Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e20323733343038.roa
File:                     323830343a386532633a3a2f33322d3332203d3e20323733343038.roa (raw, json)
Hash identifier:          6q6zJ4tJPRgv6cvIMdhqKzUsWXwugW+xqTVWx4S1+Qc=
Subject key identifier:   5F:CE:08:C2:39:4E:51:66:0E:E8:44:07:59:92:FB:94:16:A0:46:BE
Certificate issuer:       /CN=9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494
Certificate serial:       704998973802FC7677026080ABBEE0A45E95B61F
Authority key identifier: 9E:8F:BC:EF:C8:D1:CE:0E:FF:BD:BA:FC:7D:C4:59:2C:14:C6:D4:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e20323733343038.roa
Signing time:             Mon 14 Oct 2024 17:28:56 +0000
ROA not before:           Mon 14 Oct 2024 17:23:56 +0000
ROA not after:            Mon 13 Oct 2025 17:28:56 +0000
asID:                     273408
IP address blocks:        2804:8e2c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:49:98:97:38:02:fc:76:77:02:60:80:ab:be:e0:a4:5e:95:b6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494
        Validity
            Not Before: Oct 14 17:23:56 2024 GMT
            Not After : Oct 13 17:28:56 2025 GMT
        Subject: CN=5FCE08C2394E51660EE844075992FB9416A046BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:f3:d0:14:20:3f:1e:4d:2e:fd:9b:0d:42:
                    84:ed:80:b4:0f:42:3c:85:e2:c3:74:b5:79:8b:35:
                    57:c1:6d:f5:fb:c7:a8:48:6c:fa:3e:b2:69:71:fd:
                    b5:f7:b5:71:22:5f:f1:e6:38:ce:d7:c1:07:b9:27:
                    a4:03:2f:55:ff:a6:65:8f:63:4d:63:d1:c8:d3:68:
                    26:a0:54:58:bc:0c:55:fa:e8:b7:41:0e:1f:ef:db:
                    98:bd:47:a3:93:39:37:70:c0:3b:31:cc:c8:58:b3:
                    7d:c5:bf:ea:d8:a7:51:4d:33:e8:d8:08:54:8a:b8:
                    64:3b:a6:0d:77:ec:31:4f:bb:99:fd:33:fd:a9:2f:
                    17:39:21:43:23:70:a3:e0:c3:0c:b7:8b:f1:c5:77:
                    e2:a2:05:cb:af:0d:92:6c:7c:ca:2a:92:d2:b5:29:
                    78:c3:1d:35:0d:b0:66:31:bb:29:d6:d0:ff:85:3a:
                    d5:df:54:9e:ba:38:41:0a:8c:61:48:04:ba:a1:b8:
                    e9:02:d2:63:a7:17:d0:f0:f5:3c:b6:82:99:c2:16:
                    ba:cd:3b:b8:29:c8:2b:80:8b:2d:5f:c8:07:de:8d:
                    42:99:cd:eb:4f:dd:56:20:c2:31:18:c9:db:5e:86:
                    e7:b2:9a:27:67:4a:d5:93:b6:9e:37:c6:0d:40:e7:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CE:08:C2:39:4E:51:66:0E:E8:44:07:59:92:FB:94:16:A0:46:BE
            X509v3 Authority Key Identifier:
                keyid:9E:8F:BC:EF:C8:D1:CE:0E:FF:BD:BA:FC:7D:C4:59:2C:14:C6:D4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e20323733343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:bf:ec:f9:0f:b7:a8:dd:b5:34:2c:4b:61:52:9a:bc:a8:7f:
         63:1d:52:5e:dc:76:2b:c9:7d:fe:6b:2e:64:90:b9:e0:de:a0:
         58:4f:f9:d4:34:f4:2b:00:1e:4f:a6:fe:96:4e:83:5b:da:04:
         fd:c1:84:fa:61:ff:3f:6d:9a:35:eb:14:f6:80:49:c8:f8:b7:
         d3:81:96:1a:5f:40:8d:f4:30:85:76:e1:d2:d9:a7:2f:d7:a3:
         44:0b:8c:12:3b:62:ee:83:b0:30:fe:fd:7e:70:f5:f4:01:a3:
         69:b3:54:b2:bb:22:e5:33:22:cf:a8:d1:dc:ce:ed:e6:f2:b8:
         dc:9f:ca:ef:63:47:2c:76:ff:d6:1c:4b:d5:84:f8:87:83:71:
         cc:b3:12:50:6f:51:ea:bf:03:0f:4e:fb:42:5f:b2:40:bb:08:
         89:0a:f6:5a:fc:23:8a:a6:98:ca:b1:a5:f3:5c:90:cc:dd:04:
         ea:8a:a2:9e:0f:e8:eb:f1:4d:e7:56:a0:6f:74:cd:e4:6c:7f:
         96:b6:34:5f:81:03:23:f4:4d:36:30:2f:77:1d:bc:06:09:ef:
         6d:81:84:56:67:20:ce:58:d8:6c:ca:28:3e:d9:0d:8d:e2:01:
         33:01:4d:ad:00:02:25:c4:d3:23:c6:bf:f8:98:f7:81:c0:5a:
         f9:f7:5e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----