Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/323830343a376339303a3a2f33322d3332203d3e20323731353034.roa
File:                     323830343a376339303a3a2f33322d3332203d3e20323731353034.roa (raw, json)
Hash identifier:          +HdNUq7ydGZTQqrrejqcrmWJXKulN4bsp6wd2jtihv4=
Subject key identifier:   66:A6:6C:CE:EE:0F:19:97:44:83:89:86:F7:7B:EC:32:D3:60:2A:DF
Certificate issuer:       /CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
Certificate serial:       5C90AE972D11E9F02441867434FBA06A908E8D76
Authority key identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/323830343a376339303a3a2f33322d3332203d3e20323731353034.roa
Signing time:             Mon 19 Aug 2024 18:28:14 +0000
ROA not before:           Mon 19 Aug 2024 18:23:14 +0000
ROA not after:            Mon 18 Aug 2025 18:28:14 +0000
asID:                     271504
IP address blocks:        2804:7c90::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:90:ae:97:2d:11:e9:f0:24:41:86:74:34:fb:a0:6a:90:8e:8d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
        Validity
            Not Before: Aug 19 18:23:14 2024 GMT
            Not After : Aug 18 18:28:14 2025 GMT
        Subject: CN=66A66CCEEE0F199744838986F77BEC32D3602ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:50:d9:c5:45:df:9a:57:2d:86:49:fc:dd:
                    f2:8f:d2:77:30:e3:56:dc:dd:24:b0:75:33:0f:a4:
                    2f:9a:c9:c5:79:8a:8e:47:9c:59:24:ac:31:c7:6c:
                    df:32:aa:b0:c4:d1:e4:96:dd:67:87:98:a5:61:5e:
                    0a:e0:05:ac:ed:cd:ff:fe:80:54:b4:81:82:49:31:
                    3b:35:3e:7d:2f:3f:62:96:9b:1c:a5:16:84:e7:18:
                    be:62:19:e5:c0:a9:26:a0:e7:84:a3:0f:af:5f:1b:
                    a0:ac:c9:f3:b1:72:f9:eb:76:61:db:53:00:de:16:
                    c0:88:2a:59:1c:20:e1:5b:38:14:0c:60:ed:8f:8d:
                    e8:62:94:98:75:39:8a:48:90:de:aa:2f:df:45:74:
                    49:a7:12:ea:9b:d0:c7:65:c0:5f:d3:06:9c:8e:2d:
                    38:eb:57:56:d8:84:bd:46:91:d0:08:e9:96:ba:cd:
                    81:82:3f:37:e8:80:ef:bd:ed:d1:33:4e:4c:ee:a2:
                    43:38:c1:ed:e9:60:e0:8b:df:11:52:da:04:b7:c2:
                    70:4d:c2:10:fb:97:62:2b:93:f8:64:a9:0a:69:fc:
                    69:e3:3f:21:7f:ab:aa:09:8b:90:60:ac:7f:79:cf:
                    d4:85:3f:8b:61:b7:f2:25:9b:68:7a:3d:92:b6:00:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A6:6C:CE:EE:0F:19:97:44:83:89:86:F7:7B:EC:32:D3:60:2A:DF
            X509v3 Authority Key Identifier:
                keyid:8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/323830343a376339303a3a2f33322d3332203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:75:ae:12:c4:3f:b8:8b:36:0c:8e:6a:04:9a:13:23:b8:f5:
         31:08:82:68:27:2c:38:73:6c:80:cf:df:3e:97:2a:2c:8b:ab:
         d1:01:4d:ad:7b:3b:de:c9:9a:26:a3:71:c8:0b:d8:13:3a:49:
         f1:53:ac:b6:5a:db:a1:3d:33:8e:a5:47:e4:73:7e:2d:34:b0:
         f4:3a:da:bf:81:18:73:6a:69:68:81:92:a3:43:61:10:44:11:
         4c:4d:50:6a:23:64:b5:8b:b9:75:91:bf:ec:7e:e8:34:70:c2:
         31:ce:1b:10:1e:f5:4c:dc:3b:6e:4c:fd:10:47:34:78:e1:42:
         59:d5:4b:4e:58:6c:d8:1e:0d:0a:80:57:28:db:6b:47:2d:34:
         dd:c1:68:8a:82:65:8e:00:74:cd:1b:64:52:89:cd:34:b4:05:
         98:96:67:60:5e:92:9c:10:0d:b8:a6:2c:9f:09:74:51:75:64:
         49:4f:14:07:d1:5c:73:ea:ee:39:65:62:ff:a0:5f:91:7d:bd:
         16:32:aa:07:e0:0c:41:9d:4c:47:fb:73:d5:26:7b:87:14:a6:
         64:95:d1:76:ad:37:94:76:50:a6:e3:44:1b:a2:de:e4:2f:e3:
         9c:01:f1:0a:ba:45:f8:3f:64:35:1d:e5:cb:04:56:13:24:a1:
         a9:d2:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----