Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9AYHVd7oce2p1jbon5zij6QU8TKS9zR8GDbwXHhzK5va/0/323830343a346330343a3a2f33322d313238203d3e20323637333433.roa
File:                     323830343a346330343a3a2f33322d313238203d3e20323637333433.roa (raw, json)
Hash identifier:          61wS3xzC/owgZ4DYdjXLRvFQVaJzajwdaVVbJphE+wQ=
Subject key identifier:   22:47:0C:3A:1A:6F:41:BC:32:2E:29:3A:2B:68:DF:D5:4F:DB:A2:8C
Certificate issuer:       /CN=BEF490EECDB1D2A3F8499B8782FFBF15EE18159B
Certificate serial:       0C8A5F999ACF06476A324D5DE7F73E6F2633EA6A
Authority key identifier: BE:F4:90:EE:CD:B1:D2:A3:F8:49:9B:87:82:FF:BF:15:EE:18:15:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF490EECDB1D2A3F8499B8782FFBF15EE18159B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9AYHVd7oce2p1jbon5zij6QU8TKS9zR8GDbwXHhzK5va/0/323830343a346330343a3a2f33322d313238203d3e20323637333433.roa
Signing time:             Fri 14 Jun 2024 07:14:42 +0000
ROA not before:           Fri 14 Jun 2024 07:09:42 +0000
ROA not after:            Fri 13 Jun 2025 07:14:42 +0000
asID:                     267343
IP address blocks:        2804:4c04::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8a:5f:99:9a:cf:06:47:6a:32:4d:5d:e7:f7:3e:6f:26:33:ea:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEF490EECDB1D2A3F8499B8782FFBF15EE18159B
        Validity
            Not Before: Jun 14 07:09:42 2024 GMT
            Not After : Jun 13 07:14:42 2025 GMT
        Subject: CN=22470C3A1A6F41BC322E293A2B68DFD54FDBA28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:7c:a1:1f:9b:76:76:dc:fa:00:32:67:3a:
                    27:37:c2:4e:48:79:bf:58:7d:a5:92:17:c0:cd:6b:
                    3b:08:a8:95:e0:ca:72:f1:52:36:6b:bb:27:a2:38:
                    17:e4:3c:f6:49:80:7d:ed:dc:ce:6d:48:ad:d2:57:
                    8a:68:ab:e1:e6:5c:2b:f6:c8:18:c8:4c:82:a8:03:
                    c9:55:71:65:71:a8:3b:32:7e:87:d0:64:36:0c:04:
                    68:a7:7a:3e:d6:a1:d7:92:09:83:01:e9:8f:e9:30:
                    bd:59:65:5e:fe:ad:23:ab:5e:bb:9d:8e:c9:fb:d8:
                    c2:2b:a8:bd:5d:3f:49:5c:23:db:30:a7:ba:a6:e1:
                    91:f6:e0:49:b2:c6:46:80:8a:3b:b6:65:54:cc:11:
                    ac:06:9b:a5:61:a1:11:74:c9:a9:97:1f:d3:8d:1a:
                    94:9f:ca:b8:1f:e2:23:fe:e9:8c:c9:b5:9e:cb:57:
                    98:10:b6:ea:7b:28:66:da:12:54:27:fc:d2:2e:aa:
                    af:63:c5:4f:44:89:8c:b3:08:cc:6f:35:55:dd:f4:
                    00:2e:18:68:ce:6d:9a:16:88:75:c3:7d:be:f0:78:
                    07:9c:58:33:e7:39:5d:cd:c1:81:c7:c8:ef:4a:c0:
                    dc:cc:43:45:a9:e1:07:f0:46:82:97:b5:8f:17:58:
                    54:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:47:0C:3A:1A:6F:41:BC:32:2E:29:3A:2B:68:DF:D5:4F:DB:A2:8C
            X509v3 Authority Key Identifier:
                keyid:BE:F4:90:EE:CD:B1:D2:A3:F8:49:9B:87:82:FF:BF:15:EE:18:15:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9AYHVd7oce2p1jbon5zij6QU8TKS9zR8GDbwXHhzK5va/0/BEF490EECDB1D2A3F8499B8782FFBF15EE18159B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF490EECDB1D2A3F8499B8782FFBF15EE18159B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9AYHVd7oce2p1jbon5zij6QU8TKS9zR8GDbwXHhzK5va/0/323830343a346330343a3a2f33322d313238203d3e20323637333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c04::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:94:79:39:02:30:11:fc:1e:f2:6d:f4:2d:a3:af:ec:73:a0:
         0b:60:e5:c7:88:8c:d2:fd:fb:af:cc:d6:0a:56:d3:22:a2:cd:
         ac:cd:bd:6e:76:8d:10:85:56:d7:4f:4a:04:44:21:0c:3e:1b:
         a6:f2:fb:c4:7d:a4:da:df:9f:73:d4:92:53:19:bc:8f:65:49:
         92:66:d9:e2:69:7e:92:c6:28:c1:90:0c:8d:20:9e:cf:61:49:
         3c:5d:f6:1f:9f:60:e2:c0:29:be:8f:24:f7:b4:ca:4a:92:ff:
         17:7f:22:1a:92:f0:ce:2b:31:e7:bb:4a:9c:6a:75:e1:71:90:
         97:c3:35:a4:73:d2:9c:96:8e:88:13:b8:06:9d:8f:ce:5e:2e:
         9b:d2:1b:2d:22:0d:77:1f:a6:bf:b4:56:40:8a:21:86:a7:e1:
         4e:7c:7d:35:5e:51:de:16:a7:54:56:f9:18:35:6b:7b:4d:9a:
         dc:4a:11:ab:82:55:5a:76:99:ee:a9:4c:07:67:94:ca:8b:5a:
         88:03:c5:8a:bc:dc:e4:ec:18:9e:20:34:df:f9:9c:d3:4a:f1:
         4c:fe:74:72:15:6d:b8:f1:f3:37:fe:85:53:f6:1e:25:08:bf:
         25:2b:ba:69:e6:c3:52:5e:f7:b6:57:96:46:e3:ae:2d:b3:a5:
         b9:ec:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----