Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33322d3332203d3e20323733373034.roa
File:                     323830343a386166383a3a2f33322d3332203d3e20323733373034.roa (raw, json)
Hash identifier:          1++nSZYDc1EfRpRnmT6hwCkmVSj10y0O4cFN12pT2/w=
Subject key identifier:   D0:45:FF:88:2A:C0:88:C6:D3:0C:57:C6:B1:BD:60:34:82:21:E5:A9
Certificate issuer:       /CN=69D18585031D763FB6C19823B86102A30DEC217A
Certificate serial:       7CCFB0B43E73932A2229A26B2717F0604B4438F5
Authority key identifier: 69:D1:85:85:03:1D:76:3F:B6:C1:98:23:B8:61:02:A3:0D:EC:21:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69D18585031D763FB6C19823B86102A30DEC217A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33322d3332203d3e20323733373034.roa
Signing time:             Wed 30 Oct 2024 22:46:57 +0000
ROA not before:           Wed 30 Oct 2024 22:41:57 +0000
ROA not after:            Wed 29 Oct 2025 22:46:57 +0000
asID:                     273704
IP address blocks:        2804:8af8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cf:b0:b4:3e:73:93:2a:22:29:a2:6b:27:17:f0:60:4b:44:38:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D18585031D763FB6C19823B86102A30DEC217A
        Validity
            Not Before: Oct 30 22:41:57 2024 GMT
            Not After : Oct 29 22:46:57 2025 GMT
        Subject: CN=D045FF882AC088C6D30C57C6B1BD60348221E5A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:12:fa:a7:0f:32:46:30:b9:97:f0:1e:aa:
                    bc:bb:6a:9d:58:ea:1c:95:0e:c0:77:bf:94:f2:8d:
                    c2:27:26:49:a1:f8:17:54:e4:a5:89:36:32:f2:b5:
                    97:e4:98:88:e3:29:d7:63:6e:1f:d5:73:96:40:79:
                    c8:d9:8d:c0:06:f8:8e:18:37:a6:92:cc:3f:d8:de:
                    c2:6b:c5:6f:c3:84:dd:c0:70:1a:1c:7b:5f:13:67:
                    86:f8:51:59:0b:43:59:6d:93:fe:27:56:40:f2:44:
                    3f:5f:cd:fd:63:8d:87:91:a7:88:ed:43:58:b7:c8:
                    75:01:7b:d0:b6:b1:52:1f:ee:35:3b:cb:07:cd:f5:
                    7a:f8:ca:4c:50:88:a4:f6:81:38:65:70:8a:0a:1f:
                    60:0c:e6:a6:cd:13:73:26:00:40:bf:76:6a:1b:99:
                    d5:c9:4b:28:92:af:f5:14:44:13:26:0a:37:21:a7:
                    f2:5c:af:12:2c:c3:9b:3a:20:16:ff:ce:51:d1:f0:
                    5b:01:1b:06:12:7f:53:e0:8a:b5:30:2b:1f:35:96:
                    c5:52:ab:19:86:05:da:9c:71:68:fe:0b:7c:a1:39:
                    c3:15:f4:9f:84:9d:28:98:e0:ce:81:0e:72:5d:87:
                    a0:2b:dc:e4:ea:8f:a7:38:b0:c8:5c:14:63:65:07:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:45:FF:88:2A:C0:88:C6:D3:0C:57:C6:B1:BD:60:34:82:21:E5:A9
            X509v3 Authority Key Identifier:
                keyid:69:D1:85:85:03:1D:76:3F:B6:C1:98:23:B8:61:02:A3:0D:EC:21:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/69D18585031D763FB6C19823B86102A30DEC217A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69D18585031D763FB6C19823B86102A30DEC217A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33322d3332203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:33:04:3e:e3:1c:e0:3a:62:d8:f5:f2:0f:3e:1e:85:7a:4a:
         92:bf:a2:ef:b1:38:d1:63:b1:94:9d:4a:09:aa:10:e5:17:a9:
         99:dc:cf:2a:65:8b:6b:a3:23:8b:64:36:ab:84:a8:58:fe:77:
         0a:02:f0:5b:f3:b8:49:a6:cc:6a:a0:19:a1:6f:4f:1e:11:c3:
         b4:f8:6c:76:cc:f2:67:b0:42:a2:65:ae:27:05:6e:07:62:90:
         39:cc:a0:09:3f:ac:1f:52:c5:7a:2e:2f:82:15:83:4e:13:87:
         be:6f:d9:05:23:38:ec:9a:05:87:73:ce:7b:6f:3b:c7:37:7f:
         a9:4d:10:79:e0:2d:52:24:b0:35:42:56:01:7a:4a:5e:4b:fe:
         25:6c:2f:46:e9:a9:b3:a6:aa:48:8d:5c:43:8c:a6:06:1c:75:
         99:07:05:8a:5f:60:01:94:10:cd:87:9e:43:16:48:a2:10:21:
         cc:a5:23:65:c4:ec:1b:7f:60:73:7e:77:0b:60:0e:21:ac:d6:
         d7:1a:1c:ed:16:48:3c:1b:6a:a6:fb:6b:43:8e:cc:1a:3e:f6:
         c8:45:c9:e7:de:13:db:20:75:20:24:64:db:de:9f:6f:b8:1e:
         1c:b5:23:fa:31:ae:f5:63:d3:42:71:e3:b3:0c:c5:5e:c5:e7:
         1b:07:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----