Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/323830343a376163303a3a2f33322d3332203d3e20323731333930.roa
File:                     323830343a376163303a3a2f33322d3332203d3e20323731333930.roa (raw, json)
Hash identifier:          QR87OiZtT9GRrYAgZkNjvDkNgF9fhx5ozpMrbVeYzgA=
Subject key identifier:   64:78:99:CC:21:E2:81:5B:37:6E:52:3D:49:B3:A9:4C:17:7A:C2:76
Certificate issuer:       /CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
Certificate serial:       3CD9867EC2409593E706915BEC863DDDF7EEDE12
Authority key identifier: A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/323830343a376163303a3a2f33322d3332203d3e20323731333930.roa
Signing time:             Sat 29 Jun 2024 13:10:14 +0000
ROA not before:           Sat 29 Jun 2024 13:05:14 +0000
ROA not after:            Sat 28 Jun 2025 13:10:14 +0000
asID:                     271390
IP address blocks:        2804:7ac0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d9:86:7e:c2:40:95:93:e7:06:91:5b:ec:86:3d:dd:f7:ee:de:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
        Validity
            Not Before: Jun 29 13:05:14 2024 GMT
            Not After : Jun 28 13:10:14 2025 GMT
        Subject: CN=647899CC21E2815B376E523D49B3A94C177AC276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:37:27:75:5d:66:17:e7:ed:37:d7:6c:73:
                    61:f8:f0:5f:ed:f4:a5:57:86:ff:a5:24:c4:1f:fd:
                    0c:ad:c5:2f:82:60:5e:9c:8a:04:5f:b3:7d:14:b2:
                    0a:d3:9b:3e:0f:c8:f8:d4:9d:aa:24:f1:6b:c4:3c:
                    36:6c:99:e2:b3:f0:71:04:aa:24:14:a7:ae:07:34:
                    c3:60:2d:f8:f4:8b:f1:12:ad:b3:a7:d5:18:cb:c9:
                    df:3d:a1:15:cc:50:1b:5c:e7:ad:f7:3a:ff:8e:c4:
                    af:71:1e:13:b7:e6:96:fb:df:e7:78:cb:f0:50:50:
                    ae:20:b1:8f:28:ef:2f:14:07:df:7f:6a:e7:5c:4d:
                    ff:0f:19:81:37:25:12:8b:6e:48:90:82:6f:8f:db:
                    fa:b7:ab:9a:8c:32:34:3a:bb:7f:a3:75:dd:02:71:
                    fe:7b:1c:54:84:42:2e:ef:56:ba:90:7b:f6:6c:d2:
                    6c:3f:5d:66:05:96:0e:55:07:82:14:48:4f:7d:c0:
                    16:ce:73:f9:b3:a6:1a:a7:fa:6d:8b:78:57:25:64:
                    f4:70:86:67:1e:57:d7:0a:a9:2b:49:e9:f0:80:0b:
                    82:69:4f:8e:74:fd:16:a7:a8:30:aa:85:fd:e0:dc:
                    1c:70:34:94:e3:4e:c3:7d:a2:87:22:1f:71:ed:08:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:78:99:CC:21:E2:81:5B:37:6E:52:3D:49:B3:A9:4C:17:7A:C2:76
            X509v3 Authority Key Identifier:
                keyid:A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/A302BABB2EFB467142775FFB8C45477B6C1C318D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/323830343a376163303a3a2f33322d3332203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:f4:15:ea:e3:1a:5a:d7:3f:64:bb:ea:a2:98:2d:8c:07:ac:
         45:9b:da:09:ab:33:58:28:bd:0e:89:56:59:7a:d2:c3:e4:d6:
         3b:ce:38:92:65:35:79:08:2c:a2:62:f6:40:83:9e:95:b2:d7:
         f5:65:ba:46:f4:99:2e:3a:ac:3a:e8:ea:8f:7d:f6:4f:d0:93:
         c8:ad:5c:35:18:d2:29:57:1c:09:27:16:9f:1a:57:6f:36:30:
         58:90:63:84:4a:d7:a0:ee:dd:ae:2b:83:0f:ae:70:ae:d8:b6:
         d1:a5:0f:51:fc:f4:cd:d3:cb:33:60:c4:d7:7b:33:3b:87:48:
         df:e6:fb:82:ba:c6:d0:8f:9a:5d:e1:de:4b:24:9c:be:89:10:
         dd:f1:b4:2e:b7:78:6d:f2:27:1c:74:39:cb:46:d8:8e:df:f9:
         38:eb:24:12:de:bc:98:4c:65:b1:94:b0:4d:e9:2a:08:aa:26:
         d4:bf:05:af:cb:6b:b3:14:4e:b5:39:2a:4f:e8:1c:29:0b:90:
         08:23:ed:65:4c:91:aa:8f:c6:31:80:dd:eb:a7:4c:d7:94:dc:
         21:db:11:bf:33:d7:cc:e5:d5:1d:21:e8:cf:b3:a8:64:51:31:
         08:54:ff:10:84:ad:4f:6c:da:37:0c:a8:ee:ff:ad:ed:d2:39:
         2c:37:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----