Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4DVgzb6EpXzPwtar7S8LJxGDGUXicDi16hVBbgWpv5oC/0/323830343a343062343a3a2f33322d313238203d3e20323635393736.roa
File:                     323830343a343062343a3a2f33322d313238203d3e20323635393736.roa (raw, json)
Hash identifier:          RLPBJX8Yg+1IzdBfIWupQWMfYodfH6+Rd7hby/MxchI=
Subject key identifier:   BC:13:8A:55:CD:A0:76:53:DE:0E:E4:A2:73:C8:36:5C:1C:0F:C9:20
Certificate issuer:       /CN=396B69C2F78EDA252C6FEFB8E1800122D42E4F96
Certificate serial:       11B7B24483C2F74966814CEEF05BB2A9893F00F2
Authority key identifier: 39:6B:69:C2:F7:8E:DA:25:2C:6F:EF:B8:E1:80:01:22:D4:2E:4F:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/396B69C2F78EDA252C6FEFB8E1800122D42E4F96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4DVgzb6EpXzPwtar7S8LJxGDGUXicDi16hVBbgWpv5oC/0/323830343a343062343a3a2f33322d313238203d3e20323635393736.roa
Signing time:             Mon 18 Nov 2024 18:18:01 +0000
ROA not before:           Mon 18 Nov 2024 18:13:01 +0000
ROA not after:            Mon 17 Nov 2025 18:18:01 +0000
asID:                     265976
IP address blocks:        2804:40b4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b7:b2:44:83:c2:f7:49:66:81:4c:ee:f0:5b:b2:a9:89:3f:00:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=396B69C2F78EDA252C6FEFB8E1800122D42E4F96
        Validity
            Not Before: Nov 18 18:13:01 2024 GMT
            Not After : Nov 17 18:18:01 2025 GMT
        Subject: CN=BC138A55CDA07653DE0EE4A273C8365C1C0FC920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6a:c7:a4:16:e5:74:9b:d0:aa:20:c4:84:3f:
                    5a:ef:80:17:8a:53:5a:bc:7b:3c:7e:a5:c7:01:ae:
                    d3:fa:c3:15:9a:39:64:d9:dc:ed:8e:ac:70:f1:8c:
                    bd:5b:99:ac:99:74:f9:de:70:bd:57:6b:da:6b:19:
                    5a:6e:d1:74:51:93:5c:a8:b0:b9:f6:4b:8b:8d:13:
                    aa:39:a7:17:b8:af:40:0c:6f:8a:fe:08:84:6e:ab:
                    56:7e:1f:dd:b6:9c:09:e7:ad:b8:43:61:67:0a:1d:
                    14:c3:23:b2:60:2f:7f:f3:cd:a9:fb:0b:fb:a6:cb:
                    da:16:ca:4c:df:be:12:52:c0:60:d4:54:3f:fb:54:
                    5c:f7:17:3e:1c:55:cf:9f:51:40:da:12:82:d6:ef:
                    d7:ee:a3:14:c3:8c:a4:46:74:cb:f4:71:46:48:61:
                    d6:51:13:95:16:2d:e8:be:59:9b:e1:2b:01:e7:6b:
                    f6:97:9b:01:c6:f7:90:38:b9:b9:17:8f:cd:d7:59:
                    f4:3a:22:5e:8d:17:64:84:15:21:52:b0:8e:3a:d3:
                    9c:0a:60:ab:f5:c0:00:5d:80:3d:b2:22:d9:f1:1d:
                    13:2c:12:fc:e4:6a:56:fb:2f:f9:d8:a5:e0:5b:3c:
                    fe:18:ee:a2:c2:02:93:a0:9d:d7:18:75:83:4a:b2:
                    18:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:13:8A:55:CD:A0:76:53:DE:0E:E4:A2:73:C8:36:5C:1C:0F:C9:20
            X509v3 Authority Key Identifier:
                keyid:39:6B:69:C2:F7:8E:DA:25:2C:6F:EF:B8:E1:80:01:22:D4:2E:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4DVgzb6EpXzPwtar7S8LJxGDGUXicDi16hVBbgWpv5oC/0/396B69C2F78EDA252C6FEFB8E1800122D42E4F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/396B69C2F78EDA252C6FEFB8E1800122D42E4F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4DVgzb6EpXzPwtar7S8LJxGDGUXicDi16hVBbgWpv5oC/0/323830343a343062343a3a2f33322d313238203d3e20323635393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:01:b3:53:42:e3:49:7f:a4:05:ca:91:fb:d2:49:77:bc:91:
         74:96:6e:fb:24:33:73:50:ea:87:54:27:40:c7:bd:80:7e:cc:
         7c:bb:cc:bb:c1:bb:83:ef:ce:48:7e:51:40:60:97:38:c5:42:
         ed:1d:5b:18:bf:ee:c7:11:fe:83:79:88:70:ca:e7:f0:c9:95:
         83:3f:67:fb:bf:65:9b:fe:26:08:80:32:14:de:c0:3d:a4:0f:
         a6:5e:36:76:05:b0:c7:a8:c6:1e:0a:87:5a:eb:5f:e4:b3:19:
         28:1f:9c:68:59:a8:b8:ef:f2:8f:f6:c4:42:6f:07:f2:c3:50:
         f8:6e:88:40:bf:8d:d3:3f:5e:77:06:14:a4:d2:6c:6c:3e:eb:
         15:7f:ac:0f:4c:c0:dc:dc:3c:61:35:aa:c0:44:fc:11:af:91:
         47:18:4d:7f:16:1f:9f:ef:b5:3f:12:bb:84:33:ce:d7:33:ea:
         dd:56:67:ed:ca:75:f5:1c:05:a1:8c:31:b6:a9:b4:8c:09:d7:
         a1:3c:2a:45:2a:4d:09:3d:58:71:f2:8c:21:b2:e1:22:ff:3f:
         a4:28:02:0d:fe:89:71:e8:6b:fb:c7:cf:ca:50:2a:b8:0e:a7:
         9d:32:bc:e7:b6:59:02:c4:59:d6:14:3d:f0:fc:7c:24:5d:cb:
         60:2b:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----