Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a343061633a3a2f33322d3438203d3e20323635393734.roa
File:                     323830343a343061633a3a2f33322d3438203d3e20323635393734.roa (raw, json)
Hash identifier:          +qBDru1Y8vYBzVQGSHrYBV2YgWTnH5BYS70m4aFHd4c=
Subject key identifier:   BD:71:E0:07:5D:94:03:0D:53:F0:43:C5:7C:47:60:51:87:93:26:59
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       3E95A248421DAD1B9CE8BF1BF6A2F4A52DACE99F
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a343061633a3a2f33322d3438203d3e20323635393734.roa
Signing time:             Thu 31 Oct 2024 16:59:37 +0000
ROA not before:           Thu 31 Oct 2024 16:54:37 +0000
ROA not after:            Thu 30 Oct 2025 16:59:37 +0000
asID:                     265974
IP address blocks:        2804:40ac::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:95:a2:48:42:1d:ad:1b:9c:e8:bf:1b:f6:a2:f4:a5:2d:ac:e9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 16:54:37 2024 GMT
            Not After : Oct 30 16:59:37 2025 GMT
        Subject: CN=BD71E0075D94030D53F043C57C47605187932659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:d7:f2:0b:70:10:f0:f6:d6:b3:20:19:2a:
                    ce:9a:16:56:fc:27:12:4d:cf:35:7d:c7:db:a5:e3:
                    5b:9e:3a:1c:35:3e:bf:ab:0d:18:36:67:cc:5a:e7:
                    07:02:35:5e:39:eb:83:d1:f4:8d:30:fe:13:26:84:
                    f4:08:73:d3:0d:32:0f:d6:0f:da:67:08:9c:98:4d:
                    46:2c:42:fc:63:29:f2:65:57:5a:5f:81:86:b3:ac:
                    6b:d2:7c:17:56:79:17:1b:66:9b:e3:db:1a:d6:fc:
                    2a:f3:6e:54:39:57:ff:ff:13:02:5f:75:cf:5f:6c:
                    43:ac:39:2b:3d:be:c6:64:8b:02:05:8a:c3:80:fc:
                    6f:fd:96:2f:28:0a:55:97:7e:d4:6f:81:26:94:33:
                    94:02:41:a7:7e:e3:cd:3f:db:88:ce:81:ce:bf:60:
                    7a:30:22:cb:1d:0f:ef:46:bd:80:9f:c5:e2:d0:63:
                    3a:ed:da:08:ee:70:c2:4b:df:79:3f:33:d9:54:f5:
                    d6:5e:2d:fa:0f:4c:5a:4d:a7:f1:ad:78:8f:72:cc:
                    77:98:55:2f:e7:44:30:e8:9a:ed:9c:a2:83:c0:4f:
                    1a:d4:26:70:69:05:cf:4a:d7:10:42:4c:97:5b:0c:
                    26:b1:a7:10:13:b5:33:c9:17:9d:50:45:7c:12:e6:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:71:E0:07:5D:94:03:0D:53:F0:43:C5:7C:47:60:51:87:93:26:59
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a343061633a3a2f33322d3438203d3e20323635393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:84:5d:93:3e:80:7c:56:10:b0:57:2a:b8:f0:3f:bd:bc:
         0d:75:99:55:50:f1:c6:4f:7c:c4:29:21:5a:a5:8b:32:26:aa:
         e6:c4:9d:86:45:b3:45:52:b3:0b:1b:f9:d9:6c:5e:bf:02:dd:
         f1:51:1e:f6:9a:9e:7b:e6:57:0b:8d:a0:14:59:34:59:98:b3:
         c2:4c:c3:f1:61:95:44:1e:53:49:87:0b:f7:d7:bb:30:a9:14:
         83:5c:ba:9d:6a:f4:dc:67:72:20:6a:ed:7b:dd:22:d1:78:89:
         18:91:7b:aa:43:a8:bf:b6:1d:b6:15:e0:47:11:58:33:73:99:
         30:be:42:0b:28:45:c4:05:76:4e:7a:d4:79:fe:42:a3:7d:65:
         5f:6e:49:4e:b8:2a:83:b0:45:51:38:a6:6d:c7:6c:75:44:22:
         fb:46:32:c6:af:aa:c3:24:03:a3:04:a7:78:f9:05:45:d3:9c:
         fd:0a:34:6b:a9:1d:49:28:f7:f2:c2:f1:0d:67:2e:c9:54:d3:
         c8:a1:8f:fc:26:66:d2:c4:7c:63:63:c3:c5:2c:7d:2a:26:ad:
         fc:97:fd:92:61:b0:44:ed:ed:8b:86:3e:bd:a5:d9:cc:71:52:
         a1:d0:42:85:24:58:9e:92:b2:fe:53:5b:f9:22:00:35:8d:67:
         58:1f:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----