Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/323830343a336237383a383030303a3a2f33332d3333203d3e20323636313531.roa
File:                     323830343a336237383a383030303a3a2f33332d3333203d3e20323636313531.roa (raw, json)
Hash identifier:          7hYlqlktFeIKN/ycbFh6VNcTSgvVaWO7NTyICQvM3bU=
Subject key identifier:   A1:6D:AE:D5:1E:4A:00:95:66:1A:30:F0:F1:EE:2C:78:FB:09:10:49
Certificate issuer:       /CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
Certificate serial:       628730D2351A1C5532ED9BE65DBB21394757F190
Authority key identifier: 78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/323830343a336237383a383030303a3a2f33332d3333203d3e20323636313531.roa
Signing time:             Sun 07 Jul 2024 17:19:29 +0000
ROA not before:           Sun 07 Jul 2024 17:14:29 +0000
ROA not after:            Sun 06 Jul 2025 17:19:29 +0000
asID:                     266151
IP address blocks:        2804:3b78:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:87:30:d2:35:1a:1c:55:32:ed:9b:e6:5d:bb:21:39:47:57:f1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
        Validity
            Not Before: Jul  7 17:14:29 2024 GMT
            Not After : Jul  6 17:19:29 2025 GMT
        Subject: CN=A16DAED51E4A0095661A30F0F1EE2C78FB091049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:c8:60:0c:e4:24:9e:c9:4b:0a:6c:57:09:
                    04:5d:7e:9d:fe:25:3f:f7:28:a4:06:ef:2b:cd:7b:
                    18:01:a8:f2:82:0c:7f:55:2a:f5:09:1f:2e:32:82:
                    fe:0b:1c:6d:8d:18:64:bf:77:19:34:69:49:27:69:
                    11:b8:80:ef:ae:33:e3:1f:ce:60:db:9a:75:2a:36:
                    e8:47:7f:c7:80:76:63:8f:b4:e9:2a:e0:c4:b4:e5:
                    37:c9:b6:fe:48:9f:c3:64:4a:9d:ca:8c:62:26:13:
                    10:84:28:46:20:09:10:80:79:a2:7c:0d:e2:7e:94:
                    63:fc:24:ae:22:f9:04:13:2d:3b:e9:f3:5f:f2:b0:
                    13:e6:30:f8:3d:f9:a2:47:83:0c:01:af:3f:60:34:
                    b3:85:ee:d9:ff:d0:2f:5b:b1:bc:83:70:58:09:e4:
                    97:a9:29:31:03:f7:d6:f4:50:d1:53:f9:69:c1:88:
                    5e:fd:19:7e:06:1c:a6:85:bd:c4:bc:b9:35:4c:c8:
                    b6:fd:3e:08:d3:5e:31:25:cd:76:74:79:11:1f:6f:
                    db:de:1b:3a:b9:f9:11:31:af:32:91:f8:d1:8d:07:
                    c1:8a:4a:28:ec:08:fe:8d:60:fa:1e:5b:34:de:25:
                    6c:d1:e6:49:80:61:8c:12:dd:6a:48:67:bd:fe:d5:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6D:AE:D5:1E:4A:00:95:66:1A:30:F0:F1:EE:2C:78:FB:09:10:49
            X509v3 Authority Key Identifier:
                keyid:78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/323830343a336237383a383030303a3a2f33332d3333203d3e20323636313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b78:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:ab:3a:c4:d5:5a:87:5c:f8:49:68:8d:11:69:2c:26:e8:08:
         35:c7:3e:bb:de:f9:c0:6c:c7:49:5d:b5:31:cd:86:a8:7e:43:
         d4:fd:f4:6b:06:75:28:76:43:d8:b4:53:a3:d6:34:bf:cc:4a:
         ac:54:4b:3d:3b:ed:90:8f:67:7f:ae:fd:90:61:f1:18:b2:59:
         fa:72:b8:29:3a:b8:18:c0:94:07:ac:25:45:4d:1a:34:4d:72:
         e2:ac:53:d6:23:d4:26:f0:c7:60:78:c3:36:4d:c4:35:0e:85:
         cb:12:57:e8:58:e8:b3:b5:19:a3:9c:8d:89:0c:38:a4:08:f8:
         89:d9:f0:c1:a7:72:72:16:d0:09:a9:8b:9b:d8:7f:fc:cc:ca:
         5f:48:81:ee:91:87:0a:27:25:e2:e7:e7:f9:52:4b:06:de:eb:
         31:83:f6:c8:e6:64:97:51:34:f0:d8:90:b6:7a:6f:8b:46:44:
         68:af:91:8f:37:da:f1:60:9e:0f:ce:8d:31:51:7f:59:d7:ab:
         9f:33:bd:87:50:fe:91:f4:a7:4c:02:b6:a5:45:7f:93:cf:f7:
         20:91:88:59:3b:5c:16:2f:73:1b:21:9b:17:63:0d:7e:8a:08:
         ae:41:04:f4:88:3e:06:7c:60:eb:9f:70:ef:e9:1e:af:f9:92:
         64:36:84:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----