Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/323830343a316162303a3a2f33322d3332203d3e203631383736.roa
File:                     323830343a316162303a3a2f33322d3332203d3e203631383736.roa (raw, json)
Hash identifier:          Zanv1+jyYocqoCVMrXHgyd4cf6cDhA7CjhK/f5y0+T8=
Subject key identifier:   25:12:B3:E1:A4:D9:1B:2B:7D:AB:EE:A0:E5:31:A4:53:06:C2:C9:02
Certificate issuer:       /CN=64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1
Certificate serial:       3D60A12756505A1A105EB712A99BDC41E490CED7
Authority key identifier: 64:F4:E6:E9:FE:0B:A7:D9:DE:B0:17:D8:D8:8D:AB:AF:DC:73:29:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/323830343a316162303a3a2f33322d3332203d3e203631383736.roa
Signing time:             Fri 11 Oct 2024 19:37:13 +0000
ROA not before:           Fri 11 Oct 2024 19:32:13 +0000
ROA not after:            Fri 10 Oct 2025 19:37:13 +0000
asID:                     61876
IP address blocks:        2804:1ab0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:60:a1:27:56:50:5a:1a:10:5e:b7:12:a9:9b:dc:41:e4:90:ce:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1
        Validity
            Not Before: Oct 11 19:32:13 2024 GMT
            Not After : Oct 10 19:37:13 2025 GMT
        Subject: CN=2512B3E1A4D91B2B7DABEEA0E531A45306C2C902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:30:22:00:d6:13:6d:90:b8:12:6b:9f:cd:
                    a7:eb:54:5a:27:20:96:1a:0a:28:ae:8d:d3:21:9d:
                    eb:65:a6:db:5a:8a:12:20:05:85:b9:8c:ff:a8:d1:
                    86:44:d1:f8:9c:91:dd:e0:0d:64:e0:f5:14:aa:43:
                    d9:3f:91:35:8d:b6:65:97:8b:46:4d:7d:fb:7d:f6:
                    2c:79:22:34:98:cc:f8:bb:23:57:3b:6a:c7:80:03:
                    07:24:99:75:0b:81:90:9c:85:21:1e:2b:97:3d:ce:
                    80:65:31:fb:a3:4f:6e:e7:5f:d6:df:c7:0d:2d:ee:
                    51:74:d1:d5:95:bd:75:74:32:b8:a1:19:2f:50:17:
                    ba:cd:d4:9f:14:f4:9d:c6:a3:25:ae:f2:3b:c2:ea:
                    a2:68:de:d6:dd:e6:0d:9d:cc:ab:69:e1:ef:ea:47:
                    5f:4b:67:04:27:a8:99:c6:2b:dc:75:9e:cb:6f:fd:
                    0c:df:fe:83:e7:d0:ce:40:f2:2c:c8:13:77:8d:0f:
                    ec:1d:80:9b:45:df:b6:9d:1f:a5:ca:aa:a8:d8:9a:
                    9f:93:8a:a8:9e:d2:f6:7c:37:d8:ec:9d:15:e0:a8:
                    51:7b:d2:10:34:05:0b:26:9c:ed:3a:c2:1f:f5:25:
                    be:06:d5:ea:83:56:6e:27:1f:fd:81:c5:e4:92:52:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:12:B3:E1:A4:D9:1B:2B:7D:AB:EE:A0:E5:31:A4:53:06:C2:C9:02
            X509v3 Authority Key Identifier:
                keyid:64:F4:E6:E9:FE:0B:A7:D9:DE:B0:17:D8:D8:8D:AB:AF:DC:73:29:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/323830343a316162303a3a2f33322d3332203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:28:a7:22:78:d0:4f:39:57:0b:aa:16:ee:60:9d:92:30:29:
         8d:07:ba:41:c7:d5:73:fb:a5:b2:46:07:25:84:12:42:bc:87:
         55:e8:0a:dc:86:8d:53:e7:8b:1b:ae:71:6e:44:b5:fb:05:7d:
         cd:0f:98:e9:d8:b6:e7:75:68:b4:7d:eb:34:76:32:b1:09:ca:
         68:9c:18:a3:97:fc:c1:74:bd:c9:6d:cc:70:3f:c1:88:7b:e1:
         33:bc:f3:44:0f:a9:d8:ea:e1:d3:a3:f7:38:b7:1a:5e:62:b4:
         4e:d7:b9:9b:ce:d1:68:59:d8:82:85:fc:4b:e3:2e:36:4d:55:
         f9:db:9f:b8:d7:fc:0a:63:61:2e:05:ac:ff:f9:2e:0c:a4:8e:
         27:29:6d:f8:93:6e:d4:a4:82:f9:dc:6a:3a:27:a2:73:3c:5a:
         ea:44:e7:9c:38:de:c5:6b:d6:43:14:9a:75:25:b6:ff:93:2c:
         d7:9d:1a:1a:58:b4:35:f7:ba:ee:8a:2e:c1:3d:0f:e1:3b:69:
         fe:60:0f:24:87:3d:9e:0a:f9:55:28:0d:fb:9d:08:8a:b8:a1:
         38:86:ea:98:5e:e9:6a:93:f3:81:34:84:40:ff:f9:5e:8c:18:
         75:5a:7a:59:59:09:e5:c9:53:78:e2:9c:34:49:28:c0:35:37:
         be:df:5c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----