Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/323830343a323361633a3a2f33322d3332203d3e20323634313737.roa
File:                     323830343a323361633a3a2f33322d3332203d3e20323634313737.roa (raw, json)
Hash identifier:          LLLEyW3yu+nYOiCWjl0Sy0saMrxEY9iJj+lZSfkAgEY=
Subject key identifier:   63:68:46:03:CB:12:65:94:17:5B:37:E3:9C:48:91:14:05:3C:B1:9D
Certificate issuer:       /CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
Certificate serial:       1AD4BD4EBC408F970C7B5D085C1EB1A492CFF398
Authority key identifier: B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/323830343a323361633a3a2f33322d3332203d3e20323634313737.roa
Signing time:             Sat 03 Aug 2024 19:59:14 +0000
ROA not before:           Sat 03 Aug 2024 19:54:14 +0000
ROA not after:            Sat 02 Aug 2025 19:59:14 +0000
asID:                     264177
IP address blocks:        2804:23ac::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d4:bd:4e:bc:40:8f:97:0c:7b:5d:08:5c:1e:b1:a4:92:cf:f3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
        Validity
            Not Before: Aug  3 19:54:14 2024 GMT
            Not After : Aug  2 19:59:14 2025 GMT
        Subject: CN=63684603CB126594175B37E39C489114053CB19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:27:8d:2e:fc:dc:57:28:73:a5:65:ba:ec:ec:
                    a0:8c:3b:ad:c9:d9:5d:80:2d:40:61:4c:bd:00:1e:
                    ed:59:24:b2:dd:c7:dc:f5:5c:a1:21:23:e4:4a:4d:
                    1e:b3:ff:d1:68:e6:37:1f:98:4a:cd:97:ae:c1:f3:
                    95:cc:10:9f:4d:88:a0:9c:29:5e:36:a4:bb:53:3b:
                    49:c9:49:ad:37:5d:b6:df:b7:4f:ee:8e:d3:8e:cd:
                    b9:01:8d:7f:4f:b3:0d:7f:4b:99:87:8a:9e:b9:26:
                    5a:86:61:c8:6a:60:ef:de:6a:3f:42:c0:49:85:ba:
                    bf:ac:8c:85:50:4b:0d:60:a6:8e:90:3d:59:10:49:
                    93:71:c5:bd:db:66:81:23:97:b8:a6:d4:72:c5:4b:
                    e6:46:22:7d:48:de:85:24:8d:52:fd:f6:7d:da:f7:
                    44:26:a4:8e:74:14:1b:19:b8:7f:d1:3d:0a:f4:b6:
                    c5:ed:a9:99:0b:36:0e:cc:55:f3:fe:55:7e:50:7c:
                    49:b8:b8:6c:5d:17:32:89:e3:58:96:13:a2:b8:e7:
                    09:56:3b:e3:ca:d5:fb:44:99:9c:38:5c:ca:2e:4b:
                    66:4f:b9:58:8b:da:af:d6:3b:4e:ef:9b:b5:69:3c:
                    fc:2d:98:1c:56:54:e6:fd:cb:c0:7e:eb:3a:2e:fb:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:68:46:03:CB:12:65:94:17:5B:37:E3:9C:48:91:14:05:3C:B1:9D
            X509v3 Authority Key Identifier:
                keyid:B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/323830343a323361633a3a2f33322d3332203d3e20323634313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:55:30:09:1b:fa:f7:22:84:b2:5c:9d:33:5e:9a:0e:71:a3:
         98:3b:76:fa:a7:e5:bc:74:a9:58:71:9e:27:86:d2:08:a4:fe:
         53:18:11:36:30:4c:d1:77:98:9b:db:8d:db:59:86:0c:fd:05:
         ec:bb:a5:20:49:9e:60:55:de:71:e7:cc:34:3d:a7:c5:0e:48:
         b0:29:59:9a:1e:63:23:69:50:fe:c7:24:af:ca:85:73:cf:2d:
         06:31:f2:0e:e4:9d:fa:12:98:38:57:69:3a:0b:fb:07:7d:a1:
         df:53:5f:12:d9:aa:8c:82:80:f2:a8:7d:96:5e:7e:38:53:20:
         a8:62:73:60:ff:b1:2a:6c:f1:ec:eb:8f:97:d0:0b:75:ac:cb:
         7f:57:37:08:9f:b3:57:f9:5e:09:48:09:02:59:a2:dd:b6:9d:
         e0:f0:5c:e6:70:51:30:0a:1d:e3:ae:10:96:9a:b0:21:83:39:
         0c:fc:ac:37:9c:32:97:9a:03:99:5a:9a:fa:1c:94:53:4b:16:
         cf:6b:3c:ce:00:33:ca:40:e3:b0:6f:9a:fe:41:c0:f1:c8:01:
         b3:df:3a:58:33:83:dc:bc:a8:60:b8:25:d8:f5:14:af:cb:17:
         6a:98:9c:8a:17:82:d6:62:e0:7c:a7:c9:7f:58:c9:25:e0:a8:
         5a:1c:18:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----