Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/323830343a333735633a3a2f33322d3634203d3e20323636343036.roa
File:                     323830343a333735633a3a2f33322d3634203d3e20323636343036.roa (raw, json)
Hash identifier:          36ClnzG08L8P8GHbEdYDzXke1HyMoQmFHCiCub49v/4=
Subject key identifier:   3F:9A:F9:37:31:41:9D:59:86:AE:14:C7:3A:E9:51:DF:04:9B:71:D6
Certificate issuer:       /CN=3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D
Certificate serial:       1EA8BFA1F882D84279A273D578BA9C5EF198E25A
Authority key identifier: 3E:32:FB:0E:A1:4C:66:D3:AE:07:1D:BE:07:6F:53:DC:CF:58:E1:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/323830343a333735633a3a2f33322d3634203d3e20323636343036.roa
Signing time:             Mon 07 Oct 2024 17:03:00 +0000
ROA not before:           Mon 07 Oct 2024 16:58:00 +0000
ROA not after:            Mon 06 Oct 2025 17:03:00 +0000
asID:                     266406
IP address blocks:        2804:375c::/32 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a8:bf:a1:f8:82:d8:42:79:a2:73:d5:78:ba:9c:5e:f1:98:e2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D
        Validity
            Not Before: Oct  7 16:58:00 2024 GMT
            Not After : Oct  6 17:03:00 2025 GMT
        Subject: CN=3F9AF93731419D5986AE14C73AE951DF049B71D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:b8:2e:10:1e:f8:1a:dc:fd:70:3b:2a:85:
                    40:48:59:86:28:41:ff:c5:49:ea:b5:d2:76:c1:96:
                    0a:88:38:53:5e:32:61:01:17:ba:2c:c8:fb:33:83:
                    45:35:82:ac:4e:0b:ed:06:19:f0:96:71:47:ec:8b:
                    f2:e3:26:67:fd:ba:96:75:78:5f:25:62:6b:37:03:
                    ea:e0:85:9a:01:6a:e7:6b:17:bf:24:af:b8:1f:a7:
                    8f:1c:84:3c:7e:e9:26:e1:c5:1c:96:a7:86:d6:ee:
                    c0:1f:03:bc:ba:ee:7b:a9:07:c2:ae:7e:96:ca:83:
                    07:3c:11:ac:24:d8:59:d3:d6:f1:9a:47:31:a2:2d:
                    f1:ce:60:24:a6:92:b8:28:16:7b:e0:ea:b4:22:2f:
                    eb:34:f7:d4:cc:3d:58:65:ad:93:1e:fd:31:70:7d:
                    a3:2f:41:cb:74:f1:96:93:55:91:2c:43:bb:a5:7c:
                    9d:2b:ac:4a:fa:c6:e8:8f:d2:17:c5:56:9d:62:65:
                    7e:fa:7f:48:58:4a:91:68:39:ed:76:0e:9e:2c:e9:
                    f5:63:4e:2f:7a:7b:84:77:d9:19:e4:ab:3f:9a:fe:
                    de:25:5c:17:ae:c1:ec:18:78:4e:3f:a8:0e:b7:32:
                    9d:76:51:0d:4d:09:aa:73:77:48:f3:49:70:c8:e0:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9A:F9:37:31:41:9D:59:86:AE:14:C7:3A:E9:51:DF:04:9B:71:D6
            X509v3 Authority Key Identifier:
                keyid:3E:32:FB:0E:A1:4C:66:D3:AE:07:1D:BE:07:6F:53:DC:CF:58:E1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/323830343a333735633a3a2f33322d3634203d3e20323636343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:375c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:98:25:55:bd:2a:03:9c:cb:d8:32:d9:35:f7:76:a1:b5:01:
         3e:e2:85:3b:d9:ec:32:09:5e:87:50:15:0f:ed:ee:d7:fa:65:
         dd:50:3b:fd:41:16:78:8f:01:0b:a2:fd:6e:94:c7:1f:dc:86:
         13:19:fb:3f:14:ad:ab:70:f8:20:46:d6:45:2d:4f:ea:ce:c4:
         2d:54:ce:db:51:eb:0e:8f:e2:c5:b5:67:e9:9a:da:8d:c9:44:
         5f:e7:ca:41:5c:08:e7:19:3d:58:50:fc:0d:ee:5a:d9:89:97:
         a5:2e:59:7e:91:88:e8:d6:93:0d:a7:86:f0:ed:69:61:d1:f2:
         28:2c:a5:8d:7b:14:8a:c9:9a:2a:36:60:7a:27:03:71:9e:2c:
         44:17:dc:99:f7:b8:36:99:80:cd:27:cb:15:52:19:fc:16:7a:
         9e:36:54:3a:aa:c2:cf:90:66:98:2a:3f:05:a2:0f:d1:db:7f:
         a9:70:7e:a1:75:54:d5:f0:5c:aa:c4:9b:0a:45:b1:7a:06:a2:
         f0:2f:7d:78:cb:1a:59:be:14:61:9f:c4:b3:03:a4:04:e6:96:
         e4:a6:8c:26:c7:39:38:d6:f5:26:e6:87:b6:bc:8d:89:b6:44:
         95:6d:26:ba:ee:ee:84:61:ec:3e:05:38:3f:85:70:8f:33:4d:
         60:17:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----