Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a383030303a3a2f33342d3334203d3e203631363035.roa
File:                     323830343a376461343a383030303a3a2f33342d3334203d3e203631363035.roa (raw, json)
Hash identifier:          AOT48rMbUGPSg6ad593l9b1rr6uZqr3CKNmYWgBDNz8=
Subject key identifier:   4B:08:0E:79:12:32:85:AD:43:52:79:58:CA:AF:5A:EF:52:6D:27:14
Certificate issuer:       /CN=95A9B935AF7391D649D034160A7150D2138ECFBC
Certificate serial:       6B08F224B4F5E58C8316514B3188C07771FBCB59
Authority key identifier: 95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a383030303a3a2f33342d3334203d3e203631363035.roa
Signing time:             Wed 23 Oct 2024 18:55:36 +0000
ROA not before:           Wed 23 Oct 2024 18:50:36 +0000
ROA not after:            Wed 22 Oct 2025 18:55:36 +0000
asID:                     61605
IP address blocks:        2804:7da4:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:08:f2:24:b4:f5:e5:8c:83:16:51:4b:31:88:c0:77:71:fb:cb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A9B935AF7391D649D034160A7150D2138ECFBC
        Validity
            Not Before: Oct 23 18:50:36 2024 GMT
            Not After : Oct 22 18:55:36 2025 GMT
        Subject: CN=4B080E79123285AD43527958CAAF5AEF526D2714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:bd:e4:46:d8:a7:f3:9d:c4:e8:84:25:eb:
                    c8:9a:1e:0c:8f:66:4f:85:f5:ad:5e:94:37:58:5d:
                    6e:5a:ff:0e:82:6c:de:79:bf:07:40:29:29:26:45:
                    69:0b:6e:bd:63:bd:1d:20:71:39:35:23:d7:d7:66:
                    d6:8e:c3:4d:e1:38:41:9b:1f:77:00:47:38:6c:05:
                    e2:42:87:bf:85:3c:60:3d:f9:0a:76:60:47:8e:e7:
                    aa:de:44:9c:d7:1c:46:8c:53:5d:12:07:ff:26:07:
                    12:7a:40:1e:64:21:2a:ca:e6:9d:f0:61:17:4f:f7:
                    a4:22:69:57:ee:dc:b2:41:dd:a2:a3:73:8b:99:04:
                    94:05:c7:72:5a:5d:d4:69:2f:b6:b2:93:a2:6b:eb:
                    1a:86:4e:e1:cf:a3:e6:ce:2a:a3:0d:27:f7:e8:6e:
                    5d:2f:db:41:98:2a:ed:c6:49:7d:d3:4b:9a:4b:5c:
                    50:65:20:fe:ac:f0:3f:22:03:6e:17:d4:0f:4a:fb:
                    bb:8c:22:1e:2e:ac:9d:f2:fe:88:d3:51:13:a6:cb:
                    6c:c6:cf:b1:61:c6:44:aa:06:4b:bb:05:13:33:bc:
                    3c:90:09:53:87:90:92:5f:1d:d2:34:73:eb:8d:eb:
                    3b:12:d9:58:a6:6e:f9:77:68:1f:c9:7b:d5:c1:a8:
                    13:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:08:0E:79:12:32:85:AD:43:52:79:58:CA:AF:5A:EF:52:6D:27:14
            X509v3 Authority Key Identifier:
                keyid:95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/95A9B935AF7391D649D034160A7150D2138ECFBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a383030303a3a2f33342d3334203d3e203631363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7da4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b6:28:72:48:cf:c0:52:a6:6a:41:74:74:6d:c8:73:7c:3e:15:
         80:0c:57:fa:1c:a3:39:ab:4f:d4:46:4a:01:b7:35:e8:5f:a7:
         b3:81:4c:9b:40:8e:91:2d:60:a4:5d:8a:be:17:b9:13:9a:df:
         6e:4b:7d:9b:89:6d:34:23:1a:77:55:29:52:ff:f4:24:d7:a9:
         e8:e9:e2:e4:09:86:02:ae:75:e9:0f:72:e5:50:2c:75:b3:b2:
         59:8a:43:60:79:9f:56:fe:d0:0e:2c:a7:23:2c:04:5c:f5:75:
         58:f0:8c:f6:6c:4b:9c:47:0c:16:c8:87:ae:98:b3:5d:ff:eb:
         f1:e7:24:ec:90:e6:0c:02:a4:5a:09:cb:41:c1:15:74:02:98:
         55:79:f2:66:ac:06:e6:a0:64:98:a4:11:77:e8:75:13:9b:5d:
         34:6c:13:83:45:dc:c9:4d:dd:87:5b:a0:d0:dc:7b:7e:09:0d:
         ac:73:71:a0:12:42:55:8d:58:77:68:81:83:b4:24:53:41:84:
         84:3d:4b:55:5a:7b:45:cd:d0:6c:4a:7f:d9:a6:b9:e5:53:9c:
         02:e3:57:df:98:54:7d:47:ac:16:0b:08:3b:b7:8d:2b:6e:f0:
         14:6f:54:05:ea:82:66:df:22:6b:c3:f3:8f:a8:b4:63:30:1b:
         7b:47:14:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----