Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/323830343a386431343a3a2f33322d3332203d3e20323733333333.roa
File:                     323830343a386431343a3a2f33322d3332203d3e20323733333333.roa (raw, json)
Hash identifier:          sVXq1zVJF7qthZEk4qKquowoC/ziL0q3tduSrTPNQYw=
Subject key identifier:   A3:56:09:25:BF:45:FE:22:AD:D6:89:B1:CA:3A:78:97:B7:3B:BD:A1
Certificate issuer:       /CN=FF631A9497B10C5479069BEFBD9857EE6C411292
Certificate serial:       2BD7DA93196BC05FD7D19C331DE0A97C50930B94
Authority key identifier: FF:63:1A:94:97:B1:0C:54:79:06:9B:EF:BD:98:57:EE:6C:41:12:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF631A9497B10C5479069BEFBD9857EE6C411292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/323830343a386431343a3a2f33322d3332203d3e20323733333333.roa
Signing time:             Sat 10 Aug 2024 13:50:26 +0000
ROA not before:           Sat 10 Aug 2024 13:45:26 +0000
ROA not after:            Sat 09 Aug 2025 13:50:26 +0000
asID:                     273333
IP address blocks:        2804:8d14::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d7:da:93:19:6b:c0:5f:d7:d1:9c:33:1d:e0:a9:7c:50:93:0b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF631A9497B10C5479069BEFBD9857EE6C411292
        Validity
            Not Before: Aug 10 13:45:26 2024 GMT
            Not After : Aug  9 13:50:26 2025 GMT
        Subject: CN=A3560925BF45FE22ADD689B1CA3A7897B73BBDA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1b:ff:ab:8d:86:71:bb:51:77:71:7e:e1:0b:
                    09:31:e0:60:26:0d:34:b3:4b:39:b6:34:ec:2f:ae:
                    1a:f7:21:89:5e:31:9b:8c:55:09:85:09:4d:c1:09:
                    27:1f:dd:11:63:1f:a0:e5:b0:8b:cd:10:1d:d1:15:
                    0c:f2:37:8c:e0:a6:f5:0c:99:8b:2c:0e:19:08:9d:
                    2b:be:91:f6:06:42:49:47:b9:b9:d7:db:51:96:54:
                    80:df:e2:9e:6e:bf:41:d7:c5:09:c9:40:6d:87:b8:
                    6c:e4:4c:75:76:51:c8:2c:ed:7f:b1:b4:32:59:3b:
                    39:a1:b7:e5:fe:66:ff:6b:a0:7b:fe:3b:19:fe:22:
                    01:3a:c9:31:21:d2:7f:60:b9:f4:63:51:29:56:a9:
                    41:ad:64:9f:52:97:34:57:5f:ed:c3:af:26:a7:41:
                    04:94:b3:f8:34:c7:5e:f3:5c:2f:b3:46:2c:58:0c:
                    40:9d:9b:03:cc:13:72:41:40:26:0a:9f:a1:30:ba:
                    09:25:c7:d0:3c:6c:79:34:f0:a0:52:8a:d1:f0:5c:
                    c2:b0:8c:70:04:77:8c:be:6f:5b:80:d7:3f:b5:2d:
                    b7:cf:03:98:a7:43:7a:7f:dd:71:a8:9e:3b:d0:f0:
                    6d:61:96:a2:ef:8d:3d:8c:96:e5:f3:41:04:31:82:
                    10:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:56:09:25:BF:45:FE:22:AD:D6:89:B1:CA:3A:78:97:B7:3B:BD:A1
            X509v3 Authority Key Identifier:
                keyid:FF:63:1A:94:97:B1:0C:54:79:06:9B:EF:BD:98:57:EE:6C:41:12:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/FF631A9497B10C5479069BEFBD9857EE6C411292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF631A9497B10C5479069BEFBD9857EE6C411292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/323830343a386431343a3a2f33322d3332203d3e20323733333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:b4:aa:ac:cc:20:3b:17:61:69:bf:a0:b2:e4:ee:d1:bf:dd:
         25:e5:2e:cd:4b:0b:e1:22:5c:5f:9f:58:0a:c9:a4:72:c9:69:
         f8:b4:6b:b4:89:79:7a:1c:f7:ad:4b:4d:b0:0e:bb:6a:0b:45:
         72:11:ed:bf:19:2b:45:75:ce:b2:20:6d:01:f9:4f:f2:cc:27:
         95:43:82:0a:5c:f7:49:dc:71:f1:8f:35:67:19:86:8f:2a:31:
         a6:a5:55:57:df:25:36:b4:9c:a2:c6:a2:46:1d:63:70:fc:1b:
         60:44:07:31:4e:80:a7:32:b0:63:0d:a3:c2:57:82:2b:8b:c4:
         7b:e2:cf:de:17:34:ae:99:36:da:f7:5c:e5:42:ab:44:a8:de:
         d8:d8:28:52:60:ed:d3:c3:6a:0e:04:4c:a0:a9:07:45:d1:f7:
         b3:91:f1:3e:bc:78:bb:a5:ff:69:1c:8c:61:72:cf:38:57:f1:
         1a:cb:be:a3:3c:97:85:3a:ec:5e:18:03:07:ad:61:8d:d1:2f:
         5d:cb:42:d1:ed:95:c8:b2:29:04:38:09:c3:79:20:81:68:c7:
         08:0b:14:93:13:6b:dd:a0:a5:2a:ee:87:0f:f7:0c:16:d9:be:
         ee:6a:09:e8:4e:90:a2:5f:dc:32:91:e4:bc:0c:c8:91:19:a0:
         73:7d:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----