Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/323830343a376339303a633030303a3a2f33342d3334203d3e20323731353034.roa
File:                     323830343a376339303a633030303a3a2f33342d3334203d3e20323731353034.roa (raw, json)
Hash identifier:          WIvYtLgI6ab1LIcVGrh3OdBvjSJGqK1sAOo/Lp+C2Rc=
Subject key identifier:   88:26:E2:AC:0F:CE:92:13:3C:41:63:DB:3A:CB:24:69:53:66:A0:9D
Certificate issuer:       /CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
Certificate serial:       6F5E24FF0EAD4D5601B4CAA920C32D477084A9B6
Authority key identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/323830343a376339303a633030303a3a2f33342d3334203d3e20323731353034.roa
Signing time:             Fri 20 Sep 2024 12:48:10 +0000
ROA not before:           Fri 20 Sep 2024 12:43:10 +0000
ROA not after:            Fri 19 Sep 2025 12:48:10 +0000
asID:                     271504
IP address blocks:        2804:7c90:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5e:24:ff:0e:ad:4d:56:01:b4:ca:a9:20:c3:2d:47:70:84:a9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
        Validity
            Not Before: Sep 20 12:43:10 2024 GMT
            Not After : Sep 19 12:48:10 2025 GMT
        Subject: CN=8826E2AC0FCE92133C4163DB3ACB24695366A09D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ec:75:68:bf:8b:21:73:55:d8:fa:fe:54:6b:
                    e3:c4:d2:16:db:8b:85:9f:fb:b3:c8:1b:56:83:c7:
                    ba:f2:1e:e9:4b:ef:5b:11:10:40:22:e6:35:ad:25:
                    45:26:43:cb:2a:c8:cd:e5:d8:03:bb:b3:b0:c7:77:
                    8d:b5:11:cb:01:c6:fd:0d:dc:0d:12:d4:cc:86:58:
                    26:2e:7d:80:b3:b9:11:ef:74:fb:b2:a7:9e:f9:af:
                    93:f3:2e:67:1b:4a:0d:91:ec:3d:07:5e:d1:43:87:
                    2e:09:e3:4e:ac:af:66:e6:90:e3:7a:a9:bd:71:cb:
                    07:fc:43:81:e5:40:b1:6a:2a:a4:50:2c:be:cf:70:
                    52:f8:8b:01:76:a2:89:b3:56:3f:fd:9c:27:4c:7d:
                    1c:81:ee:48:37:52:bb:37:4e:7e:44:d2:3f:82:bf:
                    c9:90:44:8c:f0:25:48:db:b1:d1:ec:b4:da:75:bb:
                    42:c3:f2:d1:1e:17:a2:f9:6e:13:18:c2:72:e2:21:
                    52:e8:58:c5:c4:e3:66:3e:d6:3a:9f:ce:f9:51:32:
                    85:2d:6c:01:a0:1c:48:bb:9d:3a:ed:96:7c:45:5c:
                    0b:be:11:b4:f5:d8:e0:21:cc:8e:00:df:03:af:02:
                    2a:92:c1:e4:b2:e7:06:91:39:2e:f1:91:40:4f:a3:
                    17:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:26:E2:AC:0F:CE:92:13:3C:41:63:DB:3A:CB:24:69:53:66:A0:9D
            X509v3 Authority Key Identifier:
                keyid:8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/323830343a376339303a633030303a3a2f33342d3334203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c90:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:19:c3:d1:d9:18:45:25:f4:6d:4b:f9:7f:ed:ea:be:91:54:
         52:3c:a9:2f:28:d6:88:4c:f8:15:55:5d:e5:ce:90:85:c0:17:
         74:0f:5f:e8:2e:27:94:e9:05:4c:59:7e:87:be:cb:d2:3e:c4:
         86:42:b4:da:ce:28:50:c3:98:2c:5e:f3:57:48:37:ea:2f:57:
         ab:9c:fd:d0:30:d4:e2:32:ee:dd:f9:ec:fc:bc:c2:5a:1c:15:
         cb:e8:52:43:fc:29:df:5a:b7:fc:bd:0a:77:7e:74:52:41:52:
         9d:18:36:9d:1f:44:cd:5f:d3:26:f6:fd:c6:ce:83:af:da:f2:
         af:c2:2c:09:f4:04:fa:9f:9d:b8:8e:57:6a:f9:e3:f2:fd:f8:
         63:31:e3:77:8e:b4:fb:15:3a:b6:88:3b:d2:f3:76:2d:cb:68:
         00:ea:32:ae:6b:08:23:65:06:c2:fa:f8:f7:cb:87:99:57:a0:
         10:65:93:c7:32:5b:48:c6:ac:4e:a1:91:82:f7:93:8f:5d:69:
         b6:71:a8:54:db:bd:20:b0:dd:5e:cb:aa:eb:04:d7:a4:55:5f:
         fe:21:5b:c9:ab:e3:89:f5:63:19:03:c2:f1:49:b0:b9:09:8d:
         87:c0:7b:8f:de:e7:2c:93:7c:ed:3c:bb:be:9b:6c:39:40:38:
         bd:70:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----