Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/323830343a343434343a3a2f33322d313238203d3e20323637363231.roa
File:                     323830343a343434343a3a2f33322d313238203d3e20323637363231.roa (raw, json)
Hash identifier:          s2jCuHJ5FwNW13j3q6DQjIWAU2zoUf44le1k/cvNQC4=
Subject key identifier:   33:39:78:16:D8:B4:86:98:17:47:E7:47:93:02:DC:5E:1A:E5:49:B2
Certificate issuer:       /CN=DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793
Certificate serial:       111538FB10D9BBA3D58658E321FC386FEFE7DB29
Authority key identifier: DA:9D:BF:93:FD:F0:DA:5C:99:32:6B:EA:5D:06:A5:26:EB:9E:27:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/323830343a343434343a3a2f33322d313238203d3e20323637363231.roa
Signing time:             Wed 09 Oct 2024 01:17:52 +0000
ROA not before:           Wed 09 Oct 2024 01:12:52 +0000
ROA not after:            Wed 08 Oct 2025 01:17:52 +0000
asID:                     267621
IP address blocks:        2804:4444::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:15:38:fb:10:d9:bb:a3:d5:86:58:e3:21:fc:38:6f:ef:e7:db:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793
        Validity
            Not Before: Oct  9 01:12:52 2024 GMT
            Not After : Oct  8 01:17:52 2025 GMT
        Subject: CN=33397816D8B486981747E7479302DC5E1AE549B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:e1:8a:be:e1:1f:dc:86:96:3c:69:fd:d2:
                    9d:83:73:db:da:9c:66:67:4e:6d:d5:17:43:60:00:
                    ba:5c:e7:d2:07:80:ed:03:9e:e1:6f:b4:10:63:91:
                    8f:c5:c7:04:02:2d:8d:fe:c4:dc:ae:67:90:b1:90:
                    42:af:79:f2:bb:af:1b:93:99:d9:a0:73:66:d0:3e:
                    d6:48:e5:7f:61:93:f6:9d:30:89:d6:92:8a:a7:ae:
                    bc:10:bd:a3:cd:97:d4:f2:8f:cd:aa:05:4b:14:be:
                    4f:f2:24:07:c8:17:c3:2f:a8:f2:ca:9b:17:b2:51:
                    30:7c:6b:35:ee:8d:7a:d4:df:39:6d:dd:6f:27:3f:
                    47:f6:b4:f3:a9:da:3b:ac:8c:3c:54:3e:71:16:8f:
                    cd:33:e0:a3:a6:9e:1f:08:a9:cb:32:cf:55:f8:c9:
                    f2:59:84:62:1f:4c:3c:d6:c7:b8:7f:57:63:98:09:
                    b8:ee:ce:03:29:a2:90:c4:ce:14:ef:13:f6:17:af:
                    ca:b7:04:0a:b6:ed:1f:8a:0a:00:4b:7d:b2:40:2d:
                    4b:bf:8e:08:d8:5d:62:f5:48:5c:79:ad:40:ea:0f:
                    8a:98:e6:a3:7e:a9:48:a1:c0:bc:c9:27:78:c1:94:
                    c0:7a:27:97:ef:2a:6f:3d:e5:41:66:9c:51:03:4e:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:39:78:16:D8:B4:86:98:17:47:E7:47:93:02:DC:5E:1A:E5:49:B2
            X509v3 Authority Key Identifier:
                keyid:DA:9D:BF:93:FD:F0:DA:5C:99:32:6B:EA:5D:06:A5:26:EB:9E:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/323830343a343434343a3a2f33322d313238203d3e20323637363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4444::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:97:78:a8:99:fb:a9:fe:7e:89:62:5d:bd:65:a3:20:af:7c:
         b3:76:6c:cd:38:9d:5c:94:11:9b:e8:4b:13:49:32:72:66:ca:
         ec:99:c2:d0:f7:e1:94:68:87:77:4e:13:b3:2e:e5:1e:7f:8c:
         20:bf:db:44:fa:7e:b8:49:69:f2:6b:14:29:56:23:e9:83:d5:
         b4:cb:ee:2f:77:fe:b9:ad:ef:f2:7e:5e:f3:bb:4d:c9:17:9e:
         28:db:d3:e3:54:74:40:a3:22:55:45:0d:1e:3e:6d:42:c5:5f:
         23:c8:f5:79:85:43:e1:6f:cb:6e:eb:da:4b:c2:bb:ff:bb:23:
         62:47:6c:60:8f:55:f0:12:1d:ac:a6:2e:0d:07:7f:b2:1b:71:
         58:58:52:15:47:27:10:60:d4:39:6f:b4:2b:04:e0:19:ea:85:
         13:67:c0:d1:93:79:9c:79:bb:aa:53:1c:ed:39:93:f7:b0:4c:
         e8:42:b0:ba:73:4b:87:57:ce:97:7f:db:f8:70:91:ea:d0:2a:
         49:b9:b5:d7:82:da:4f:a0:c8:da:4f:fd:e2:53:78:46:fd:d9:
         a2:ea:ab:10:64:a6:48:ca:4f:be:0f:49:42:c2:bc:53:d6:2e:
         e9:67:d1:53:8d:71:d6:05:38:ce:83:2e:34:50:47:a1:f1:dc:
         60:80:f7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----