Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/323830343a363834343a3a2f33322d3438203d3e20323639363831.roa
File:                     323830343a363834343a3a2f33322d3438203d3e20323639363831.roa (raw, json)
Hash identifier:          +GDHYQC5jB4UkVmhe12ztl5xRt/tmyL+bz2Gqzy4Zx8=
Subject key identifier:   05:50:0E:4A:1D:B3:E2:22:C9:67:F2:0F:91:71:CA:BD:70:8F:89:40
Certificate issuer:       /CN=1EFFCE8480188138CE6428270E5D1F413360AD3C
Certificate serial:       1C54AA515ABE8EF48EB54BB917ABA7F1DB9C6F29
Authority key identifier: 1E:FF:CE:84:80:18:81:38:CE:64:28:27:0E:5D:1F:41:33:60:AD:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EFFCE8480188138CE6428270E5D1F413360AD3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/323830343a363834343a3a2f33322d3438203d3e20323639363831.roa
Signing time:             Thu 10 Oct 2024 00:02:39 +0000
ROA not before:           Wed 09 Oct 2024 23:57:39 +0000
ROA not after:            Thu 09 Oct 2025 00:02:39 +0000
asID:                     269681
IP address blocks:        2804:6844::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:54:aa:51:5a:be:8e:f4:8e:b5:4b:b9:17:ab:a7:f1:db:9c:6f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EFFCE8480188138CE6428270E5D1F413360AD3C
        Validity
            Not Before: Oct  9 23:57:39 2024 GMT
            Not After : Oct  9 00:02:39 2025 GMT
        Subject: CN=05500E4A1DB3E222C967F20F9171CABD708F8940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:fc:fd:43:cc:e5:b0:03:37:4e:84:b5:5c:
                    61:5b:53:09:72:97:6f:4c:d6:86:c8:48:c5:1e:12:
                    0f:ae:f1:31:16:dd:ca:68:3d:5d:e3:65:20:7d:be:
                    b0:5e:25:63:21:a6:60:57:2a:c0:b1:b9:46:4c:84:
                    95:b9:fd:2e:0e:de:04:58:c8:9b:e3:f3:3d:57:40:
                    1a:22:48:1c:9f:f4:07:1d:7c:ef:c1:b0:b8:cb:02:
                    4b:5b:44:72:5f:58:50:87:07:e0:a3:fb:54:97:65:
                    c3:78:bd:05:5b:6e:95:80:8e:1a:e6:38:09:23:dc:
                    74:db:25:a3:8a:ab:af:1c:96:c3:62:6f:d7:cb:14:
                    be:81:c7:76:57:f9:4e:1e:19:d1:13:ab:c7:c8:6f:
                    5a:41:0f:10:5d:bc:64:2c:82:c0:43:25:6b:a5:85:
                    16:ef:2a:21:23:65:c0:19:c9:6d:32:22:c7:06:f2:
                    e5:30:78:64:84:23:60:cc:dd:15:47:43:39:71:2b:
                    98:58:08:09:38:42:26:88:f2:74:ea:74:63:56:3a:
                    c0:52:b0:17:ce:2c:4f:27:c0:5d:d9:4d:ec:a7:5c:
                    32:0d:76:87:d3:c8:74:7c:b9:ec:e7:dc:9e:0b:25:
                    80:91:06:6f:3c:83:01:0a:d9:77:5e:55:75:3f:b1:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:50:0E:4A:1D:B3:E2:22:C9:67:F2:0F:91:71:CA:BD:70:8F:89:40
            X509v3 Authority Key Identifier:
                keyid:1E:FF:CE:84:80:18:81:38:CE:64:28:27:0E:5D:1F:41:33:60:AD:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/1EFFCE8480188138CE6428270E5D1F413360AD3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EFFCE8480188138CE6428270E5D1F413360AD3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/323830343a363834343a3a2f33322d3438203d3e20323639363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6844::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:24:04:ab:d9:34:d3:ff:2b:c8:16:3d:90:bd:f3:21:01:5f:
         c4:7f:40:fd:9b:35:3f:45:1a:27:3e:39:22:55:a5:11:fa:4f:
         6f:05:b1:ab:04:39:35:e6:6f:7e:3f:db:24:b3:47:70:dd:2c:
         4d:97:34:96:65:96:c5:b7:f9:91:27:d7:ae:f2:7d:79:f6:81:
         2d:4a:ff:5e:f0:8a:47:d4:8f:47:a7:24:41:1d:b1:bb:e4:10:
         ae:6f:14:44:87:af:d8:e8:f4:20:18:66:60:55:cc:9c:86:8b:
         08:67:85:45:80:90:01:a6:90:ec:31:0a:16:50:f0:6f:45:77:
         bc:b5:ed:7f:94:0b:75:e9:fc:2d:f3:13:ee:ae:44:fc:93:41:
         b5:d3:3f:1e:20:b1:d1:7c:0f:71:e8:bd:d3:0e:04:bc:17:cc:
         78:74:ca:8f:87:7f:f5:a9:14:2b:ac:e8:71:78:56:e5:9c:a2:
         c0:7f:68:f4:b7:85:e3:7e:d0:f6:9c:28:13:04:93:be:d1:50:
         7c:fc:97:0c:63:06:49:4e:0b:f0:3f:59:18:47:d6:58:09:34:
         77:31:52:a8:6d:5b:6f:94:cf:ec:46:49:cf:fb:b5:cb:77:b5:
         d2:6a:69:b1:cf:8b:57:ee:57:50:b9:24:fe:c6:c6:e5:30:86:
         74:8a:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----