Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a383030303a3a2f33342d3334203d3e20323633393230.roa
File:                     323830343a323763303a383030303a3a2f33342d3334203d3e20323633393230.roa (raw, json)
Hash identifier:          TE6ydlNONlfA+zRxXm4cDuoHayVvfm1MnA9xzRqaMPA=
Subject key identifier:   3F:C4:3D:09:1C:B8:23:9A:10:47:86:D8:8D:C5:50:42:63:48:19:2F
Certificate issuer:       /CN=F3860F57CCED8C936C498E86A51A295017183FFB
Certificate serial:       33D7EB94ED388BBF282D08DD9395F172F7ECB20A
Authority key identifier: F3:86:0F:57:CC:ED:8C:93:6C:49:8E:86:A5:1A:29:50:17:18:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3860F57CCED8C936C498E86A51A295017183FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a383030303a3a2f33342d3334203d3e20323633393230.roa
Signing time:             Tue 02 Jul 2024 16:51:54 +0000
ROA not before:           Tue 02 Jul 2024 16:46:54 +0000
ROA not after:            Tue 01 Jul 2025 16:51:54 +0000
asID:                     263920
IP address blocks:        2804:27c0:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d7:eb:94:ed:38:8b:bf:28:2d:08:dd:93:95:f1:72:f7:ec:b2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3860F57CCED8C936C498E86A51A295017183FFB
        Validity
            Not Before: Jul  2 16:46:54 2024 GMT
            Not After : Jul  1 16:51:54 2025 GMT
        Subject: CN=3FC43D091CB8239A104786D88DC550426348192F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:ad:39:d8:4d:99:0f:26:bd:ae:83:c1:0a:
                    a6:f7:e3:7c:84:ce:6a:68:4c:75:dd:7c:09:30:c5:
                    d3:27:f4:f6:2d:c1:be:ca:5f:46:35:d3:cc:3c:45:
                    5e:bc:31:7b:81:2d:14:57:bd:15:39:42:67:39:bc:
                    07:65:7c:7a:8f:6c:bd:98:b9:55:ce:c3:96:4b:3f:
                    f3:74:a3:18:52:d3:d4:61:b5:30:ee:76:4f:c1:ef:
                    a2:02:85:64:79:11:e7:07:5a:fb:58:66:25:e4:2a:
                    38:bd:1f:83:a8:7f:13:84:22:2c:77:9b:1f:b5:49:
                    3f:ba:f1:8b:ce:00:60:0d:c2:47:3e:b0:9a:c6:71:
                    4a:3b:e6:b4:4b:1a:f3:9e:56:ed:73:a7:d4:59:0f:
                    12:b9:40:0b:79:ef:86:91:a5:23:46:c4:98:1d:4c:
                    0e:4f:5d:63:b0:8f:15:9d:0f:90:29:cc:85:d2:80:
                    18:b4:0a:d7:e3:04:38:21:5c:6b:2f:71:6a:00:30:
                    c6:f3:a3:cd:11:6e:f6:09:1e:35:9d:f9:1f:fa:cd:
                    5a:c1:46:00:66:8c:b7:c6:b4:d8:d8:6f:49:2c:23:
                    47:18:95:7a:9a:19:2f:5a:8a:8d:b7:b3:11:f6:3c:
                    e4:4d:ba:2b:b5:59:cc:b0:23:5c:c5:40:2d:95:42:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C4:3D:09:1C:B8:23:9A:10:47:86:D8:8D:C5:50:42:63:48:19:2F
            X509v3 Authority Key Identifier:
                keyid:F3:86:0F:57:CC:ED:8C:93:6C:49:8E:86:A5:1A:29:50:17:18:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/F3860F57CCED8C936C498E86A51A295017183FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3860F57CCED8C936C498E86A51A295017183FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a383030303a3a2f33342d3334203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:70:67:86:40:b7:5e:32:c7:dd:42:0e:74:27:39:97:cd:b9:
         f8:e5:60:25:2b:56:8a:ec:63:c2:74:24:51:d4:e9:6c:fc:e8:
         5c:68:d9:2d:23:cc:58:33:4b:52:62:ba:7c:74:f8:26:78:56:
         3c:f1:28:ed:a4:df:5d:aa:e9:ba:61:b4:b8:94:f2:0a:58:d6:
         5d:ae:e9:0a:31:28:62:d6:9a:39:3a:18:fc:88:d9:75:70:6b:
         cc:28:d9:51:a2:88:79:e1:91:d5:eb:5c:eb:c9:6f:d3:35:c3:
         12:13:19:22:0d:8d:79:82:aa:e7:47:2a:09:ba:41:ef:fc:db:
         76:a2:db:25:26:c1:c6:c1:04:60:bd:c3:ef:9d:39:24:74:9b:
         0c:f2:be:fb:2f:11:83:81:b8:84:15:bf:f9:5e:20:0c:a1:42:
         71:c9:c8:f5:16:e3:b7:e5:c3:49:8b:16:86:43:12:79:c3:05:
         35:45:6d:09:b3:e2:5e:45:c3:99:43:28:84:b8:12:cd:d2:7c:
         ea:7d:8c:73:59:a6:c3:d5:39:72:62:66:14:58:22:a1:51:3f:
         8d:92:61:d2:87:c8:ea:a2:a1:28:ac:c7:5c:29:88:e4:e6:4e:
         2d:7a:c3:28:1a:9f:bd:2c:c5:be:64:f9:b8:6a:df:29:66:3c:
         e5:30:43:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----