Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/323830343a323761633a3a2f33322d313238203d3e203532383333.roa
File:                     323830343a323761633a3a2f33322d313238203d3e203532383333.roa (raw, json)
Hash identifier:          ngiZhL+QJOx4rGOfCaUTOLdmMzlWb80Rr7srqW0Sm5U=
Subject key identifier:   C9:59:0F:1D:C4:0A:BB:E7:50:8B:3F:70:95:FB:02:5D:5B:31:86:C9
Certificate issuer:       /CN=D2316250FCE6226188A17FFE2BFE6230E715A267
Certificate serial:       57D9BFBEA89A594AD874D7D650EEAFD56554BF81
Authority key identifier: D2:31:62:50:FC:E6:22:61:88:A1:7F:FE:2B:FE:62:30:E7:15:A2:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2316250FCE6226188A17FFE2BFE6230E715A267.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/323830343a323761633a3a2f33322d313238203d3e203532383333.roa
Signing time:             Fri 13 Sep 2024 13:42:35 +0000
ROA not before:           Fri 13 Sep 2024 13:37:35 +0000
ROA not after:            Fri 12 Sep 2025 13:42:35 +0000
asID:                     52833
IP address blocks:        2804:27ac::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d9:bf:be:a8:9a:59:4a:d8:74:d7:d6:50:ee:af:d5:65:54:bf:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2316250FCE6226188A17FFE2BFE6230E715A267
        Validity
            Not Before: Sep 13 13:37:35 2024 GMT
            Not After : Sep 12 13:42:35 2025 GMT
        Subject: CN=C9590F1DC40ABBE7508B3F7095FB025D5B3186C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:e4:ed:26:c4:e8:e7:18:a3:d4:89:c0:d1:
                    03:ac:8a:2f:fa:27:9b:7f:93:8c:86:ab:0c:56:da:
                    6e:1b:62:a9:94:0b:77:37:77:a4:1a:fb:ab:34:90:
                    9b:2e:3d:5f:14:48:c7:d8:6c:7a:99:90:a4:a1:9d:
                    22:af:3b:6d:67:41:29:f2:3e:46:8e:82:b0:e2:31:
                    28:27:83:b3:48:63:8c:18:e1:20:92:71:78:8a:29:
                    95:5e:4e:c8:ee:b2:98:1a:d4:b8:93:01:0c:d5:bf:
                    b0:58:8b:35:b8:61:83:00:67:fc:7e:dd:c4:25:f2:
                    90:44:a8:7b:a3:ab:b1:62:3f:97:e2:d1:37:64:96:
                    ec:a9:ef:6e:16:f4:22:30:1a:7a:a6:0c:0d:bd:be:
                    19:17:ae:37:56:ab:ad:2c:56:6c:08:3a:d6:fb:24:
                    d3:93:a0:6c:c5:4d:5e:14:cd:c1:a9:99:8e:36:f4:
                    d3:e6:4d:70:86:53:4b:2f:d5:af:b0:94:03:e9:d4:
                    7c:d1:cd:5d:c2:f0:da:d9:3f:04:f6:2d:69:39:58:
                    00:8d:ac:01:f8:75:1f:dc:11:36:60:65:d6:ef:29:
                    32:c9:2f:50:78:a2:83:d4:09:7c:67:fe:4f:c3:cc:
                    12:b1:32:84:67:75:e4:df:ba:b7:15:96:b2:1c:0b:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:59:0F:1D:C4:0A:BB:E7:50:8B:3F:70:95:FB:02:5D:5B:31:86:C9
            X509v3 Authority Key Identifier:
                keyid:D2:31:62:50:FC:E6:22:61:88:A1:7F:FE:2B:FE:62:30:E7:15:A2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/D2316250FCE6226188A17FFE2BFE6230E715A267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2316250FCE6226188A17FFE2BFE6230E715A267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/323830343a323761633a3a2f33322d313238203d3e203532383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:a1:24:e2:86:0b:c2:af:68:1a:ef:25:14:88:10:05:04:8b:
         22:ba:27:9c:fe:a0:62:e6:03:b9:37:b8:b2:90:05:45:20:42:
         9d:46:3a:c9:d5:c9:48:73:45:a8:fc:a2:a1:56:40:1b:23:fe:
         24:3d:be:03:4e:1e:8e:f6:68:79:f6:d2:11:2a:9d:f1:f9:9e:
         a4:fc:bf:4b:51:32:5e:5d:29:d2:3e:2b:41:0e:21:1c:53:be:
         dc:39:e4:9c:21:ff:d0:6a:3b:86:6c:da:a8:a4:ab:59:8c:46:
         b2:a2:31:b7:8b:15:2d:95:3b:2e:dd:14:2d:86:37:cf:d4:87:
         ba:51:56:38:ca:56:c9:97:fc:47:3e:01:db:09:47:15:1a:38:
         66:46:c7:b1:0b:a0:09:99:b4:41:97:93:9b:a0:89:24:19:d6:
         cc:90:49:bd:49:f5:9c:ef:c4:4a:94:14:41:cc:3a:c3:1e:1a:
         d3:e8:03:01:67:88:28:e2:b2:b0:fe:ef:da:e7:c1:61:09:58:
         3f:24:09:6a:c2:52:02:17:67:f4:be:01:85:e2:00:a8:26:4a:
         70:55:6b:d2:93:ae:8d:50:49:5a:9f:02:60:de:7c:82:89:1a:
         fc:7c:2e:78:51:1e:66:69:45:0e:25:89:9a:f5:9e:18:d7:e1:
         e5:03:8f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----