Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/323830343a6231303a3a2f33322d313238203d3e203532393336.roa
File:                     323830343a6231303a3a2f33322d313238203d3e203532393336.roa (raw, json)
Hash identifier:          f6G/2BwwBhfc+4xe2wunlnzUXNmQ7kO8JyTwhrFGQJY=
Subject key identifier:   06:0E:9C:94:D4:5A:0F:2A:C3:7B:A2:87:DD:B1:8E:11:99:A9:66:AE
Certificate issuer:       /CN=3DB191150FCD76CA20839F475687E6E6C70AC6A7
Certificate serial:       23388ECED38EAC212DB2F0FDECB1D834E67B8206
Authority key identifier: 3D:B1:91:15:0F:CD:76:CA:20:83:9F:47:56:87:E6:E6:C7:0A:C6:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/323830343a6231303a3a2f33322d313238203d3e203532393336.roa
Signing time:             Sat 02 Nov 2024 19:56:37 +0000
ROA not before:           Sat 02 Nov 2024 19:51:37 +0000
ROA not after:            Sat 01 Nov 2025 19:56:37 +0000
asID:                     52936
IP address blocks:        2804:b10::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:38:8e:ce:d3:8e:ac:21:2d:b2:f0:fd:ec:b1:d8:34:e6:7b:82:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DB191150FCD76CA20839F475687E6E6C70AC6A7
        Validity
            Not Before: Nov  2 19:51:37 2024 GMT
            Not After : Nov  1 19:56:37 2025 GMT
        Subject: CN=060E9C94D45A0F2AC37BA287DDB18E1199A966AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:c2:b5:ff:f1:94:49:56:ac:92:6b:93:0b:
                    9d:ce:2a:30:3c:9b:c3:02:d3:28:48:77:31:3c:54:
                    df:f0:75:65:6f:11:f8:39:8d:71:35:f7:50:7a:8f:
                    61:bc:9a:cd:91:41:29:1c:01:4e:b7:55:71:f1:3c:
                    5a:ce:11:9f:65:f2:65:65:f6:89:9c:12:f2:33:99:
                    21:b9:54:79:13:84:3f:a0:17:b3:c7:c1:8d:a9:59:
                    b8:55:40:65:23:40:dd:95:d3:ed:d2:0e:5c:a3:75:
                    c9:a7:69:45:ea:2d:93:bd:db:27:87:40:4a:46:f8:
                    c2:01:94:e6:c9:26:a3:ab:7e:33:01:09:bb:05:f1:
                    2c:70:7a:f0:51:18:d4:a1:f3:9e:7a:fc:9f:ab:e6:
                    0c:44:7b:a5:8e:7b:7f:28:0e:11:0e:62:5e:b4:fe:
                    64:74:7d:8c:7b:a3:7c:3c:2f:2b:90:81:e1:c0:51:
                    14:88:ea:62:2f:9b:88:f5:dd:01:ed:62:03:a1:a4:
                    59:05:d7:c5:55:44:45:84:b9:e8:21:93:07:a9:cd:
                    86:85:90:83:09:cd:d1:98:53:75:16:80:9c:0e:21:
                    c4:5e:a1:19:bd:d7:33:0d:b4:2f:e0:33:10:48:4a:
                    d5:25:75:ba:d7:c8:fc:85:60:84:25:53:81:c6:24:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0E:9C:94:D4:5A:0F:2A:C3:7B:A2:87:DD:B1:8E:11:99:A9:66:AE
            X509v3 Authority Key Identifier:
                keyid:3D:B1:91:15:0F:CD:76:CA:20:83:9F:47:56:87:E6:E6:C7:0A:C6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/323830343a6231303a3a2f33322d313238203d3e203532393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:21:bf:cd:c1:1d:64:d3:c7:83:23:7c:ce:49:38:27:b4:84:
         61:08:a4:2c:36:85:28:22:b1:0c:35:82:02:e8:13:ad:97:3d:
         31:52:6e:4f:19:cd:59:b9:3e:78:1c:aa:78:78:d7:e6:3f:c4:
         57:74:9d:e0:47:3e:c8:59:f3:09:45:ed:2e:34:fc:a8:5b:b7:
         af:6a:94:0d:cc:7a:8a:53:51:27:d7:fc:9c:1e:5b:87:f2:84:
         83:52:f1:0c:81:06:2d:9f:6a:99:ee:f0:f8:64:f8:52:63:14:
         92:d9:6e:5b:ac:c3:82:47:96:fb:a4:30:8d:05:98:dd:2c:3a:
         f7:37:86:17:b5:2f:b1:68:17:7f:34:b0:eb:7f:31:cc:d7:d1:
         26:b3:90:82:99:46:0e:e7:59:17:4e:98:2a:31:9a:de:37:fc:
         7f:9c:de:b4:bf:e8:e9:d2:da:68:37:f7:f5:4b:ab:1c:c5:b0:
         d9:55:96:c3:e3:b3:07:87:47:3b:7d:ad:2c:33:2b:af:18:cc:
         ec:31:30:34:ae:d5:a8:34:d6:aa:f5:69:1e:9d:a3:cc:03:48:
         db:a4:8c:4b:2a:8a:d1:02:53:5c:37:50:e2:6d:04:23:d1:0b:
         c0:fa:16:31:23:75:1e:e1:0c:ac:de:c2:f0:22:62:82:3f:84:
         77:76:b0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----