Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/323830343a363734343a3a2f33322d313238203d3e20323639363137.roa
File:                     323830343a363734343a3a2f33322d313238203d3e20323639363137.roa (raw, json)
Hash identifier:          0mrDIGUNtBTKPFc0wnp6tcVg7nJis+o5pgNaL6cwpks=
Subject key identifier:   35:17:2C:58:87:9F:F7:1B:6A:E5:CC:17:F5:21:73:19:F0:55:2D:7D
Certificate issuer:       /CN=BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32
Certificate serial:       0B5C21A62C9B4206B065F3065216502011801346
Authority key identifier: BE:01:49:EC:EE:B6:F9:83:32:5D:D2:BB:C2:A1:44:7D:08:EF:0E:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/323830343a363734343a3a2f33322d313238203d3e20323639363137.roa
Signing time:             Wed 28 Aug 2024 12:48:44 +0000
ROA not before:           Wed 28 Aug 2024 12:43:44 +0000
ROA not after:            Wed 27 Aug 2025 12:48:44 +0000
asID:                     269617
IP address blocks:        2804:6744::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5c:21:a6:2c:9b:42:06:b0:65:f3:06:52:16:50:20:11:80:13:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32
        Validity
            Not Before: Aug 28 12:43:44 2024 GMT
            Not After : Aug 27 12:48:44 2025 GMT
        Subject: CN=35172C58879FF71B6AE5CC17F5217319F0552D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:b3:cb:60:38:52:33:86:07:5f:c1:c4:ef:
                    a7:53:44:c1:b3:b1:4d:01:0b:04:46:ee:51:0a:81:
                    7d:3a:26:dd:94:b4:12:4e:ca:e9:b8:18:35:df:d0:
                    56:96:38:36:7c:bf:ad:37:8d:74:a1:72:ec:21:eb:
                    30:d2:29:60:ab:87:2f:83:0a:87:98:d3:32:f2:6b:
                    f6:23:22:d4:10:88:0b:9a:34:6b:76:5d:40:33:40:
                    b3:a3:06:dd:80:1e:b4:a2:25:12:a9:b5:b1:83:b5:
                    9a:32:9e:4e:25:c5:9b:96:b6:cc:7c:c5:a2:fb:2f:
                    03:44:38:01:ef:f9:53:4a:b4:7c:e3:10:b9:05:de:
                    97:cc:1a:cb:fe:f4:5e:59:a8:46:0e:20:06:5d:d7:
                    4b:0c:5e:62:d8:24:49:5a:b0:0f:2d:6e:c9:0c:9b:
                    c6:c0:4c:1f:b4:53:64:20:2f:80:88:8c:23:94:79:
                    29:a7:e0:30:80:e5:14:8b:0a:d8:7e:eb:30:64:8f:
                    5b:b5:08:eb:a6:60:02:f3:4b:61:57:73:e9:7c:3b:
                    1d:b7:e8:f3:a5:50:ef:c8:c1:f9:7b:ec:9d:80:f2:
                    e1:28:c2:59:e0:14:59:fc:1f:d1:c0:e7:10:fd:a9:
                    11:08:e4:03:57:95:77:82:b4:a0:49:f0:37:c7:04:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:17:2C:58:87:9F:F7:1B:6A:E5:CC:17:F5:21:73:19:F0:55:2D:7D
            X509v3 Authority Key Identifier:
                keyid:BE:01:49:EC:EE:B6:F9:83:32:5D:D2:BB:C2:A1:44:7D:08:EF:0E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/323830343a363734343a3a2f33322d313238203d3e20323639363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6744::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:13:ff:37:44:38:6e:5a:b9:fc:79:32:31:59:61:2e:d4:32:
         4f:24:c5:8e:14:8b:50:09:c0:8f:c0:21:4a:48:67:06:12:6e:
         c6:31:71:8f:5a:04:6e:09:39:b6:6d:65:e7:47:3c:cd:9f:dc:
         07:05:51:8d:f5:7c:16:6d:ed:a2:76:23:46:cb:fa:d8:97:16:
         69:48:10:28:f6:38:48:e6:92:63:0e:ad:42:43:02:83:03:d6:
         9b:6a:b4:ea:f8:7e:f8:3c:0e:98:ea:10:8f:91:19:23:cc:13:
         d9:a3:9a:f1:d1:c8:b8:49:fb:01:f7:e0:0f:81:98:f1:7f:b5:
         3a:1b:e2:ec:aa:15:44:3f:bf:b5:ba:59:ad:2f:0e:f7:0c:9f:
         9d:0e:9b:b6:31:61:f7:cf:dc:21:30:6d:bc:41:fc:3e:2e:8b:
         23:c3:ee:a6:b7:57:35:bf:d8:f9:30:54:73:1e:68:e1:5a:86:
         d2:3b:13:78:c9:c8:26:a6:30:73:50:0e:f2:19:d9:31:e0:6f:
         e3:1e:3f:75:35:2e:f8:df:06:f1:34:79:be:ef:c3:bd:67:72:
         7c:cc:a5:7a:60:e7:50:8b:59:28:67:80:59:c0:45:8b:fc:94:
         7a:c2:bd:51:1f:63:24:61:de:1c:2c:e1:5e:20:cb:5b:06:80:
         ee:ed:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----