Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33322d313238203d3e20323635343633.roa
File:                     323830343a333438343a3a2f33322d313238203d3e20323635343633.roa (raw, json)
Hash identifier:          ttBMn/e7l4LarAh3WeE3L6Zz0hDeN4GepRUCaVkTy+s=
Subject key identifier:   20:ED:4A:36:88:FA:18:3D:84:B1:E1:30:A3:A3:59:FF:DB:8C:BE:33
Certificate issuer:       /CN=4D40EC400BCF161D5176F6C2E3A646EBEADEB546
Certificate serial:       79158256859A855242CB74CC3C3CFD9ACF3A602A
Authority key identifier: 4D:40:EC:40:0B:CF:16:1D:51:76:F6:C2:E3:A6:46:EB:EA:DE:B5:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40EC400BCF161D5176F6C2E3A646EBEADEB546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33322d313238203d3e20323635343633.roa
Signing time:             Sun 11 Aug 2024 03:43:40 +0000
ROA not before:           Sun 11 Aug 2024 03:38:40 +0000
ROA not after:            Sun 10 Aug 2025 03:43:40 +0000
asID:                     265463
IP address blocks:        2804:3484::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:15:82:56:85:9a:85:52:42:cb:74:cc:3c:3c:fd:9a:cf:3a:60:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D40EC400BCF161D5176F6C2E3A646EBEADEB546
        Validity
            Not Before: Aug 11 03:38:40 2024 GMT
            Not After : Aug 10 03:43:40 2025 GMT
        Subject: CN=20ED4A3688FA183D84B1E130A3A359FFDB8CBE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:67:e7:1f:0e:8e:84:98:f0:71:ff:8a:cf:
                    84:7b:96:9c:aa:6c:ed:b1:ec:dd:d7:14:57:df:66:
                    d1:eb:11:30:c7:12:82:22:51:23:0d:84:96:82:d0:
                    9b:50:75:67:45:ae:ba:3c:8c:36:06:fd:e1:4b:30:
                    2b:d1:e6:08:d3:45:be:86:49:8d:18:99:25:bf:84:
                    ce:b5:7b:94:99:8d:e3:5c:11:ff:bc:f5:0b:6e:b5:
                    67:46:52:fe:16:ff:7c:12:38:1a:7c:04:fd:7d:d3:
                    ae:cd:bc:49:82:6c:51:0b:50:5b:c2:82:20:28:7b:
                    2b:6d:5c:1d:5e:4e:c1:b9:8a:9d:67:c9:5c:c8:be:
                    90:fd:3a:d3:a5:14:54:5e:b3:bc:78:1c:a3:1b:13:
                    ba:d1:c0:4a:82:be:3a:8e:c9:a5:c1:07:64:aa:68:
                    79:00:af:0d:a1:09:1b:6a:44:04:41:ab:5c:d1:ca:
                    99:60:66:03:09:fe:eb:81:e0:2e:49:3a:f9:d3:91:
                    53:26:e2:bc:bb:54:d5:1b:52:5d:de:ae:dc:6a:f7:
                    05:de:d4:a0:23:5f:72:fb:dd:f8:a1:ce:cb:c0:9e:
                    c5:e9:ea:2f:1d:e0:80:40:56:48:44:37:37:ce:ba:
                    07:d1:e3:16:20:1c:af:b0:0c:bd:6a:fc:27:28:59:
                    c5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:ED:4A:36:88:FA:18:3D:84:B1:E1:30:A3:A3:59:FF:DB:8C:BE:33
            X509v3 Authority Key Identifier:
                keyid:4D:40:EC:40:0B:CF:16:1D:51:76:F6:C2:E3:A6:46:EB:EA:DE:B5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/4D40EC400BCF161D5176F6C2E3A646EBEADEB546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40EC400BCF161D5176F6C2E3A646EBEADEB546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33322d313238203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3484::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:03:ed:bb:d4:8d:4d:f0:a2:d4:9b:01:aa:f0:73:ac:61:20:
         9b:41:77:cb:50:07:80:bf:13:57:26:83:16:6f:95:ce:19:e9:
         69:be:77:84:9a:db:17:31:fb:10:7b:19:de:51:38:47:d2:e7:
         fe:be:50:9d:81:d4:c1:89:c0:d8:ec:7c:6e:20:71:18:a8:b5:
         4c:16:73:35:ee:11:df:35:b5:8d:b3:25:9e:54:67:9a:f0:f0:
         4e:23:0e:83:b2:5d:12:b9:c0:74:bf:e8:97:2c:03:26:5d:dd:
         fb:a3:a8:75:95:1a:27:99:07:58:08:66:f3:44:d1:20:1b:73:
         c8:24:3d:9c:e8:0f:76:a2:78:33:9c:b8:b7:bf:07:1b:de:bf:
         d1:bb:82:ac:3a:5b:02:bf:ec:f4:32:10:14:3a:b9:6c:0d:ae:
         8d:54:84:d2:68:94:df:7a:49:ef:b5:58:8b:02:3f:1d:9b:5f:
         86:90:ed:bb:dc:23:54:30:76:41:7a:80:8a:58:08:d9:6f:81:
         7e:af:29:db:2b:ab:c0:f6:3f:b9:3b:fa:5a:8c:85:47:b4:02:
         ac:fa:59:02:25:e8:ff:60:a5:1b:e5:43:cf:e4:b4:23:6d:db:
         6d:a9:d1:34:1b:03:f5:7d:12:73:62:c7:27:e4:73:d5:b7:11:
         27:ba:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----