Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a383030303a3a2f33342d3334203d3e20323730383835.roa
File:                     323830343a373266303a383030303a3a2f33342d3334203d3e20323730383835.roa (raw, json)
Hash identifier:          r8vfQdPBdiGJLOeSY5muWomVspQPitHqpeE/x6zDMxI=
Subject key identifier:   7B:8C:D1:8F:0A:6C:2C:08:B7:54:79:DC:AE:C4:BC:D2:91:26:65:34
Certificate issuer:       /CN=DC049CCDCC417B7071369106C6F115AD908A6D43
Certificate serial:       08175AA75C51D9298F75A2DD310FAE4AF833FED2
Authority key identifier: DC:04:9C:CD:CC:41:7B:70:71:36:91:06:C6:F1:15:AD:90:8A:6D:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC049CCDCC417B7071369106C6F115AD908A6D43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a383030303a3a2f33342d3334203d3e20323730383835.roa
Signing time:             Fri 06 Sep 2024 18:56:03 +0000
ROA not before:           Fri 06 Sep 2024 18:51:03 +0000
ROA not after:            Fri 05 Sep 2025 18:56:03 +0000
asID:                     270885
IP address blocks:        2804:72f0:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:17:5a:a7:5c:51:d9:29:8f:75:a2:dd:31:0f:ae:4a:f8:33:fe:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC049CCDCC417B7071369106C6F115AD908A6D43
        Validity
            Not Before: Sep  6 18:51:03 2024 GMT
            Not After : Sep  5 18:56:03 2025 GMT
        Subject: CN=7B8CD18F0A6C2C08B75479DCAEC4BCD291266534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:1e:02:46:5b:b0:86:60:86:ae:55:3c:74:
                    85:fb:d5:0a:98:91:38:bc:82:3a:bb:08:1b:61:07:
                    d9:14:80:87:e4:b4:1b:25:46:31:db:72:ff:a6:e7:
                    7b:b1:57:7f:10:03:16:c7:4f:89:e1:1a:08:81:f3:
                    92:aa:4d:3e:36:75:dd:73:bb:e5:eb:46:af:58:a2:
                    44:6d:f9:27:d1:72:33:08:f1:56:29:c0:db:6d:64:
                    26:fd:2b:77:73:35:af:53:19:b3:09:83:fe:7b:99:
                    2a:ec:f4:f7:0b:92:14:6a:2a:fa:06:ea:4a:4d:8e:
                    c3:e6:0e:d5:13:72:dd:e3:2a:36:a7:d3:9e:ea:d4:
                    c6:d8:49:27:25:f8:bb:a4:19:b4:c4:aa:7c:55:f2:
                    e2:e9:0c:06:5f:a7:10:89:41:79:7d:35:a1:a5:c6:
                    39:9e:4a:a3:2a:85:9e:35:4c:ad:36:08:26:51:1f:
                    63:c7:7a:2a:8e:78:a2:5a:df:34:18:1b:d5:08:c6:
                    40:87:66:b5:74:3e:f3:6e:1f:7c:a3:5d:51:d5:87:
                    c9:1d:58:f5:01:fb:31:2b:98:73:b8:65:32:6f:94:
                    37:98:40:89:69:29:79:63:c3:a9:a5:33:9c:e4:c9:
                    11:62:81:ba:b0:1b:38:c9:b4:79:66:4d:8a:b8:5d:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8C:D1:8F:0A:6C:2C:08:B7:54:79:DC:AE:C4:BC:D2:91:26:65:34
            X509v3 Authority Key Identifier:
                keyid:DC:04:9C:CD:CC:41:7B:70:71:36:91:06:C6:F1:15:AD:90:8A:6D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/DC049CCDCC417B7071369106C6F115AD908A6D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC049CCDCC417B7071369106C6F115AD908A6D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a383030303a3a2f33342d3334203d3e20323730383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72f0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:c6:bf:57:66:11:a3:6a:8d:aa:70:88:d9:14:e0:01:11:c7:
         15:86:52:26:7e:b8:f5:80:21:c8:a7:fa:63:c7:d9:af:9b:25:
         73:63:3d:fa:c8:be:2f:da:3e:52:ed:b8:8a:e0:f4:69:b0:b6:
         1b:6a:12:8b:ea:ca:2d:dc:1f:5d:45:ea:1c:da:fc:d8:15:f1:
         e7:aa:f3:11:45:2e:f5:ff:e8:6f:9f:fe:a3:eb:c0:b8:6e:4e:
         0e:ee:f6:24:62:f3:11:04:8b:6c:8d:23:0f:3c:c9:3f:b2:a0:
         d0:08:fe:7f:7c:ad:42:fc:0a:7d:be:bf:ca:83:89:4c:92:58:
         bb:ca:fc:d3:76:55:1a:12:d1:28:1f:7f:8e:6f:3a:97:99:1b:
         2f:80:f8:52:04:6f:19:1b:da:c4:93:03:6c:df:5a:66:77:c5:
         1c:09:39:de:e4:42:22:79:bc:f3:b3:1c:75:b7:a7:71:95:88:
         fc:ba:54:29:a9:6a:75:1d:2b:44:d7:73:ab:32:e6:7b:3e:29:
         fc:0f:24:ba:44:b2:7c:a1:d4:b5:08:5f:40:48:a9:be:c3:7d:
         db:97:1a:a3:57:86:b0:a2:e3:76:0b:21:95:5f:18:bf:7a:ed:
         9d:f8:58:fc:84:a3:c5:3a:55:ff:d6:d6:b1:9c:fd:73:2f:58:
         1b:80:19:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----