Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/323830343a343435303a3a2f33322d3332203d3e20323637363234.roa
File:                     323830343a343435303a3a2f33322d3332203d3e20323637363234.roa (raw, json)
Hash identifier:          xSPFYHTJG7MMy2FEjn70pPIXfiftmvktVGEd72K3uQM=
Subject key identifier:   E7:91:89:BD:E0:62:BC:49:9B:21:F8:49:4B:A7:B7:42:51:3B:D6:94
Certificate issuer:       /CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Certificate serial:       492B720C3F7E854F82962FC75517A4444CB0AF23
Authority key identifier: C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/323830343a343435303a3a2f33322d3332203d3e20323637363234.roa
Signing time:             Tue 27 Aug 2024 12:50:17 +0000
ROA not before:           Tue 27 Aug 2024 12:45:17 +0000
ROA not after:            Tue 26 Aug 2025 12:50:17 +0000
asID:                     267624
IP address blocks:        2804:4450::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2b:72:0c:3f:7e:85:4f:82:96:2f:c7:55:17:a4:44:4c:b0:af:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
        Validity
            Not Before: Aug 27 12:45:17 2024 GMT
            Not After : Aug 26 12:50:17 2025 GMT
        Subject: CN=E79189BDE062BC499B21F8494BA7B742513BD694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:37:a1:a9:39:d2:8a:09:44:22:0a:38:d9:
                    67:05:a0:e8:b6:ee:f3:46:c4:c1:fa:7b:35:af:0e:
                    ab:d4:82:db:53:4e:43:8c:3d:6c:19:64:5c:95:59:
                    30:27:01:81:d9:e1:e4:65:7d:cc:f3:26:ed:3a:27:
                    83:a4:9a:10:1e:c3:90:56:b7:97:73:dd:47:b3:5f:
                    c4:03:28:63:72:c1:1f:0c:5b:7f:8e:d8:2d:b9:00:
                    4a:4f:01:9b:de:41:b4:4a:54:6e:7f:74:70:d6:a6:
                    52:9b:34:99:42:fc:af:18:3b:12:d7:2a:0f:43:9e:
                    55:da:3d:fb:3a:23:35:11:19:67:89:22:fa:f2:4b:
                    1b:1a:54:af:91:94:f4:48:dc:a6:8d:51:04:38:23:
                    8d:f9:45:8c:42:d6:05:84:d9:e2:b3:37:b4:b7:b4:
                    fc:4b:dc:b3:1b:e3:10:7e:30:2b:f7:c6:06:21:a9:
                    6d:5a:13:03:24:c7:7a:19:60:ba:85:ce:29:26:f3:
                    3f:85:2b:95:c3:7c:b5:62:ef:2c:b6:af:e2:d3:a4:
                    f0:ce:f7:7c:4a:f8:44:a9:3b:e0:cd:4a:92:31:99:
                    e9:ed:89:99:d1:30:0f:47:a6:3d:2a:5f:b3:ef:48:
                    69:b4:43:80:10:d7:18:39:3f:4a:45:f7:23:71:12:
                    fc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:89:BD:E0:62:BC:49:9B:21:F8:49:4B:A7:B7:42:51:3B:D6:94
            X509v3 Authority Key Identifier:
                keyid:C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/323830343a343435303a3a2f33322d3332203d3e20323637363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4450::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:da:e7:ab:52:d4:94:07:9b:ab:36:0d:90:ef:4a:b7:1f:ef:
         03:e8:d6:5a:3f:49:4d:e7:8a:fa:dd:fb:0a:95:05:99:08:7c:
         11:cd:83:7b:71:34:5f:a4:b1:8d:d6:86:b0:b3:4c:f1:ff:88:
         42:de:7e:0d:bb:a0:70:72:48:2c:dd:cb:60:f7:82:e6:3d:33:
         d5:13:27:03:83:89:2f:46:5d:b4:87:f3:4f:9d:cb:6e:a5:4c:
         65:5a:03:50:a7:67:9c:8f:ad:c9:de:87:da:54:f1:4d:f0:fd:
         19:91:8e:a4:34:fe:43:79:6d:70:87:e3:3c:15:f5:ee:0a:89:
         73:f7:12:20:80:6b:fc:1a:89:1f:cf:af:1f:11:c5:23:09:1f:
         ef:36:34:00:40:ce:d2:5d:bd:56:01:83:1a:75:43:90:bd:de:
         bf:13:9e:51:7a:ff:a5:51:c9:be:cf:08:54:1d:05:f4:8e:8d:
         3f:3a:fc:4c:a8:5d:2b:6c:b7:27:1a:a1:bb:25:52:2f:05:65:
         f9:10:e7:2c:0b:97:a6:90:83:9c:dc:bc:ad:c7:5c:5b:9a:14:
         39:9f:19:16:8f:ea:cb:9b:b2:c0:9d:f6:d7:9e:b9:ed:c6:32:
         11:a5:58:b2:e1:93:a0:9d:16:3f:00:64:ba:06:17:57:29:9c:
         74:30:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----