Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/323830343a343064303a3a2f33322d313238203d3e20323635393833.roa
File:                     323830343a343064303a3a2f33322d313238203d3e20323635393833.roa (raw, json)
Hash identifier:          mR+wQnnwZqZdAnW95+KSDnrdSPV5Po4VOrjX3FCvUkM=
Subject key identifier:   9B:27:C2:36:2F:FE:F4:61:B3:9B:73:B0:25:11:5E:99:91:22:FB:6C
Certificate issuer:       /CN=9F4380DDB68B0747C5D9301CA7815F93422261AF
Certificate serial:       108BA031AEA237227B4F7319E75141D73AC49838
Authority key identifier: 9F:43:80:DD:B6:8B:07:47:C5:D9:30:1C:A7:81:5F:93:42:22:61:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F4380DDB68B0747C5D9301CA7815F93422261AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/323830343a343064303a3a2f33322d313238203d3e20323635393833.roa
Signing time:             Tue 16 Jul 2024 12:43:05 +0000
ROA not before:           Tue 16 Jul 2024 12:38:05 +0000
ROA not after:            Tue 15 Jul 2025 12:43:05 +0000
asID:                     265983
IP address blocks:        2804:40d0::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8b:a0:31:ae:a2:37:22:7b:4f:73:19:e7:51:41:d7:3a:c4:98:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F4380DDB68B0747C5D9301CA7815F93422261AF
        Validity
            Not Before: Jul 16 12:38:05 2024 GMT
            Not After : Jul 15 12:43:05 2025 GMT
        Subject: CN=9B27C2362FFEF461B39B73B025115E999122FB6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:77:53:6d:ec:92:8f:d5:50:bb:15:ab:9c:db:
                    87:3d:40:cf:c4:46:ae:ac:b7:29:1c:3c:a9:86:b8:
                    18:cc:5b:92:b4:74:c4:2f:c7:6d:e3:fd:bd:59:6c:
                    26:35:1b:6e:83:53:85:f5:39:d7:a0:6d:24:5f:01:
                    5e:eb:0e:fe:53:9a:15:c9:cc:f0:d9:62:f3:9d:ae:
                    2f:ce:6a:ba:b1:8d:a1:28:67:61:c3:af:c5:f6:0c:
                    05:8d:e6:e3:ba:59:29:a2:8b:d1:72:2b:5e:f1:74:
                    e7:db:0d:4b:a3:a1:db:4d:18:c3:a3:48:b2:7a:4d:
                    0a:e1:30:13:fb:aa:a6:90:30:a9:3d:3f:23:2c:8e:
                    4d:5b:1a:51:6f:42:53:46:44:d5:be:2b:a6:fa:0e:
                    cf:f0:63:ac:a9:14:51:83:19:df:21:88:1b:28:86:
                    71:3e:e4:64:d3:52:23:58:04:1c:5d:21:63:5b:bf:
                    c7:4f:d1:73:40:64:89:8c:05:ed:59:8f:c3:f5:54:
                    43:b5:21:a9:01:98:38:c9:8c:97:5a:d6:f4:a7:e5:
                    f8:1a:ba:e3:ca:0e:c1:e5:06:15:04:c3:0f:76:b1:
                    14:02:3d:21:07:4f:66:f5:08:f0:da:ec:e0:ee:bb:
                    42:d2:b3:f8:ae:1e:bb:95:a5:0c:07:ba:83:94:df:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:27:C2:36:2F:FE:F4:61:B3:9B:73:B0:25:11:5E:99:91:22:FB:6C
            X509v3 Authority Key Identifier:
                keyid:9F:43:80:DD:B6:8B:07:47:C5:D9:30:1C:A7:81:5F:93:42:22:61:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/9F4380DDB68B0747C5D9301CA7815F93422261AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F4380DDB68B0747C5D9301CA7815F93422261AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/323830343a343064303a3a2f33322d313238203d3e20323635393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:48:bb:3f:fc:4a:91:3d:d8:96:00:93:81:44:ef:03:32:04:
         25:17:6e:7a:92:db:d3:b5:9a:b3:fc:66:82:72:64:2a:66:51:
         16:1f:cb:71:1c:42:f7:8b:86:5a:5c:dd:d7:57:2e:2b:18:c5:
         30:42:7f:29:78:33:f6:aa:2b:58:e4:1b:dc:56:8e:a1:b3:69:
         2e:0b:8d:1b:24:b2:64:db:19:ef:19:29:0b:7c:de:c8:37:97:
         55:d3:4f:43:27:c1:19:82:1b:af:4a:6f:24:c1:6a:5a:e6:e4:
         85:2a:da:1f:9b:8c:0c:93:5b:c7:24:5b:00:91:c4:ff:48:67:
         85:eb:cf:9b:1f:21:4d:41:b5:13:bf:db:4d:45:5c:c3:f3:04:
         32:08:53:e6:78:47:3e:de:dc:a8:c3:3a:69:28:51:5a:37:1b:
         46:10:56:89:dd:f1:cf:5e:8a:74:07:7c:e7:46:ce:54:85:01:
         8e:7f:f0:cf:08:7b:2d:05:02:af:c4:03:9f:9a:8a:48:04:39:
         e1:df:0b:f2:e1:a2:cb:df:98:22:92:f8:6c:60:1b:a0:fb:ce:
         60:dc:6d:2a:10:71:6e:0a:17:a6:0c:13:70:79:d9:b2:ea:ed:
         b2:ec:af:ab:5b:b0:e2:ba:65:9b:ea:ee:6c:b5:95:61:56:2c:
         21:42:a7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----