Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/1/323830343a353630303a3a2f33322d3332203d3e20323637393730.roa
File:                     323830343a353630303a3a2f33322d3332203d3e20323637393730.roa (raw, json)
Hash identifier:          vrUvn6vQfJCQxqX9Jkmn6p3d6Hs4kmxbFMmScCgkv+4=
Subject key identifier:   9A:81:1F:A9:9A:4D:82:65:CB:75:63:2D:18:D8:2D:17:E2:61:68:56
Certificate issuer:       /CN=25EE5038C0452FA9C55AB79814EC0BC9075A0252
Certificate serial:       60A267FF443E7EB9F5A4163AF3DED1FD6052FE92
Authority key identifier: 25:EE:50:38:C0:45:2F:A9:C5:5A:B7:98:14:EC:0B:C9:07:5A:02:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EE5038C0452FA9C55AB79814EC0BC9075A0252.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/1/323830343a353630303a3a2f33322d3332203d3e20323637393730.roa
Signing time:             Thu 10 Oct 2024 15:07:30 +0000
ROA not before:           Thu 10 Oct 2024 15:02:30 +0000
ROA not after:            Thu 09 Oct 2025 15:07:30 +0000
asID:                     267970
IP address blocks:        2804:5600::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a2:67:ff:44:3e:7e:b9:f5:a4:16:3a:f3:de:d1:fd:60:52:fe:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25EE5038C0452FA9C55AB79814EC0BC9075A0252
        Validity
            Not Before: Oct 10 15:02:30 2024 GMT
            Not After : Oct  9 15:07:30 2025 GMT
        Subject: CN=9A811FA99A4D8265CB75632D18D82D17E2616856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:25:70:34:f0:bf:76:83:ca:a4:3b:35:d7:
                    09:e9:44:6f:35:52:df:49:f4:43:2b:9f:3f:c9:26:
                    9d:e3:88:c1:2d:12:d8:76:91:a9:63:dd:21:6e:90:
                    8a:ef:7c:2b:8c:5d:0b:2f:bb:10:3e:7b:1f:ad:b4:
                    93:9b:3f:87:2e:62:3d:cd:2d:10:f8:45:6d:0e:35:
                    75:7d:c1:c1:8f:2d:cf:19:30:c5:33:62:8e:1f:8f:
                    a8:90:cb:ac:c9:a0:7c:75:12:cd:06:ea:d3:1c:31:
                    58:ef:47:25:ea:56:2d:68:62:8d:2f:f3:ac:75:d7:
                    10:2a:e0:58:62:02:ed:58:42:05:c5:ef:2d:dd:bb:
                    95:cd:d0:5c:9f:1f:1d:65:82:d7:00:cf:83:41:ac:
                    0f:05:e2:6d:8b:ab:00:42:47:2c:7e:45:eb:8b:60:
                    15:df:c2:51:12:2d:89:72:58:b2:04:8a:d2:d5:72:
                    50:1f:12:9a:68:e5:ac:2b:a1:7d:66:52:8f:32:7b:
                    07:ef:0b:d7:b6:bc:b3:c5:ac:81:26:28:20:cb:5b:
                    16:1e:21:57:72:b3:51:9c:79:25:1c:82:1d:61:fe:
                    95:1a:4d:84:6e:26:0b:b1:21:77:74:a3:9f:8c:db:
                    a2:da:e9:b4:0b:1e:8c:b2:c2:c6:8b:11:86:26:4d:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:81:1F:A9:9A:4D:82:65:CB:75:63:2D:18:D8:2D:17:E2:61:68:56
            X509v3 Authority Key Identifier:
                keyid:25:EE:50:38:C0:45:2F:A9:C5:5A:B7:98:14:EC:0B:C9:07:5A:02:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/1/25EE5038C0452FA9C55AB79814EC0BC9075A0252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EE5038C0452FA9C55AB79814EC0BC9075A0252.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/1/323830343a353630303a3a2f33322d3332203d3e20323637393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5600::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:51:a6:90:4e:13:92:0c:32:40:83:a0:20:c8:e6:6e:86:b1:
         f9:2d:b8:e1:58:b1:57:9c:d3:59:02:cd:c3:27:43:4d:29:2c:
         3b:86:d6:b6:67:f7:f4:e3:f4:b7:92:e0:c4:12:bc:bf:aa:36:
         96:b9:a2:e6:91:af:a1:57:85:0a:f9:72:f1:b6:a7:cc:b2:4d:
         76:f9:f3:c2:f1:15:68:86:e5:7e:b3:1f:2e:0b:2e:9e:0f:db:
         b9:5c:62:79:83:6f:7d:e7:c1:51:ed:51:f2:48:2d:93:ea:2e:
         c5:3e:96:25:8a:1a:53:5c:06:92:2c:1e:40:5b:ba:f6:80:49:
         31:fe:4f:d9:ef:e6:f9:af:e8:00:7f:32:09:3b:24:71:8c:54:
         2e:10:a4:6f:8e:a3:e5:9a:ee:74:23:70:22:67:87:37:61:7d:
         d5:da:9a:13:32:f2:b2:45:61:e5:63:00:c8:a9:51:98:e0:ad:
         06:2a:37:5b:c1:ea:ca:2b:fd:ee:07:44:03:0a:4b:ec:8d:ca:
         89:15:3a:0a:ae:5b:2a:fc:ee:04:c8:3e:6e:1e:db:63:7a:d9:
         79:76:bf:a4:8c:23:20:42:cf:e4:d6:71:b3:ee:bf:f3:b1:7c:
         cf:b8:6e:6c:b3:6b:a3:2a:75:1a:73:1f:94:c0:8d:1a:84:46:
         df:84:8c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----