Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/323830343a313831383a3a2f33322d3438203d3e20323632363537.roa
File:                     323830343a313831383a3a2f33322d3438203d3e20323632363537.roa (raw, json)
Hash identifier:          oUHYnfT3TBuENN4DthOJbPUA9HmEC7Rg/2kco/y4S3Q=
Subject key identifier:   86:2F:72:EF:70:C9:A3:02:45:AE:99:69:7C:35:34:0E:65:1C:BC:EB
Certificate issuer:       /CN=1CA20D5CBA9102939860AEADFEF368323D206454
Certificate serial:       694EB5B16692127B9705F3A9ACFBA03B2FDE7EC4
Authority key identifier: 1C:A2:0D:5C:BA:91:02:93:98:60:AE:AD:FE:F3:68:32:3D:20:64:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CA20D5CBA9102939860AEADFEF368323D206454.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/323830343a313831383a3a2f33322d3438203d3e20323632363537.roa
Signing time:             Fri 26 Jul 2024 17:32:19 +0000
ROA not before:           Fri 26 Jul 2024 17:27:19 +0000
ROA not after:            Fri 25 Jul 2025 17:32:19 +0000
asID:                     262657
IP address blocks:        2804:1818::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4e:b5:b1:66:92:12:7b:97:05:f3:a9:ac:fb:a0:3b:2f:de:7e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CA20D5CBA9102939860AEADFEF368323D206454
        Validity
            Not Before: Jul 26 17:27:19 2024 GMT
            Not After : Jul 25 17:32:19 2025 GMT
        Subject: CN=862F72EF70C9A30245AE99697C35340E651CBCEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:f2:2c:0c:aa:3b:c5:19:c6:35:f9:04:2f:
                    0c:16:ad:ea:95:86:ad:24:60:9f:74:29:b4:4f:fc:
                    d9:d3:99:44:71:f1:d9:6c:11:6e:a0:75:86:7c:d1:
                    24:31:4b:60:0b:57:a4:d8:30:b9:0c:2b:9b:2c:9c:
                    65:87:38:b2:13:7b:76:8f:10:01:75:26:a8:39:a2:
                    99:6b:b3:4c:f7:cb:b3:2c:5d:00:2b:a2:b5:1c:f6:
                    24:21:94:f5:5c:69:d5:10:61:21:92:bd:1a:18:19:
                    92:29:89:52:77:e1:bc:e2:1f:58:f5:b3:7b:f3:bf:
                    d4:ec:32:a0:0b:e4:da:9f:e5:87:91:55:b8:65:85:
                    00:74:10:96:a2:d8:48:ed:5c:47:fd:07:0e:40:5c:
                    af:be:8e:bb:8d:a1:55:d7:43:e6:e3:f8:9e:05:97:
                    d7:e4:80:68:cd:1b:bc:77:97:e1:44:8e:15:3b:d8:
                    c8:ab:47:80:87:ea:0b:15:8a:ba:2e:3f:a1:05:7b:
                    70:14:34:99:3c:02:e8:ca:7e:25:f2:bf:67:68:b1:
                    bf:6d:24:2e:47:af:11:fa:80:bf:5c:2f:a5:76:7d:
                    97:2e:c0:4b:c7:e8:b9:28:80:5b:6e:90:3d:04:a3:
                    8b:0d:f0:49:4b:ed:46:40:06:3e:f8:e4:4d:6a:01:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2F:72:EF:70:C9:A3:02:45:AE:99:69:7C:35:34:0E:65:1C:BC:EB
            X509v3 Authority Key Identifier:
                keyid:1C:A2:0D:5C:BA:91:02:93:98:60:AE:AD:FE:F3:68:32:3D:20:64:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/1CA20D5CBA9102939860AEADFEF368323D206454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CA20D5CBA9102939860AEADFEF368323D206454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/323830343a313831383a3a2f33322d3438203d3e20323632363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1818::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:2b:8a:3c:19:e8:37:f7:fc:c4:37:3d:56:61:b3:e2:c6:eb:
         b0:c5:36:03:10:3b:da:07:67:de:10:91:79:cf:5d:28:f7:92:
         02:c9:4e:49:fb:fb:9a:9a:28:a5:d0:20:75:2b:ff:a2:fc:6f:
         60:0a:35:6e:e9:72:cf:28:c1:d2:14:56:c8:97:34:fa:04:5e:
         8d:d9:12:0a:fd:39:3b:ea:dc:32:e2:f2:59:a6:2c:1e:ef:9f:
         af:d4:95:ff:1d:1d:c0:9f:b8:51:db:d1:7c:2b:82:10:00:89:
         dc:a0:52:d5:f6:94:a9:35:c1:cb:f4:69:01:c6:4e:23:73:37:
         fa:ca:15:c1:cc:dc:68:bd:fe:e2:a4:91:be:25:b0:57:7c:2f:
         04:f9:14:3c:a2:f4:34:be:8e:67:7f:ec:f1:1e:a2:b2:3f:78:
         c1:d5:b1:4a:a4:23:fa:3d:e6:49:e4:ff:f9:cb:44:de:39:98:
         77:9f:85:83:21:31:96:af:f2:f9:bf:5e:e4:80:5c:e1:51:83:
         c6:1d:64:fa:f1:cb:b0:05:38:2c:c6:bf:e9:64:84:ba:4a:e5:
         50:25:ac:80:89:e8:17:c8:45:08:43:37:f4:00:b3:ec:91:fb:
         48:2d:f3:20:00:2e:42:0f:aa:e9:02:1a:bd:2a:72:0c:26:ec:
         93:40:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----