Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/323830343a353634383a3a2f33322d3333203d3e20323637393838.roa
File:                     323830343a353634383a3a2f33322d3333203d3e20323637393838.roa (raw, json)
Hash identifier:          4RhkBYwo8660LSVlpf8t8WuWcSA1SpldIKCbA1jPVJA=
Subject key identifier:   DD:89:5C:91:51:02:E1:0F:D1:E9:4F:0D:30:1B:A2:6E:F1:1D:34:EC
Certificate issuer:       /CN=4F65CBA63267128AD0A276268D43673E12C2C422
Certificate serial:       3DF7CAF109AD03D6AA66BD8EAFC884F21AFCC19A
Authority key identifier: 4F:65:CB:A6:32:67:12:8A:D0:A2:76:26:8D:43:67:3E:12:C2:C4:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F65CBA63267128AD0A276268D43673E12C2C422.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/323830343a353634383a3a2f33322d3333203d3e20323637393838.roa
Signing time:             Fri 07 Jun 2024 14:19:36 +0000
ROA not before:           Fri 07 Jun 2024 14:14:36 +0000
ROA not after:            Fri 06 Jun 2025 14:19:36 +0000
asID:                     267988
IP address blocks:        2804:5648::/32 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f7:ca:f1:09:ad:03:d6:aa:66:bd:8e:af:c8:84:f2:1a:fc:c1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F65CBA63267128AD0A276268D43673E12C2C422
        Validity
            Not Before: Jun  7 14:14:36 2024 GMT
            Not After : Jun  6 14:19:36 2025 GMT
        Subject: CN=DD895C915102E10FD1E94F0D301BA26EF11D34EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:06:51:e1:6b:bb:c9:07:a0:44:21:b0:b1:
                    e4:72:e8:ae:fc:17:ce:61:9f:75:a4:19:ad:91:ad:
                    54:8c:03:35:61:1a:6a:5e:0b:94:13:05:fd:25:46:
                    63:98:7f:8d:0a:a1:e9:e7:f8:d4:62:e7:c4:70:8c:
                    ed:4c:70:20:07:ce:50:53:5b:fd:c7:cc:02:1d:d9:
                    be:04:dc:6d:7c:ba:1b:f2:1b:af:ee:dd:d0:2f:8a:
                    2c:2a:82:a4:c8:0d:af:a8:7d:7f:ad:e3:be:97:8d:
                    17:2c:ef:29:0d:ae:5e:22:c1:19:b4:75:89:74:89:
                    fa:03:32:fb:20:ab:14:c0:89:72:a8:8c:de:24:d0:
                    be:dc:20:44:85:72:21:62:6f:88:68:1b:a0:5e:d5:
                    06:72:86:be:6e:ad:14:8e:6f:54:f2:ed:e4:e0:91:
                    fe:3a:26:8d:ff:c2:01:25:82:c0:41:76:2f:89:75:
                    72:da:1f:b9:f8:b6:e3:7a:b4:10:33:d8:e5:e7:f6:
                    69:2d:1e:7b:c5:33:4a:6a:03:49:8f:d7:f0:ff:a2:
                    44:d0:77:dc:cf:76:de:dc:4e:21:53:bf:6b:86:c8:
                    7e:f4:74:41:05:eb:6d:52:19:cd:68:f3:90:e1:7a:
                    cd:1d:6a:68:c5:91:12:c7:79:24:1c:6e:51:ab:b3:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:89:5C:91:51:02:E1:0F:D1:E9:4F:0D:30:1B:A2:6E:F1:1D:34:EC
            X509v3 Authority Key Identifier:
                keyid:4F:65:CB:A6:32:67:12:8A:D0:A2:76:26:8D:43:67:3E:12:C2:C4:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/4F65CBA63267128AD0A276268D43673E12C2C422.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F65CBA63267128AD0A276268D43673E12C2C422.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/323830343a353634383a3a2f33322d3333203d3e20323637393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5648::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:a3:a4:38:00:10:3d:4c:a3:33:12:ce:2c:ea:24:11:23:73:
         75:40:1a:e9:59:13:b4:38:19:7a:f8:6b:43:17:3d:b8:61:99:
         a0:62:38:9d:01:79:0d:82:88:a5:e8:db:05:5d:9d:ae:b1:f1:
         8e:13:c9:77:5b:df:07:60:d0:eb:e0:78:1c:22:8b:96:76:57:
         f6:0f:35:41:2b:19:f4:9e:20:b7:4c:8c:8b:de:52:a7:e5:97:
         cc:d7:d7:3c:3d:f4:58:a3:71:81:98:9b:bf:97:76:1e:73:21:
         07:27:15:77:79:6d:2a:9b:77:e5:0f:c8:cb:50:77:24:86:ab:
         b3:e3:6d:15:89:a6:39:e8:1d:b3:9b:e7:c8:f1:d3:22:c4:fb:
         0b:45:b8:04:15:46:55:d0:58:fa:e1:e2:8a:fb:c7:98:d9:3f:
         4a:2f:25:27:5d:99:36:fe:28:3e:fa:e2:a8:5a:8a:96:44:c8:
         32:ec:a3:46:84:8f:82:02:37:43:29:fe:89:01:b7:69:84:f9:
         e8:9a:ed:6a:21:ce:ff:ae:16:e5:54:02:b4:f6:31:ef:11:bc:
         8e:72:53:68:4d:26:a5:24:2b:15:15:78:7a:34:88:4b:ac:13:
         17:b0:94:7c:35:8f:f1:a4:bb:20:c3:e1:e2:98:48:31:1c:73:
         28:da:88:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----