Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a3763633a3a2f33322d3438203d3e203238363639.roa
File:                     323830343a3763633a3a2f33322d3438203d3e203238363639.roa (raw, json)
Hash identifier:          zcxH3w9Jcrik94Hr++8t1gkoYa/fEyvSwXPCC1WUD9s=
Subject key identifier:   CD:3A:3F:D2:E7:85:AB:97:09:BF:DB:13:DF:F6:A5:89:14:1C:ED:EF
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       5ABBF09C696EC4760959BAA21D34FDD9034C6EEA
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a3763633a3a2f33322d3438203d3e203238363639.roa
Signing time:             Tue 23 Jul 2024 11:38:45 +0000
ROA not before:           Tue 23 Jul 2024 11:33:45 +0000
ROA not after:            Tue 22 Jul 2025 11:38:45 +0000
asID:                     28669
IP address blocks:        2804:7cc::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bb:f0:9c:69:6e:c4:76:09:59:ba:a2:1d:34:fd:d9:03:4c:6e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Jul 23 11:33:45 2024 GMT
            Not After : Jul 22 11:38:45 2025 GMT
        Subject: CN=CD3A3FD2E785AB9709BFDB13DFF6A589141CEDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:73:0e:73:cd:30:b7:12:2f:43:31:7a:19:
                    42:da:e1:35:7d:13:d9:f2:ec:10:79:c1:84:9b:6d:
                    48:a2:e7:dc:22:89:a7:64:f4:d7:2e:8b:f3:48:c7:
                    ef:23:ee:f0:21:a3:66:77:40:41:cb:90:35:8c:c7:
                    a8:e3:a4:8b:cd:93:f6:43:e3:f5:20:7b:aa:d7:a9:
                    e0:ac:f2:23:de:ab:e7:d6:26:2a:9a:08:5b:35:21:
                    a1:21:dc:70:d0:62:f9:76:17:de:a4:eb:28:bd:ac:
                    96:a4:3e:c4:07:50:3a:b1:b6:4d:7d:22:1b:fb:74:
                    60:48:b1:b8:b8:29:92:2e:69:c6:2c:3f:dc:88:94:
                    8f:cf:db:84:d1:3f:45:2b:ce:c2:81:1e:f3:0b:2f:
                    f4:47:fe:2c:fd:3b:97:98:90:2c:e9:63:fa:46:8f:
                    a5:c0:b1:b2:d0:d7:5f:9b:b8:27:ed:1b:ce:fd:7e:
                    b5:5e:d5:de:79:2f:4d:47:df:40:ef:c5:2e:8d:05:
                    8d:3a:30:1c:1e:e2:0b:e7:cf:39:20:ac:fe:65:05:
                    21:e6:d2:4e:22:c1:b5:9a:e5:4b:38:3e:66:77:b1:
                    66:d5:68:50:19:38:9a:0d:46:2e:cb:f7:ff:bf:bb:
                    e8:e6:4c:bb:00:7d:d7:90:18:0b:fb:1a:07:d3:c9:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3A:3F:D2:E7:85:AB:97:09:BF:DB:13:DF:F6:A5:89:14:1C:ED:EF
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a3763633a3a2f33322d3438203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:e1:5e:be:34:8c:5c:79:81:84:50:f9:cb:35:06:1d:53:48:
         5b:ce:45:2a:55:70:b5:46:33:2e:b8:85:01:9d:2f:6c:81:db:
         e8:dd:06:ce:88:8b:07:e9:31:d4:c5:c3:58:7f:ff:d1:60:a6:
         2b:7f:2b:d8:ab:b7:15:b4:ef:4e:95:2d:ee:1e:79:c3:4f:3e:
         c1:0d:f8:1f:26:bb:3c:40:f4:d9:ed:b9:27:f5:85:40:65:c8:
         32:c3:b7:4d:b3:8a:c4:2f:15:dc:29:7a:77:73:34:ff:b1:99:
         ff:f3:a5:32:ac:b9:b1:e6:32:04:10:0f:d5:8c:f0:0d:f5:00:
         9c:50:73:d8:24:52:0c:a6:15:d1:34:87:94:ed:d6:a9:ed:11:
         8b:cf:34:03:67:82:2f:5c:e6:28:29:c9:fa:5a:a3:86:41:9b:
         86:dd:f9:2b:9a:0d:4e:fa:24:84:cc:db:9e:b0:d1:52:79:26:
         41:6e:a6:f3:8c:1a:e7:65:54:a3:cd:c2:16:78:aa:4c:ff:f2:
         b8:bb:94:60:3e:10:02:d4:e1:9e:ac:81:7b:c5:29:b3:16:06:
         9d:cc:39:fe:9d:99:a1:55:62:df:70:10:a1:f9:b6:fe:c6:8e:
         29:f9:7a:aa:e2:f5:8c:bd:90:88:49:4d:a5:c5:5a:b2:da:af:
         cd:31:2d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----