Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/323830343a343139383a3a2f33322d313238203d3e20323637343433.roa
File:                     323830343a343139383a3a2f33322d313238203d3e20323637343433.roa (raw, json)
Hash identifier:          ME876hxiwNyr2Dn4S+CKVP4PH6awdxjxRe53fC31nfo=
Subject key identifier:   29:02:01:8F:74:07:BB:5D:6C:82:8B:F6:57:17:A5:0E:A2:B5:B7:EC
Certificate issuer:       /CN=36FD243D73F4F48951F4C200D7794D3B0C17BE64
Certificate serial:       466706A31438144A0DD32DEAFD89C8DB27024E00
Authority key identifier: 36:FD:24:3D:73:F4:F4:89:51:F4:C2:00:D7:79:4D:3B:0C:17:BE:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36FD243D73F4F48951F4C200D7794D3B0C17BE64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/323830343a343139383a3a2f33322d313238203d3e20323637343433.roa
Signing time:             Sat 06 Jul 2024 14:44:23 +0000
ROA not before:           Sat 06 Jul 2024 14:39:23 +0000
ROA not after:            Sat 05 Jul 2025 14:44:23 +0000
asID:                     267443
IP address blocks:        2804:4198::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:67:06:a3:14:38:14:4a:0d:d3:2d:ea:fd:89:c8:db:27:02:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36FD243D73F4F48951F4C200D7794D3B0C17BE64
        Validity
            Not Before: Jul  6 14:39:23 2024 GMT
            Not After : Jul  5 14:44:23 2025 GMT
        Subject: CN=2902018F7407BB5D6C828BF65717A50EA2B5B7EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:6c:0d:e5:ad:b5:00:04:01:cb:d0:88:83:
                    07:73:0d:83:c4:d2:5f:c5:92:0e:cb:2b:1b:37:3e:
                    c7:cd:15:59:1f:29:f5:f6:c1:20:2d:b0:54:a7:a0:
                    8a:3e:ce:ee:5e:5e:94:f2:41:eb:35:04:e4:84:4f:
                    08:46:67:fa:b2:18:53:c7:d3:69:9d:8d:3f:79:4e:
                    ed:c4:04:47:db:25:2e:63:48:ad:c5:d0:43:55:ff:
                    5d:26:7d:af:23:bf:8e:50:14:89:ac:8c:54:0e:68:
                    a9:37:a4:02:21:a1:2a:6c:f3:c2:84:b3:3a:f8:a2:
                    5f:77:1e:5c:d0:33:04:1f:03:37:17:da:f8:47:3d:
                    8a:3b:db:5a:ea:d0:de:f8:83:df:eb:e4:31:35:3e:
                    e8:31:7e:23:70:50:0c:a2:a1:ba:9d:78:14:17:b4:
                    b7:e8:3b:65:97:89:e9:32:52:f0:40:97:18:08:e1:
                    da:94:f4:2c:62:9e:1c:ca:25:72:ef:da:17:3d:a2:
                    59:88:24:65:22:62:26:49:e1:a0:ff:62:9a:58:7f:
                    63:ae:88:9c:59:53:9a:82:83:8d:a1:d6:dd:5f:77:
                    97:8d:81:16:e6:96:cc:9d:bd:7a:e5:6f:8f:e7:d4:
                    8e:a3:7f:45:b4:13:b7:04:f0:41:de:fb:eb:5a:59:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:02:01:8F:74:07:BB:5D:6C:82:8B:F6:57:17:A5:0E:A2:B5:B7:EC
            X509v3 Authority Key Identifier:
                keyid:36:FD:24:3D:73:F4:F4:89:51:F4:C2:00:D7:79:4D:3B:0C:17:BE:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/36FD243D73F4F48951F4C200D7794D3B0C17BE64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36FD243D73F4F48951F4C200D7794D3B0C17BE64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/323830343a343139383a3a2f33322d313238203d3e20323637343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4198::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:c4:a0:49:90:90:17:93:53:1c:02:d7:2e:01:4f:75:a8:4d:
         bd:a9:66:0d:a4:fa:01:27:5d:f3:5e:d8:b1:e1:2d:e2:17:bc:
         89:8b:03:80:20:70:f5:ca:a0:94:05:0b:41:17:d6:63:0e:42:
         8a:6a:81:01:7e:ac:73:b7:4f:57:90:11:8a:68:50:ba:c1:86:
         b1:f3:97:da:ee:20:9e:22:69:85:b6:30:71:17:70:98:c9:d4:
         79:c5:fb:e4:27:27:7c:b2:48:7c:3e:f7:98:06:2b:7d:92:b8:
         25:f3:68:41:73:d5:7e:ce:69:a5:a0:1d:24:38:2b:90:9d:20:
         43:79:f7:e2:e8:47:33:5f:37:c8:3a:4d:22:af:b3:10:5f:4d:
         45:78:e1:29:38:c0:be:7f:98:d5:e5:59:22:d2:aa:96:ba:4a:
         14:de:da:79:9b:83:77:52:b3:d1:d7:51:8b:80:99:28:5c:2a:
         ce:a9:28:ed:96:ef:e8:df:94:e5:c1:60:69:17:f2:39:68:cd:
         76:29:a6:16:10:6e:f0:e0:ce:bb:fa:26:28:52:87:d9:08:b4:
         1c:c3:6e:7e:00:7c:78:98:9b:14:31:76:a6:ed:23:c0:4d:15:
         98:60:06:15:3a:a7:05:64:0f:d9:81:45:9d:d3:cc:b7:3e:0d:
         b7:67:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----