Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/0/323830343a3964383a3a2f33322d3332203d3e20323632393937.roa
File:                     323830343a3964383a3a2f33322d3332203d3e20323632393937.roa (raw, json)
Hash identifier:          iB5NKx9D6OObQ/e8gV3Cy9zcXQKx721C81rNlz4dg7w=
Subject key identifier:   19:90:22:C1:A1:40:E0:58:76:73:87:D8:85:3C:51:06:EC:9C:CD:81
Certificate issuer:       /CN=94CF83961C7D8A5FDC55C308A9F3B2E856270DE9
Certificate serial:       7B9E7159F06C5B49AF3387AFEF5E2935440A14F2
Authority key identifier: 94:CF:83:96:1C:7D:8A:5F:DC:55:C3:08:A9:F3:B2:E8:56:27:0D:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94CF83961C7D8A5FDC55C308A9F3B2E856270DE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/0/323830343a3964383a3a2f33322d3332203d3e20323632393937.roa
Signing time:             Mon 26 Aug 2024 16:12:13 +0000
ROA not before:           Mon 26 Aug 2024 16:07:13 +0000
ROA not after:            Mon 25 Aug 2025 16:12:13 +0000
asID:                     262997
IP address blocks:        2804:9d8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9e:71:59:f0:6c:5b:49:af:33:87:af:ef:5e:29:35:44:0a:14:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94CF83961C7D8A5FDC55C308A9F3B2E856270DE9
        Validity
            Not Before: Aug 26 16:07:13 2024 GMT
            Not After : Aug 25 16:12:13 2025 GMT
        Subject: CN=199022C1A140E058767387D8853C5106EC9CCD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:e1:29:ee:b9:10:83:e1:37:6a:bf:2c:ff:
                    d4:79:dd:36:f6:77:88:d3:29:ca:e7:9b:af:42:b7:
                    33:84:5a:70:92:6e:6a:2b:94:a2:1f:99:65:54:4f:
                    35:f2:38:76:bc:d3:8f:ec:17:56:cb:b0:9c:9f:65:
                    1f:39:41:59:0a:d9:90:f8:0c:60:54:ad:ca:40:c7:
                    ad:7b:b5:5f:fc:2f:1b:77:61:34:3f:60:89:d4:10:
                    a3:e5:4d:3c:3e:1d:2f:28:f2:c9:b4:d7:fa:c9:75:
                    6b:22:a7:1f:36:0c:4e:d2:84:3b:d3:18:3a:23:16:
                    04:57:2b:13:eb:19:8d:11:af:29:2b:ca:fa:cb:32:
                    1b:91:19:4e:86:9c:99:22:10:a5:e5:c8:a2:e4:05:
                    16:26:4d:ce:7e:2b:a6:ec:35:b8:96:9f:d7:03:28:
                    00:86:db:ab:92:29:8d:8c:c9:95:53:3b:1e:83:4a:
                    ff:02:59:ed:87:28:e8:36:44:c6:0d:64:61:2c:7b:
                    e9:6e:e4:00:b0:a9:ab:77:ed:5f:09:3b:fb:6a:ff:
                    06:34:8d:eb:93:a2:9b:ee:bc:8e:b2:7e:1c:82:32:
                    59:79:40:69:83:b7:ab:43:8c:da:13:d1:99:e9:01:
                    65:5b:a1:77:75:62:d8:c1:e8:cf:c9:ea:53:32:61:
                    e9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:90:22:C1:A1:40:E0:58:76:73:87:D8:85:3C:51:06:EC:9C:CD:81
            X509v3 Authority Key Identifier:
                keyid:94:CF:83:96:1C:7D:8A:5F:DC:55:C3:08:A9:F3:B2:E8:56:27:0D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/0/94CF83961C7D8A5FDC55C308A9F3B2E856270DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94CF83961C7D8A5FDC55C308A9F3B2E856270DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/0/323830343a3964383a3a2f33322d3332203d3e20323632393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:9a:57:e1:20:1f:40:29:f3:10:f2:87:30:55:75:7f:9f:1a:
         68:8a:7a:95:30:c2:ec:a7:2a:2e:f7:53:e1:89:4d:da:bd:f3:
         11:72:72:83:ff:d4:cf:00:e4:d5:55:f9:9b:67:0d:7d:7a:88:
         e3:62:b1:9f:f6:03:c2:bd:59:da:1d:17:a3:93:d1:8b:10:d5:
         c7:66:d9:f1:75:af:78:73:c1:47:c0:f0:ac:6e:c1:f7:30:0a:
         0a:41:c9:de:3b:d3:60:2f:95:01:59:7d:d3:a0:29:42:27:ba:
         2a:93:51:f7:a4:e0:c8:14:3c:90:b0:b1:d9:f0:44:21:28:09:
         83:ee:14:c9:3f:04:4f:51:57:1a:68:5e:20:70:80:e0:ee:bd:
         a4:56:71:ef:5a:b5:b2:c8:63:dc:b0:7f:43:fb:82:61:87:1b:
         c8:b5:26:46:3e:f6:05:49:c5:c9:09:74:26:ca:9a:52:64:50:
         02:76:ea:e5:dc:5f:8b:2f:97:4c:02:1e:c9:fa:82:20:92:9b:
         b6:c9:35:cb:17:36:d5:bd:66:57:6b:66:f3:df:40:49:09:1b:
         9d:69:e8:e0:79:0c:38:6d:f9:15:4b:76:59:f7:4b:e4:8e:35:
         54:be:49:88:e7:5c:7c:4e:8c:9b:17:79:54:84:47:0d:61:55:
         5b:31:c8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----