Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/323830343a373037383a3a2f33322d3332203d3e20323730373238.roa
File:                     323830343a373037383a3a2f33322d3332203d3e20323730373238.roa (raw, json)
Hash identifier:          16/RWGPJXbgUz+w8Q9uMwMQCupq0ixj0ebLXidubQBs=
Subject key identifier:   31:B9:95:28:9F:80:0A:D8:11:D2:36:E4:8D:19:79:39:E6:14:6B:D3
Certificate issuer:       /CN=EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A
Certificate serial:       70B2F6C00FD039EFB55B3931939605E3B3E20AB7
Authority key identifier: EC:3E:FB:03:B4:B8:44:B2:DB:A9:49:3F:99:2B:59:7C:23:BF:BE:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/323830343a373037383a3a2f33322d3332203d3e20323730373238.roa
Signing time:             Sun 01 Sep 2024 20:40:55 +0000
ROA not before:           Sun 01 Sep 2024 20:35:55 +0000
ROA not after:            Sun 31 Aug 2025 20:40:55 +0000
asID:                     270728
IP address blocks:        2804:7078::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b2:f6:c0:0f:d0:39:ef:b5:5b:39:31:93:96:05:e3:b3:e2:0a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A
        Validity
            Not Before: Sep  1 20:35:55 2024 GMT
            Not After : Aug 31 20:40:55 2025 GMT
        Subject: CN=31B995289F800AD811D236E48D197939E6146BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:5b:67:10:10:97:d9:92:c0:db:8d:e1:7f:
                    b8:20:c0:79:ae:ce:05:31:1c:cc:ad:e4:31:93:34:
                    f0:1b:9f:b2:34:70:03:bb:ef:63:93:a5:c2:b4:72:
                    39:b9:ca:76:57:86:94:e0:e7:cf:3d:f1:bd:9c:15:
                    82:2d:73:16:e5:b1:3f:e7:a6:81:a3:2c:5a:3d:b5:
                    34:f3:00:10:11:41:80:c0:3a:11:3c:d3:47:26:f3:
                    84:68:40:cb:8a:bd:ed:12:5d:ec:21:4d:df:7f:61:
                    d1:b7:af:04:67:64:5c:87:4a:46:c5:26:2e:36:34:
                    86:2b:46:d5:6a:cd:cb:82:9e:66:01:15:05:2b:2f:
                    36:48:6e:1d:32:1b:3c:61:ff:ec:4a:01:5c:56:6a:
                    66:4b:0c:ce:e3:2e:a5:80:3f:3d:14:cb:76:d0:30:
                    a9:77:67:e7:54:44:48:b7:04:2b:f4:c6:72:d9:38:
                    cd:fe:a8:14:32:7e:69:ec:54:f1:57:cb:bc:e9:b3:
                    a9:df:86:f7:27:47:7b:0a:ea:b6:a1:f9:86:18:90:
                    90:46:cd:b7:41:13:e3:23:a8:ba:58:7d:01:9d:5e:
                    59:45:0a:e0:9e:53:94:98:64:d1:62:e5:1a:a4:c2:
                    22:d5:12:6a:f8:c7:ed:bf:a5:cb:58:e9:9a:74:a5:
                    7d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B9:95:28:9F:80:0A:D8:11:D2:36:E4:8D:19:79:39:E6:14:6B:D3
            X509v3 Authority Key Identifier:
                keyid:EC:3E:FB:03:B4:B8:44:B2:DB:A9:49:3F:99:2B:59:7C:23:BF:BE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/323830343a373037383a3a2f33322d3332203d3e20323730373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7078::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:38:a0:72:74:e6:b4:e0:c7:f5:3d:98:93:38:b9:b1:91:15:
         f9:6e:0f:4b:53:83:ef:01:a9:9b:cd:25:e1:e4:50:e8:ae:db:
         26:8d:48:42:e7:82:b3:a5:eb:ec:fb:f0:80:20:ad:bd:7a:56:
         56:b5:69:64:48:6c:ea:3e:1c:56:0a:49:6b:fe:c1:3b:61:4d:
         2b:1e:cf:c5:08:b1:f9:85:29:9c:c0:1d:0e:5f:b5:0c:96:7a:
         58:a4:85:f2:2c:d8:a2:c4:3a:31:70:af:36:2f:92:78:c6:53:
         21:57:52:29:96:b2:35:a0:a2:1e:67:10:48:55:05:74:c0:eb:
         e5:eb:6d:fa:7f:54:cb:27:12:76:db:4f:a3:ed:2d:7c:fa:7f:
         a5:fe:32:2a:cd:b7:4b:e9:7b:7b:d5:92:e4:88:6a:79:75:e4:
         a0:8e:4d:bc:c7:9f:cb:bf:cd:56:5b:62:8e:ca:6d:f1:bc:c3:
         9c:20:48:aa:be:f2:8f:a1:e3:56:2c:99:e4:01:1b:8b:0f:c4:
         b2:9a:3f:79:5e:f5:a4:16:f1:99:3d:ec:4c:ed:66:f3:4f:62:
         fc:5b:53:51:6b:48:97:1e:6b:db:10:69:e4:f7:2c:b4:88:17:
         4d:5c:39:6e:1a:26:bc:a6:d4:fe:0a:6a:c0:e6:f3:aa:07:73:
         c6:44:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----