Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a383030303a3a2f33342d3334203d3e20323638323239.roa
File:                     323830343a346466303a383030303a3a2f33342d3334203d3e20323638323239.roa (raw, json)
Hash identifier:          YkFx01B7m/r2aDVFg+s8undStAq5EK5p1jKYrbfOQME=
Subject key identifier:   02:F1:3C:C9:43:CA:06:37:C7:9E:07:D7:5C:2E:A6:03:24:E1:59:FD
Certificate issuer:       /CN=321510E0836AA48D9EE42A00551338BB403CE659
Certificate serial:       77D86427E2E892A73AC7BDB162B817568C869362
Authority key identifier: 32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a383030303a3a2f33342d3334203d3e20323638323239.roa
Signing time:             Wed 03 Jul 2024 21:10:25 +0000
ROA not before:           Wed 03 Jul 2024 21:05:25 +0000
ROA not after:            Wed 02 Jul 2025 21:10:25 +0000
asID:                     268229
IP address blocks:        2804:4df0:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d8:64:27:e2:e8:92:a7:3a:c7:bd:b1:62:b8:17:56:8c:86:93:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321510E0836AA48D9EE42A00551338BB403CE659
        Validity
            Not Before: Jul  3 21:05:25 2024 GMT
            Not After : Jul  2 21:10:25 2025 GMT
        Subject: CN=02F13CC943CA0637C79E07D75C2EA60324E159FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:5b:30:f1:a1:8e:2d:ac:cb:ca:11:36:0b:
                    09:23:e8:66:1e:9f:9b:1b:03:1c:27:05:87:67:70:
                    cf:31:a4:73:2d:17:95:56:81:80:ce:c0:27:ca:c5:
                    55:1a:65:4a:63:79:07:f2:79:0d:9a:cd:53:4e:c6:
                    5b:98:ec:f0:75:90:03:16:85:c6:3b:66:9e:49:f5:
                    4e:89:82:84:d9:8b:fa:55:e4:0d:e5:0c:e1:92:4a:
                    f5:79:f0:9d:aa:48:f8:76:59:bd:45:62:5b:58:52:
                    90:0c:df:39:45:43:74:f3:77:b4:68:53:c3:d6:b0:
                    3a:70:b6:df:b5:47:91:7b:74:a3:83:dc:47:c8:3f:
                    de:0a:a1:7b:5b:f3:02:94:36:c9:60:80:45:24:14:
                    38:43:1e:8b:f6:2a:bb:bb:16:ed:2d:38:f8:31:06:
                    4c:68:1b:8b:87:0b:7a:6d:32:70:f1:b7:ba:2f:15:
                    30:d0:1b:ab:c1:df:e2:3d:ed:0c:bd:b9:43:72:1c:
                    4f:17:73:1b:59:7b:89:10:c1:32:95:60:2b:a9:e7:
                    b5:c7:ee:8a:bc:82:86:01:50:13:44:b3:a6:45:c9:
                    35:c6:a1:e0:ac:0b:30:db:5f:1a:bb:1b:6f:d3:86:
                    ba:a6:d8:73:06:ae:46:22:85:5b:17:46:a4:32:31:
                    03:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F1:3C:C9:43:CA:06:37:C7:9E:07:D7:5C:2E:A6:03:24:E1:59:FD
            X509v3 Authority Key Identifier:
                keyid:32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/321510E0836AA48D9EE42A00551338BB403CE659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a383030303a3a2f33342d3334203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4df0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         66:92:63:10:da:94:61:4a:34:bf:c3:64:48:4d:1d:08:ff:0e:
         9a:90:10:76:d8:7e:e8:ca:34:d8:e7:54:72:d8:ba:3b:9c:29:
         0a:63:cf:b3:bf:89:ba:3c:ea:a0:66:8c:53:50:34:af:28:3c:
         5e:b5:02:a2:6d:de:c2:ea:d7:29:d0:09:b1:dd:eb:17:08:f6:
         db:f8:b3:d0:7c:91:77:5c:33:d3:55:ba:6d:47:d0:80:be:a3:
         8c:0a:cb:d7:ba:02:b0:07:bd:c1:17:1b:c4:15:1b:7a:41:3d:
         bd:b1:9a:62:33:94:9c:8e:ca:7e:04:d2:ef:3f:4b:72:de:1f:
         1c:c6:1a:30:8a:32:8f:1a:13:68:12:22:33:8c:5e:04:50:9d:
         8b:3a:89:48:e8:24:c2:e1:1d:41:7d:5b:30:cc:97:3a:6a:50:
         fd:05:85:a6:7f:b9:69:c6:9f:14:58:8b:0b:b5:e1:6a:e0:21:
         62:e3:37:56:4a:03:fa:0e:67:91:56:da:49:a6:6b:fc:07:4d:
         d8:0c:b7:15:d3:8f:92:6b:fa:db:72:ea:0d:db:f6:52:15:3f:
         5d:8b:23:1b:30:04:dd:f6:91:12:9a:33:c7:e2:47:02:06:9d:
         23:a8:fa:09:be:e7:c0:be:39:d0:53:54:34:e7:a9:1e:25:43:
         0c:1a:23:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----