Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a3a2f33322d3332203d3e20323635333030.roa
File:                     323830343a326462633a3a2f33322d3332203d3e20323635333030.roa (raw, json)
Hash identifier:          BKISosAhV83C4LNb28FCs1LR4gVPNLlm/F1IkWj83o8=
Subject key identifier:   2A:39:D0:73:23:79:F0:0A:56:42:66:E3:07:BC:8E:3A:34:17:5E:DF
Certificate issuer:       /CN=F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2
Certificate serial:       74FBE548FA2ABBBB3AB0663395E4A7844C80CF63
Authority key identifier: F0:B9:44:31:6C:D1:E1:E6:EB:4D:12:8F:A5:E4:1C:A2:9C:A9:4C:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a3a2f33322d3332203d3e20323635333030.roa
Signing time:             Fri 04 Oct 2024 20:42:05 +0000
ROA not before:           Fri 04 Oct 2024 20:37:05 +0000
ROA not after:            Fri 03 Oct 2025 20:42:05 +0000
asID:                     265300
IP address blocks:        2804:2dbc::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fb:e5:48:fa:2a:bb:bb:3a:b0:66:33:95:e4:a7:84:4c:80:cf:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2
        Validity
            Not Before: Oct  4 20:37:05 2024 GMT
            Not After : Oct  3 20:42:05 2025 GMT
        Subject: CN=2A39D0732379F00A564266E307BC8E3A34175EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:71:87:93:6e:fe:74:38:55:b7:a8:55:1c:
                    24:69:a8:68:23:eb:b8:74:30:d4:2d:c9:6f:51:6d:
                    3a:f9:9c:54:cb:f0:9e:82:f1:9f:4d:75:df:82:97:
                    d5:a1:55:6b:5d:22:0e:36:39:cd:6a:09:9f:69:0a:
                    34:85:03:6c:e3:6a:a6:ff:ba:3a:89:2c:3c:7b:76:
                    15:4d:53:2c:c3:96:d7:3b:41:4c:2b:5e:e2:2a:3a:
                    19:53:54:9d:9f:87:f7:df:ca:55:18:b4:28:d9:70:
                    49:94:8d:d9:1e:ee:cf:c6:44:f1:ba:fa:25:2e:29:
                    be:7b:01:56:0c:3d:93:71:be:8a:4e:32:f3:a2:6d:
                    1f:9a:4b:f9:73:e7:e7:eb:9e:bc:e5:bc:fe:14:ed:
                    3e:c8:48:9d:d6:91:21:60:cd:7b:35:75:ec:18:a6:
                    9b:a9:b9:10:2e:ee:52:79:f9:84:8d:49:70:c4:98:
                    a1:f9:cf:96:c4:d9:ae:31:8f:01:f6:e3:c6:c4:56:
                    e5:0d:62:54:ae:c0:b2:75:fb:cb:0f:76:76:e1:f2:
                    7c:fd:f2:9d:04:87:fa:36:ff:78:bd:b7:55:ae:91:
                    7a:1d:a7:78:50:9b:58:74:3b:84:ef:fd:d6:22:7e:
                    74:30:41:b3:2b:e0:5c:b2:11:8d:83:35:4a:de:c9:
                    72:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:39:D0:73:23:79:F0:0A:56:42:66:E3:07:BC:8E:3A:34:17:5E:DF
            X509v3 Authority Key Identifier:
                keyid:F0:B9:44:31:6C:D1:E1:E6:EB:4D:12:8F:A5:E4:1C:A2:9C:A9:4C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a3a2f33322d3332203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:6b:14:26:bf:10:f2:56:09:44:a3:14:6e:30:cb:85:27:63:
         11:e4:84:66:70:ff:c2:40:e3:a4:f1:5b:eb:c3:c1:e7:0d:10:
         4d:95:0b:b0:cc:ef:f6:73:3e:d0:43:6c:b9:05:0e:2e:ff:cf:
         cd:d7:d4:ff:41:fb:d0:0c:69:28:0f:e6:1a:f7:c6:7c:56:66:
         a0:ce:f7:75:cf:97:26:4f:26:27:88:19:7d:e6:a6:7f:4f:87:
         d0:0f:79:9e:f3:ba:e8:93:5a:46:f3:44:61:fb:9c:3d:f5:08:
         19:db:37:72:12:27:60:64:90:2f:32:a7:85:6f:ca:6c:2e:c7:
         33:ad:9f:36:2b:e4:28:9e:b2:76:29:fc:57:d5:6c:af:16:bf:
         ff:e1:0e:51:5e:a4:ee:e7:57:8b:cf:0c:53:66:1f:e6:48:92:
         97:ed:18:59:18:bb:dc:bc:da:ec:d9:0c:d6:43:eb:71:6d:b6:
         86:54:12:db:b9:76:80:09:09:1d:45:89:3f:14:d9:bb:c2:a8:
         bd:ef:2c:56:9e:83:58:48:e6:8e:8b:e5:64:97:04:fc:c7:11:
         9b:68:a6:f8:c4:27:39:44:bf:55:70:a8:76:e5:59:38:66:54:
         16:6e:79:b8:a0:a4:d6:d2:e8:e6:0b:ea:8f:65:0a:e0:7d:a2:
         77:e4:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----