Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/323830343a323062383a3a2f33322d313238203d3e20323634353130.roa
File:                     323830343a323062383a3a2f33322d313238203d3e20323634353130.roa (raw, json)
Hash identifier:          BjP10nI97IkNbgLkmGoRDS0z6n/M0Cni3kTyrRuc8oM=
Subject key identifier:   40:BA:5F:8A:12:07:20:2A:38:7C:28:B3:7F:A1:53:37:AA:F0:99:3B
Certificate issuer:       /CN=75F6166FAB4E707CD229F97B9D3CE612B7C29B1E
Certificate serial:       72D5FEE45D19C1C1637D8F82970FC97497B3D57C
Authority key identifier: 75:F6:16:6F:AB:4E:70:7C:D2:29:F9:7B:9D:3C:E6:12:B7:C2:9B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75F6166FAB4E707CD229F97B9D3CE612B7C29B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/323830343a323062383a3a2f33322d313238203d3e20323634353130.roa
Signing time:             Tue 23 Jul 2024 03:44:16 +0000
ROA not before:           Tue 23 Jul 2024 03:39:16 +0000
ROA not after:            Tue 22 Jul 2025 03:44:16 +0000
asID:                     264510
IP address blocks:        2804:20b8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d5:fe:e4:5d:19:c1:c1:63:7d:8f:82:97:0f:c9:74:97:b3:d5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75F6166FAB4E707CD229F97B9D3CE612B7C29B1E
        Validity
            Not Before: Jul 23 03:39:16 2024 GMT
            Not After : Jul 22 03:44:16 2025 GMT
        Subject: CN=40BA5F8A1207202A387C28B37FA15337AAF0993B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:f7:eb:69:7e:84:74:08:28:5f:9a:2b:18:
                    17:db:51:a3:36:65:2b:6e:d0:ce:f8:59:fb:a7:af:
                    57:8c:9d:c7:b5:c1:2f:14:08:58:82:11:4f:c9:0a:
                    6f:3d:c5:e4:f9:57:8a:df:31:e7:0d:b3:33:ef:6d:
                    b3:e3:75:ce:32:79:eb:b8:d1:1f:d6:0e:c9:45:53:
                    2f:fd:86:0d:7b:a3:50:11:26:73:d1:cb:73:51:86:
                    2a:17:83:72:d2:e8:79:f5:25:67:ff:5a:0f:7f:80:
                    df:aa:26:7f:46:0f:4f:4e:5f:23:21:7c:30:93:b6:
                    26:e8:bc:86:b2:2c:86:a8:21:8e:fa:1c:f4:e4:9b:
                    cf:33:10:fe:5f:af:a4:01:f2:82:65:fb:5c:fb:d8:
                    7e:89:6a:78:d9:54:e7:a7:f2:d0:b4:ba:38:a7:be:
                    57:6c:d1:f3:72:e5:d4:ed:08:d6:fa:bf:d1:5e:ed:
                    bf:7a:b4:6e:18:fd:d2:bf:76:4d:76:1e:75:60:70:
                    ad:01:3b:f6:6e:40:cd:69:23:ed:a0:3b:a3:c3:cd:
                    dc:37:9e:95:49:a0:f1:b6:78:11:33:c6:1b:7d:a6:
                    4c:51:b2:34:d3:c2:03:5f:41:9a:43:8b:ff:ca:36:
                    98:51:83:8b:85:f3:53:09:ee:f8:51:00:d5:f0:38:
                    a7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BA:5F:8A:12:07:20:2A:38:7C:28:B3:7F:A1:53:37:AA:F0:99:3B
            X509v3 Authority Key Identifier:
                keyid:75:F6:16:6F:AB:4E:70:7C:D2:29:F9:7B:9D:3C:E6:12:B7:C2:9B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/75F6166FAB4E707CD229F97B9D3CE612B7C29B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75F6166FAB4E707CD229F97B9D3CE612B7C29B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/323830343a323062383a3a2f33322d313238203d3e20323634353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:67:50:79:e1:e6:c6:b6:61:b0:06:72:8f:69:81:1d:f9:6f:
         5b:ec:65:2a:21:aa:b6:ac:15:9c:4a:0c:0f:b4:c2:81:5d:f3:
         91:c8:19:cb:5c:7f:c1:dc:e6:01:b7:20:8f:14:b8:34:a6:b3:
         78:a5:bf:20:b9:5d:0a:7d:06:a2:9b:66:71:8a:c8:dd:0a:bd:
         1f:e9:5f:dc:d8:ae:d8:71:77:f9:3d:6e:af:bd:94:d9:4d:40:
         47:fc:e9:b0:29:9e:36:6b:3f:1d:cd:39:25:0f:6a:9e:f2:d6:
         17:fb:6d:3b:80:03:c2:e5:6d:d8:e8:10:30:43:f7:d0:19:26:
         ab:72:96:9a:2c:bb:35:a2:ae:f0:54:6e:ab:dd:6e:b1:21:2b:
         bb:fb:8a:57:67:89:96:8c:57:e6:b1:21:e1:c2:d5:6d:9e:45:
         58:9d:3a:63:f6:87:5d:f4:ac:7b:c2:67:e4:42:b3:ec:56:83:
         de:51:7f:c1:d9:a9:1a:77:15:ec:be:e0:2d:dc:6e:c9:16:96:
         58:0a:1c:ee:48:7a:bf:d8:22:00:86:21:b8:4c:18:4a:ef:20:
         0d:b1:5e:08:cd:38:8d:fd:c1:6e:87:37:97:0d:52:ea:ee:b7:
         be:a0:cf:4c:10:93:48:b0:d0:3f:d4:fa:64:a0:2c:8d:5c:02:
         ca:8a:3b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----