Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/323830343a376635343a3a2f33322d3332203d3e20323731363831.roa
File:                     323830343a376635343a3a2f33322d3332203d3e20323731363831.roa (raw, json)
Hash identifier:          uIuBMHmaNxZ5wZNnd0/ytcYFvIzitF59xceIccoI3VE=
Subject key identifier:   3E:5E:AC:5F:A8:10:CE:6F:35:C7:B8:62:40:C9:21:EF:6E:B0:62:D0
Certificate issuer:       /CN=4D6F8BE81F22628A4BE2D63E200EB3FD3A60F3E8
Certificate serial:       4EB8DA9A7720E2305CAD68E85C25A62B3B810465
Authority key identifier: 4D:6F:8B:E8:1F:22:62:8A:4B:E2:D6:3E:20:0E:B3:FD:3A:60:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6F8BE81F22628A4BE2D63E200EB3FD3A60F3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/323830343a376635343a3a2f33322d3332203d3e20323731363831.roa
Signing time:             Tue 27 Aug 2024 16:37:37 +0000
ROA not before:           Tue 27 Aug 2024 16:32:37 +0000
ROA not after:            Tue 26 Aug 2025 16:37:37 +0000
asID:                     271681
IP address blocks:        2804:7f54::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b8:da:9a:77:20:e2:30:5c:ad:68:e8:5c:25:a6:2b:3b:81:04:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6F8BE81F22628A4BE2D63E200EB3FD3A60F3E8
        Validity
            Not Before: Aug 27 16:32:37 2024 GMT
            Not After : Aug 26 16:37:37 2025 GMT
        Subject: CN=3E5EAC5FA810CE6F35C7B86240C921EF6EB062D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:60:c6:39:d6:8c:47:1b:a1:c5:e1:54:90:da:
                    9f:f9:ae:19:4d:85:93:42:9f:b7:2f:6c:c0:da:1a:
                    b2:41:c5:e1:b5:9c:45:b2:3c:4c:5b:48:a3:be:b9:
                    3e:f0:9c:0c:26:b1:04:85:a3:c9:bc:07:dd:0b:91:
                    97:1f:69:bc:46:dc:a2:d5:e3:07:34:e7:2d:68:41:
                    79:12:6e:e4:02:0b:c1:86:10:10:9e:1c:05:9b:91:
                    a6:96:67:7a:d8:18:68:e9:0e:bd:0e:2b:8f:28:f2:
                    0d:c6:22:c8:3e:7e:90:c0:3f:8a:19:5c:94:8a:47:
                    03:1a:ee:1e:2a:ae:e7:12:e8:a2:35:f2:89:bc:be:
                    82:af:fc:13:f2:15:0f:bd:d2:ca:f3:0e:e2:77:ae:
                    ac:20:1c:a9:58:f1:05:87:c0:ab:f7:cc:21:c0:90:
                    90:df:87:1f:c7:5e:7a:83:95:ab:c8:a3:5c:fb:19:
                    88:8b:0b:1a:d7:c1:30:45:4d:53:85:f0:bc:bd:14:
                    07:6b:f2:ea:da:a9:cc:e3:67:51:35:96:ae:c0:93:
                    7f:69:56:84:9e:a8:1c:9d:07:02:a0:d8:2b:41:16:
                    9e:34:5d:b2:02:6f:3e:55:b6:e6:5c:59:da:9b:de:
                    2e:2e:9f:09:db:bc:8a:5a:02:33:f3:7b:ab:6b:69:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5E:AC:5F:A8:10:CE:6F:35:C7:B8:62:40:C9:21:EF:6E:B0:62:D0
            X509v3 Authority Key Identifier:
                keyid:4D:6F:8B:E8:1F:22:62:8A:4B:E2:D6:3E:20:0E:B3:FD:3A:60:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/4D6F8BE81F22628A4BE2D63E200EB3FD3A60F3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6F8BE81F22628A4BE2D63E200EB3FD3A60F3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/323830343a376635343a3a2f33322d3332203d3e20323731363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:48:07:6b:77:06:a9:ce:d5:34:73:91:08:aa:36:35:85:d5:
         f3:7a:dd:19:14:25:32:aa:c3:e6:46:d3:fa:f4:04:45:3e:f0:
         c5:83:4a:ac:8e:ae:45:df:dd:c3:03:6e:fb:6a:a9:f6:49:dc:
         d5:96:fb:c8:b1:a6:22:db:ac:04:3a:ca:20:0e:ca:29:2a:b1:
         48:76:c1:39:c1:68:d1:35:4c:b1:9d:f3:1b:74:c0:51:9a:79:
         26:a3:dd:21:4d:2e:f1:45:b3:90:e9:98:e2:fc:e7:fd:e2:4d:
         0b:c0:32:e5:e8:3d:61:a5:08:af:99:56:04:f2:fd:cf:8f:e1:
         b5:df:6f:ce:70:36:9d:6a:5f:43:2a:f6:4f:27:01:6d:f0:2e:
         32:95:d4:ca:5d:fc:7a:a3:87:58:a5:b3:40:8d:a0:b5:6f:a0:
         e9:e2:a3:e4:c5:55:88:31:1a:d2:0a:b4:40:d7:a6:3d:96:5f:
         6a:4d:ee:1d:18:35:5b:6c:ca:e8:03:c4:f1:34:40:0d:f7:fe:
         5e:f0:98:b2:29:06:b6:37:24:8d:1b:19:96:3f:27:0c:83:09:
         55:a4:63:4f:00:b2:d6:0d:38:c6:96:f8:13:f6:87:4a:23:fd:
         34:93:1b:4e:7a:46:1b:55:a5:23:c5:27:5b:cb:f6:26:e7:91:
         43:91:e1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----