be:71:c6:20:96:
                    c7:53:cb:2e:19:ed:44:b1:8f:31:b9:a7:ee:a2:8f:
                    8e:20:3d:a3:e3:0f:74:25:09:60:83:c4:7f:1f:62:
                    14:66:ee:32:a3:8a:33:a3:a3:f4:da:60:56:d5:09:
                    f0:9f:e9:be:f4:43:75:4f:f8:ce:1c:97:be:cd:63:
                    ee:69:cf:50:63:d3:fb:16:64:42:20:26:a1:66:ed:
                    cf:0d:97:d7:39:a1:8c:9c:1b:6f:1d:22:aa:2f:f2:
                    cd:c8:8d:ea:ce:40:06:c0:c2:84:6d:90:54:6f:3c:
                    88:b8:96:e2:28:8e:8f:ab:f7:2a:61:39:d9:5f:3a:
                    f1:98:03:8d:cc:11:98:f6:4b:e5:db:90:c0:35:78:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:58:78:19:AB:CB:22:95:E1:57:C7:F3:AB:28:FB:FF:CF:D7:44:F9
            X509v3 Authority Key Identifier:
                keyid:B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B37291E6021BB75C026BEA016CB480944391AEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a33323a3a2f34382d3438203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5af4:32::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:fa:81:4a:05:4d:ce:48:23:dc:fd:34:f4:0e:71:33:8c:b8:
         d5:7d:2e:77:cf:b3:ef:56:3e:4d:6c:54:31:64:be:f0:07:71:
         88:62:bb:75:a8:d5:eb:ea:e3:88:f7:4a:7b:f6:09:83:ab:3a:
         3f:c8:85:6f:98:e3:e4:3c:fb:88:94:15:fd:87:21:4b:7e:82:
         52:43:d5:39:ea:8c:1d:f9:95:4e:8e:ab:5f:bf:ce:e9:0c:08:
         dd:99:0e:10:f4:e8:0f:33:b0:28:32:b5:d5:4f:ce:a2:1b:b7:
         14:ff:55:2c:14:1a:50:38:d9:35:3f:1e:27:65:46:44:2a:72:
         fc:78:8c:be:3f:b0:7c:47:2f:3b:f2:cc:78:7d:d3:ff:a1:3c:
         63:e1:0a:f4:83:85:b4:a4:47:77:ef:46:91:ee:1c:fa:81:eb:
         3c:14:41:ee:3e:de:50:cd:72:ed:8d:14:36:0d:43:61:85:5a:
         ca:ae:b2:00:f5:fa:e0:20:7f:cd:33:07:0a:68:44:ed:80:bf:
         74:e3:8e:36:3e:3f:b8:53:74:92:27:3e:ca:08:d7:40:e5:36:
         23:56:f8:c6:92:48:0f:11:6f:b2:a2:38:88:71:bc:c9:4b:be:
         08:29:7d:b8:34:eb:86:aa:b3:d8:9a:3e:22:79:78:0a:0e:f6:
         21:2b:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----