Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/323830343a3438383a3a2f33322d313238203d3e20323632343437.roa
File:                     323830343a3438383a3a2f33322d313238203d3e20323632343437.roa (raw, json)
Hash identifier:          mLCzib9YrxM1ZOaZCMbuk/vXAwTGAngwrYbVd/wvu5A=
Subject key identifier:   E0:D5:64:12:75:43:2D:1D:4D:7C:3D:D2:3E:F2:CC:37:DC:ED:45:7E
Certificate issuer:       /CN=82AA2A44587143039ECC7B4D4C3099B1E3FAEB64
Certificate serial:       7316C613896CCBE4B08897C335752D3F0517039E
Authority key identifier: 82:AA:2A:44:58:71:43:03:9E:CC:7B:4D:4C:30:99:B1:E3:FA:EB:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/323830343a3438383a3a2f33322d313238203d3e20323632343437.roa
Signing time:             Fri 11 Oct 2024 23:46:30 +0000
ROA not before:           Fri 11 Oct 2024 23:41:30 +0000
ROA not after:            Fri 10 Oct 2025 23:46:30 +0000
asID:                     262447
IP address blocks:        2804:488::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:16:c6:13:89:6c:cb:e4:b0:88:97:c3:35:75:2d:3f:05:17:03:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82AA2A44587143039ECC7B4D4C3099B1E3FAEB64
        Validity
            Not Before: Oct 11 23:41:30 2024 GMT
            Not After : Oct 10 23:46:30 2025 GMT
        Subject: CN=E0D5641275432D1D4D7C3DD23EF2CC37DCED457E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:30:a6:d3:07:58:ed:0a:dc:14:d7:43:55:
                    94:f7:bf:99:4b:8b:09:d8:13:06:55:03:f3:5e:9c:
                    f2:8e:c5:47:3a:09:c4:24:fc:4a:05:22:bb:e4:a0:
                    1e:ee:a2:58:c5:86:25:a0:d1:fa:d9:e2:a6:16:ac:
                    62:7b:5b:3e:c5:a2:d9:99:fb:37:51:e5:4d:39:b1:
                    a0:bf:98:72:99:87:7c:ca:b4:f6:b9:c3:08:d4:dc:
                    6d:89:6a:24:76:2c:13:b1:d7:57:8e:f4:c0:25:d8:
                    d2:72:ec:81:ea:bc:39:93:e9:cc:fe:43:53:75:87:
                    15:73:25:22:f2:27:c1:be:1e:25:5b:e5:00:72:7b:
                    03:dc:7b:aa:99:2a:6d:93:41:34:1b:27:30:fe:11:
                    09:0d:e3:be:fd:ac:17:c3:13:99:79:e1:62:49:7b:
                    3f:86:1d:47:ee:6b:70:04:4e:37:47:07:31:7f:18:
                    ad:23:3d:9d:b5:f5:75:bc:32:d6:a5:46:4d:5f:ad:
                    48:7b:3e:95:6d:69:51:72:f7:54:ca:42:18:05:7b:
                    6d:73:de:d9:9d:03:f3:2d:2c:ec:9b:65:f0:6e:b2:
                    e9:36:7e:46:44:39:0d:e8:d1:23:ab:4c:14:49:1a:
                    90:c7:8e:fa:b8:ed:c2:00:bb:5f:3c:d1:35:1a:ff:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D5:64:12:75:43:2D:1D:4D:7C:3D:D2:3E:F2:CC:37:DC:ED:45:7E
            X509v3 Authority Key Identifier:
                keyid:82:AA:2A:44:58:71:43:03:9E:CC:7B:4D:4C:30:99:B1:E3:FA:EB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/323830343a3438383a3a2f33322d313238203d3e20323632343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:488::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:2a:05:05:44:a3:a3:81:2b:b8:d5:2c:3b:65:4b:bd:87:4f:
         df:61:2b:17:8e:8f:a5:6b:d6:c3:9a:fd:32:4f:16:92:0b:90:
         2a:61:f7:a9:ca:a2:2e:20:0e:9a:5d:71:6b:14:c4:70:08:69:
         11:9c:0c:e2:62:5e:6b:f9:e6:86:e4:7d:14:70:a7:c3:5e:02:
         e3:16:3d:c8:e4:13:50:95:58:34:4c:f7:55:a4:8e:d5:61:61:
         96:fc:1f:7d:97:c0:d9:87:12:a3:cb:ac:39:6a:04:04:87:75:
         f8:90:16:4d:91:33:9d:4b:b7:fe:97:11:09:a3:e3:f8:d5:14:
         e3:fe:c8:19:c1:c4:69:be:17:2a:61:23:90:1b:f1:fc:e5:37:
         ee:c2:c3:3f:85:a4:b3:11:f2:48:7b:8e:2b:ca:28:7a:2f:4a:
         ff:7b:3a:e6:0f:fa:0f:4a:6d:8b:d5:4f:ab:8f:ae:84:5a:5c:
         3c:04:13:d9:33:d4:67:c2:f7:4f:2c:47:6c:eb:2e:e3:21:dd:
         00:9e:f0:9f:d1:5f:85:a2:4c:db:7b:53:d6:d4:50:69:ab:9e:
         3c:50:36:bd:ca:84:29:d8:ce:f5:37:c7:a1:bc:d9:a5:00:50:
         dc:89:49:d1:ea:34:a4:d9:27:bb:2a:5c:70:96:38:a6:41:2e:
         e6:61:67:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----