Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/323830343a383261303a3a2f33322d3430203d3e20323732353330.roa
File:                     323830343a383261303a3a2f33322d3430203d3e20323732353330.roa (raw, json)
Hash identifier:          c5qUr1GxwA0xCymK+KxRQGrMCv+8MJPxQE/GTuprprY=
Subject key identifier:   A5:98:4E:2F:A7:A9:00:3A:7B:28:9B:0E:13:9C:AF:D5:23:C9:39:7A
Certificate issuer:       /CN=D0E25322D396E87242DEC3F70A18C3BC69A50ADC
Certificate serial:       02B3AD2CE4E5824AC0C39D38EED2C63E8D124B08
Authority key identifier: D0:E2:53:22:D3:96:E8:72:42:DE:C3:F7:0A:18:C3:BC:69:A5:0A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E25322D396E87242DEC3F70A18C3BC69A50ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/323830343a383261303a3a2f33322d3430203d3e20323732353330.roa
Signing time:             Wed 04 Sep 2024 13:13:16 +0000
ROA not before:           Wed 04 Sep 2024 13:08:16 +0000
ROA not after:            Wed 03 Sep 2025 13:13:16 +0000
asID:                     272530
IP address blocks:        2804:82a0::/32 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b3:ad:2c:e4:e5:82:4a:c0:c3:9d:38:ee:d2:c6:3e:8d:12:4b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0E25322D396E87242DEC3F70A18C3BC69A50ADC
        Validity
            Not Before: Sep  4 13:08:16 2024 GMT
            Not After : Sep  3 13:13:16 2025 GMT
        Subject: CN=A5984E2FA7A9003A7B289B0E139CAFD523C9397A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:d6:c4:fd:be:f2:7a:6a:0e:aa:82:50:d8:
                    88:f0:46:e3:66:d2:1a:5b:bc:ac:d1:cb:c1:9b:4f:
                    fd:2d:e7:1d:0e:9c:af:93:81:fe:ad:0c:84:f1:e2:
                    eb:94:bb:ff:bf:96:1b:c1:ca:74:cf:39:fd:4c:e9:
                    d0:29:bd:91:15:29:65:14:90:66:56:3a:ad:e8:63:
                    31:2b:16:62:64:cf:26:a7:18:eb:63:80:09:ea:6e:
                    b5:f5:b3:36:30:59:a0:c8:8f:9c:27:95:b7:9d:b9:
                    71:02:61:c5:20:1c:39:e7:ed:7b:03:ed:a1:f7:66:
                    29:7d:dc:90:6b:e5:eb:b0:13:b7:26:73:b6:40:5d:
                    34:35:09:e2:0d:fc:1b:74:03:38:f9:67:d0:72:8e:
                    14:af:d7:2e:75:27:e6:0a:5d:52:5e:ea:f7:96:03:
                    dc:2e:5f:44:c3:5c:83:2a:e5:dc:98:76:18:4c:19:
                    08:1e:77:9e:c2:d0:ab:68:d4:5c:f2:0e:35:f6:4d:
                    7f:a2:6b:db:7a:e7:aa:c4:d8:65:05:5d:38:a2:4a:
                    da:8a:19:db:19:b1:db:f7:c9:3d:08:ef:0f:b5:8e:
                    62:e9:04:36:1a:09:91:7a:35:b2:ac:a0:e7:3b:26:
                    97:c8:38:0f:eb:0c:00:cf:6b:80:5f:e8:61:fa:6d:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:98:4E:2F:A7:A9:00:3A:7B:28:9B:0E:13:9C:AF:D5:23:C9:39:7A
            X509v3 Authority Key Identifier:
                keyid:D0:E2:53:22:D3:96:E8:72:42:DE:C3:F7:0A:18:C3:BC:69:A5:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/D0E25322D396E87242DEC3F70A18C3BC69A50ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E25322D396E87242DEC3F70A18C3BC69A50ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/323830343a383261303a3a2f33322d3430203d3e20323732353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d5:da:4c:cc:4c:25:e4:3d:b1:b0:21:c3:2f:2d:5a:13:b0:64:
         6f:b0:cb:97:3f:67:95:45:e7:cd:16:7c:de:8a:52:33:c5:67:
         2b:2f:24:8a:c1:66:b0:d6:e4:3e:7a:7a:08:ee:da:10:02:b4:
         0d:a6:38:a3:99:cf:8f:83:43:b2:f3:35:ad:a5:6c:8c:e5:7d:
         5b:8b:72:c9:c8:19:30:16:ec:88:67:c3:c2:b2:11:f8:b7:be:
         8c:f5:1a:f9:9a:dc:66:ce:81:fc:f7:e5:0b:54:87:f2:52:e0:
         c9:f5:80:d5:9f:58:84:0b:80:2c:84:a7:45:70:9e:61:ae:fd:
         ad:5b:94:48:64:89:fd:40:4b:4d:d2:cc:8f:28:5b:d9:94:71:
         95:51:5a:62:04:94:8b:f7:ed:64:51:52:c6:9c:ab:48:d2:5e:
         10:36:86:62:40:7e:5b:51:bd:c6:2a:92:ac:11:0c:fb:c6:15:
         41:a6:bd:60:d7:2a:e1:fe:c8:6a:98:b2:98:8e:32:f8:df:ff:
         9d:6d:ab:93:18:56:2e:71:32:dd:5c:99:1e:71:a5:b9:59:67:
         a4:fb:ff:04:c9:7f:de:6a:66:02:56:34:5d:7c:f8:db:3e:fe:
         28:2b:f8:a3:fd:48:29:8a:14:eb:7e:7a:f0:d4:5f:72:a8:a3:
         36:6f:1d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----