Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a633030303a3a2f33342d3334203d3e20323633393230.roa
File:                     323830343a323763303a633030303a3a2f33342d3334203d3e20323633393230.roa (raw, json)
Hash identifier:          qGbIEgMqcugP9w75aE5AzYNfcuZ/rvQyZZ9IgN6ytkQ=
Subject key identifier:   6A:31:45:29:4A:5A:C6:03:56:EC:F8:27:9A:55:E6:2D:E7:E8:C4:A9
Certificate issuer:       /CN=F3860F57CCED8C936C498E86A51A295017183FFB
Certificate serial:       51159051FAE457F45D05B1CFF7015D8608F044EB
Authority key identifier: F3:86:0F:57:CC:ED:8C:93:6C:49:8E:86:A5:1A:29:50:17:18:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3860F57CCED8C936C498E86A51A295017183FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a633030303a3a2f33342d3334203d3e20323633393230.roa
Signing time:             Tue 02 Jul 2024 16:51:54 +0000
ROA not before:           Tue 02 Jul 2024 16:46:54 +0000
ROA not after:            Tue 01 Jul 2025 16:51:54 +0000
asID:                     263920
IP address blocks:        2804:27c0:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:15:90:51:fa:e4:57:f4:5d:05:b1:cf:f7:01:5d:86:08:f0:44:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3860F57CCED8C936C498E86A51A295017183FFB
        Validity
            Not Before: Jul  2 16:46:54 2024 GMT
            Not After : Jul  1 16:51:54 2025 GMT
        Subject: CN=6A3145294A5AC60356ECF8279A55E62DE7E8C4A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:47:12:5a:20:9f:fe:5d:98:c6:29:a8:bd:77:
                    07:0e:ca:1b:81:3e:cd:86:11:a9:74:34:e9:0a:47:
                    81:f7:9e:96:2b:6a:b6:d0:f1:05:f1:64:d3:e7:ad:
                    a4:ad:b9:f2:2c:21:42:6a:e2:70:e7:c8:0a:7a:bf:
                    01:25:39:0c:df:72:66:52:23:12:65:73:2b:64:df:
                    5b:47:18:9d:6a:5d:f3:78:f9:81:26:3c:f1:d5:f0:
                    f2:24:c3:b0:5e:09:35:8a:02:2b:a9:46:e4:23:0b:
                    cb:3e:8c:8e:7c:d5:6a:64:76:b3:28:83:a4:5e:c9:
                    7e:54:81:79:b8:3d:e2:be:4f:6d:f7:f2:3c:d7:8f:
                    79:d3:8a:5a:56:94:ae:07:f6:33:b1:69:97:84:8a:
                    fb:ea:19:2e:09:38:b4:99:b8:4a:d7:8b:a2:a7:16:
                    de:fc:13:a3:ef:1b:c7:82:a5:94:a0:ab:58:29:52:
                    f9:d9:22:32:a7:b9:c9:c6:ad:61:41:22:28:5e:53:
                    f9:52:80:52:b7:19:7d:c4:93:39:65:29:00:bc:a2:
                    c7:10:34:38:33:47:1f:72:7c:6a:b6:8a:8a:28:18:
                    e5:4d:65:44:d1:4f:f0:89:9d:7c:b0:cb:13:2e:97:
                    6a:a0:9c:dd:e9:51:d3:6e:3a:5e:f3:9e:a1:73:16:
                    6a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:31:45:29:4A:5A:C6:03:56:EC:F8:27:9A:55:E6:2D:E7:E8:C4:A9
            X509v3 Authority Key Identifier:
                keyid:F3:86:0F:57:CC:ED:8C:93:6C:49:8E:86:A5:1A:29:50:17:18:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/F3860F57CCED8C936C498E86A51A295017183FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3860F57CCED8C936C498E86A51A295017183FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a633030303a3a2f33342d3334203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:d6:bd:e0:bb:ef:d7:7f:b5:c1:13:5e:34:55:38:ec:ca:33:
         90:c9:07:54:50:2d:8f:14:1f:b8:87:d9:a1:23:64:5b:a2:d5:
         bf:37:dc:9a:18:90:26:07:21:66:82:a4:da:47:25:0c:18:2d:
         86:af:85:17:e6:05:98:67:58:ea:77:05:2f:17:df:7a:be:d6:
         c8:39:c3:64:18:77:40:a9:41:4a:73:b6:c6:66:f2:3c:76:39:
         d9:07:41:75:1c:94:6a:d4:7e:ee:68:e6:41:fb:41:15:67:17:
         94:eb:e7:3e:7a:13:39:c3:c1:e9:21:97:0f:4d:37:2a:c8:c8:
         21:5c:73:57:b9:a7:28:ca:0e:19:ef:9b:32:a5:c4:c1:0d:71:
         58:1f:36:69:c8:4f:40:a4:01:58:b5:71:14:70:f3:4c:d1:74:
         2d:c2:d3:cd:9a:c0:17:60:61:11:06:77:04:94:47:4e:c9:08:
         86:31:74:9c:01:8e:2e:1d:73:21:5c:1a:04:1b:cf:10:55:78:
         14:59:9e:9f:3f:1f:2d:11:e6:e2:8c:2b:f2:f1:56:5c:54:1d:
         2b:83:83:d1:67:e9:b7:c2:03:28:f1:46:45:f2:19:55:58:52:
         88:65:06:5f:dd:10:2b:66:42:3a:cc:b5:37:48:4a:3f:d8:23:
         aa:01:d3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----