Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/323830343a366462303a3a2f33322d313238203d3e20323730353439.roa
File:                     323830343a366462303a3a2f33322d313238203d3e20323730353439.roa (raw, json)
Hash identifier:          kqppUkOje9k8VVgnM2IR3jsQAndnFu/WnjZ5N8yWvu0=
Subject key identifier:   85:12:3D:B7:40:F4:8D:4C:0E:DB:27:73:69:51:8D:08:C0:05:EC:07
Certificate issuer:       /CN=CD8C447FF133EB21C0315B78AB00573F23F7A647
Certificate serial:       302CB5E65800423C6DD03B323C951970FACE51E3
Authority key identifier: CD:8C:44:7F:F1:33:EB:21:C0:31:5B:78:AB:00:57:3F:23:F7:A6:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8C447FF133EB21C0315B78AB00573F23F7A647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/323830343a366462303a3a2f33322d313238203d3e20323730353439.roa
Signing time:             Thu 05 Sep 2024 14:35:15 +0000
ROA not before:           Thu 05 Sep 2024 14:30:15 +0000
ROA not after:            Thu 04 Sep 2025 14:35:15 +0000
asID:                     270549
IP address blocks:        2804:6db0::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2c:b5:e6:58:00:42:3c:6d:d0:3b:32:3c:95:19:70:fa:ce:51:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8C447FF133EB21C0315B78AB00573F23F7A647
        Validity
            Not Before: Sep  5 14:30:15 2024 GMT
            Not After : Sep  4 14:35:15 2025 GMT
        Subject: CN=85123DB740F48D4C0EDB277369518D08C005EC07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d6:b2:29:bb:bf:3e:b8:49:79:40:54:8d:3f:
                    84:3f:ef:4f:bb:2b:b8:0c:74:49:b3:77:83:bb:ed:
                    1c:7e:fa:d6:4b:7b:35:9a:83:b8:23:be:7d:13:79:
                    28:05:d2:68:ee:c5:42:8b:59:ba:85:6b:f9:bd:8e:
                    8a:cd:25:a7:9f:1c:8a:a2:1a:ff:3a:42:c7:df:2d:
                    90:aa:f1:9e:32:6e:a4:5d:e9:2f:fe:d5:5a:c8:25:
                    10:b5:e3:b5:60:f0:49:11:90:db:31:d3:01:ee:f5:
                    ea:7e:89:f8:c9:2c:37:69:c0:5d:9e:2e:9b:2d:33:
                    0b:5a:ce:b9:b6:16:db:91:ea:97:92:e7:83:45:6b:
                    12:ce:2f:05:bd:71:0c:a1:63:fe:9d:f9:93:18:4f:
                    60:3b:f8:8c:a3:4e:44:bd:a9:25:5e:54:ca:e6:56:
                    64:37:9b:26:a1:59:7b:6c:e5:92:df:3a:c4:4b:45:
                    85:c9:12:f2:22:df:da:3f:30:80:fe:a5:91:74:76:
                    d2:af:eb:e3:b2:9e:6d:9e:bc:29:ed:5b:14:ef:d2:
                    04:7f:40:26:71:00:05:66:07:f1:34:2b:90:92:d6:
                    0c:4b:6b:46:f6:4f:8e:f2:94:20:85:3a:79:f7:fa:
                    50:f2:8c:05:57:f3:8c:bf:bf:2a:db:41:f8:2b:cd:
                    61:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:12:3D:B7:40:F4:8D:4C:0E:DB:27:73:69:51:8D:08:C0:05:EC:07
            X509v3 Authority Key Identifier:
                keyid:CD:8C:44:7F:F1:33:EB:21:C0:31:5B:78:AB:00:57:3F:23:F7:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/CD8C447FF133EB21C0315B78AB00573F23F7A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8C447FF133EB21C0315B78AB00573F23F7A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/323830343a366462303a3a2f33322d313238203d3e20323730353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:fe:9c:82:f2:af:a1:10:10:6f:b4:22:a5:f0:3b:78:eb:6e:
         0f:2a:bf:e0:0a:43:99:7f:45:25:8f:0e:e7:8e:d2:79:c2:74:
         fc:20:45:08:5a:4b:62:78:b3:70:58:59:ca:d5:cd:00:07:5d:
         b5:db:60:0f:13:5e:cd:9d:1f:fc:57:89:65:4a:ff:47:5e:06:
         8b:57:7b:98:b4:58:d6:74:b1:a2:12:59:f4:6f:0b:5f:78:62:
         93:9e:a0:72:b8:29:07:8a:5e:a3:f0:d9:4a:5c:1a:68:88:11:
         17:4b:a2:b6:82:fb:83:99:87:73:d1:07:b7:1b:5f:66:c8:93:
         a6:b5:f5:0b:c8:f9:5a:b1:5a:3d:22:16:76:64:67:b1:ee:be:
         aa:0a:19:e1:22:6d:c9:24:56:f3:fe:03:d9:f1:87:a6:c3:1c:
         db:4d:69:3f:f4:59:c2:61:02:ed:ca:f9:3f:01:fc:c4:2e:80:
         c5:67:3a:c5:a3:cc:ce:95:40:9e:8e:63:2c:15:e0:d4:04:af:
         b7:5e:0c:71:31:9c:77:ce:a9:11:46:2d:e6:0a:b4:79:79:83:
         3f:70:99:51:15:f3:84:c6:e0:99:a4:cd:a1:15:0f:28:1a:d1:
         20:3a:01:42:ff:e9:c5:e6:6c:3b:a6:f6:49:9c:aa:62:ac:b4:
         8b:ad:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----