Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a343030303a3a2f33342d3334203d3e203532393434.roa
File:                     323830343a6232383a343030303a3a2f33342d3334203d3e203532393434.roa (raw, json)
Hash identifier:          drUnsmf5x2YwXHo4PSBtdMiOzaq5o6dAZUN0soQvYhg=
Subject key identifier:   EC:84:98:75:87:EE:74:19:21:60:00:95:3C:E2:79:30:27:A4:1F:9F
Certificate issuer:       /CN=1733084816F181DADE66CFF006E96DDF853D8218
Certificate serial:       69CEC26367D55468F50AA13410C8B7FBD6446F0D
Authority key identifier: 17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a343030303a3a2f33342d3334203d3e203532393434.roa
Signing time:             Wed 04 Sep 2024 22:45:54 +0000
ROA not before:           Wed 04 Sep 2024 22:40:54 +0000
ROA not after:            Wed 03 Sep 2025 22:45:54 +0000
asID:                     52944
IP address blocks:        2804:b28:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ce:c2:63:67:d5:54:68:f5:0a:a1:34:10:c8:b7:fb:d6:44:6f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1733084816F181DADE66CFF006E96DDF853D8218
        Validity
            Not Before: Sep  4 22:40:54 2024 GMT
            Not After : Sep  3 22:45:54 2025 GMT
        Subject: CN=EC84987587EE7419216000953CE2793027A41F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:d4:6f:8b:9f:cc:96:31:b6:57:b3:94:b6:
                    f9:1e:9a:78:61:4f:27:92:2e:89:2f:86:c6:e1:01:
                    0a:75:4b:8d:03:5e:2a:a6:97:dc:a6:dc:60:c8:2e:
                    2f:70:6c:be:a8:f2:f0:b4:41:d9:a7:c5:66:bd:6e:
                    c8:39:ed:87:d0:b7:4b:cc:9f:60:ee:f2:18:ad:b7:
                    eb:c5:21:34:ef:62:ca:9f:60:db:cc:76:98:c3:77:
                    44:81:11:88:8f:f3:db:ee:51:fb:64:67:13:36:b9:
                    af:21:c2:8b:63:b2:7b:c6:49:9d:78:b1:3e:f9:0e:
                    8e:50:15:52:6e:82:1c:42:73:9a:50:f4:37:7b:dd:
                    0e:b5:a0:ed:5c:6f:ed:2b:0d:2c:07:fe:24:63:b3:
                    2d:fe:1b:d8:a7:00:33:31:0d:b2:04:56:49:86:6d:
                    88:af:59:b6:49:ee:41:5e:d5:e5:af:e4:81:27:2d:
                    13:c6:f0:5d:c4:66:57:71:92:0d:4f:94:bb:f1:7f:
                    f4:1a:0f:2f:1a:4f:06:4d:16:83:ed:76:11:09:0c:
                    55:a9:3a:18:f2:ba:55:07:88:eb:83:b5:85:7d:47:
                    06:bf:17:77:78:5d:55:e7:2a:7c:07:1e:e4:ad:a9:
                    65:14:95:2b:0d:87:da:b0:2e:c5:4b:84:69:af:2c:
                    c6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:84:98:75:87:EE:74:19:21:60:00:95:3C:E2:79:30:27:A4:1F:9F
            X509v3 Authority Key Identifier:
                keyid:17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/1733084816F181DADE66CFF006E96DDF853D8218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a343030303a3a2f33342d3334203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b28:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:b3:f9:3e:ce:e6:a1:94:ee:aa:1a:57:d8:8f:89:59:96:16:
         b6:d1:ba:b2:af:8a:69:e3:1f:58:d1:b1:7c:84:f0:0b:6d:e2:
         6c:ff:b1:c6:77:ec:0c:77:dd:9d:7c:e7:bf:1c:e3:9d:b7:cb:
         7c:8b:a6:e4:45:4b:2b:ec:9c:3d:56:00:71:f6:9b:38:d3:96:
         47:41:a8:8b:06:70:cf:d8:93:d4:56:03:5f:5e:b0:d6:7d:98:
         e7:8d:0e:a6:ee:19:cd:ab:f5:cb:35:b7:6a:10:1e:95:eb:db:
         50:e3:c5:e5:cf:37:5f:86:c6:e9:45:e9:11:db:2c:d7:c9:f9:
         f6:54:72:6c:62:bc:d4:b4:8c:12:25:96:30:b5:71:81:20:98:
         08:ea:d5:5c:88:82:98:3f:53:47:cc:eb:7c:49:8b:88:17:b3:
         92:c7:53:82:69:c6:f5:79:3f:d7:25:1c:ba:17:f2:34:96:5d:
         cd:5a:f1:95:b5:ca:8a:f2:52:05:f5:6c:d3:19:fa:5f:5e:f9:
         3e:33:ad:cb:66:12:19:2c:06:28:2f:ca:aa:5e:2d:9f:29:43:
         f7:da:94:59:95:61:d4:a3:1f:75:7b:6a:1b:ac:8a:1d:fe:ca:
         ee:ce:67:8e:58:ba:58:96:ca:bb:55:05:33:63:41:56:07:10:
         1d:fa:8b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----