Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3332203d3e20323636303032.roa
File:                     323830343a343131343a3a2f33322d3332203d3e20323636303032.roa (raw, json)
Hash identifier:          zD6WmXk4x3u0HXE/Dh8KN3gMIR0JXoV/ZYZGV9YKwwY=
Subject key identifier:   04:10:99:56:ED:9C:41:50:B1:CF:DC:0E:1C:F8:45:33:14:11:FF:9D
Certificate issuer:       /CN=EA25390ACA724F675CAB1BDF7451E43D924ABE03
Certificate serial:       01E7B032971042CEB0A9CDB786D0B071CDFBF5F0
Authority key identifier: EA:25:39:0A:CA:72:4F:67:5C:AB:1B:DF:74:51:E4:3D:92:4A:BE:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA25390ACA724F675CAB1BDF7451E43D924ABE03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3332203d3e20323636303032.roa
Signing time:             Mon 23 Sep 2024 13:11:05 +0000
ROA not before:           Mon 23 Sep 2024 13:06:05 +0000
ROA not after:            Mon 22 Sep 2025 13:11:05 +0000
asID:                     266002
IP address blocks:        2804:4114::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e7:b0:32:97:10:42:ce:b0:a9:cd:b7:86:d0:b0:71:cd:fb:f5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA25390ACA724F675CAB1BDF7451E43D924ABE03
        Validity
            Not Before: Sep 23 13:06:05 2024 GMT
            Not After : Sep 22 13:11:05 2025 GMT
        Subject: CN=04109956ED9C4150B1CFDC0E1CF845331411FF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:5c:43:f3:56:54:3a:dd:00:5a:59:a6:88:
                    a6:e0:67:fb:8d:53:0a:00:d9:e6:d1:16:09:e8:84:
                    82:77:87:e2:37:75:24:0c:9e:6a:b6:55:43:75:c1:
                    85:55:1b:1e:26:17:30:22:7d:66:c2:1e:11:9e:e3:
                    09:15:4c:4e:86:8a:86:e1:e1:40:bc:93:fa:a2:90:
                    ea:54:95:96:99:06:a2:d6:83:81:ee:a4:42:a2:b5:
                    dd:52:f2:62:50:65:73:6d:f6:68:da:89:eb:44:c3:
                    04:c7:65:4b:3e:e4:0e:bd:53:91:15:42:21:89:71:
                    7a:e4:cf:31:56:40:0f:8d:ac:ff:98:72:a3:0c:17:
                    c5:ae:af:5a:72:00:48:d3:b5:2d:1a:91:55:ac:d9:
                    fd:63:bf:79:d4:92:02:89:79:da:8e:d8:f6:76:6d:
                    1a:a7:d7:08:1f:ba:44:15:5b:1d:2e:74:b5:f9:da:
                    8e:bf:03:a2:88:d6:36:59:6b:3c:e9:73:e1:91:73:
                    4c:c7:81:71:94:7f:52:f9:25:31:10:da:1e:9b:46:
                    d3:6c:09:de:09:4c:55:f0:57:5d:90:e9:94:e6:67:
                    e3:86:11:8b:0f:9b:d9:33:bc:b5:9e:20:18:60:d2:
                    50:d0:4c:15:2b:af:10:4a:cf:89:ce:1f:84:ae:f7:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:10:99:56:ED:9C:41:50:B1:CF:DC:0E:1C:F8:45:33:14:11:FF:9D
            X509v3 Authority Key Identifier:
                keyid:EA:25:39:0A:CA:72:4F:67:5C:AB:1B:DF:74:51:E4:3D:92:4A:BE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/EA25390ACA724F675CAB1BDF7451E43D924ABE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA25390ACA724F675CAB1BDF7451E43D924ABE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3332203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4114::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:3a:03:b1:e0:4e:7d:26:57:32:30:44:b7:a7:63:75:07:ae:
         23:91:84:1a:0a:96:4f:c1:fb:9d:ae:83:81:82:4a:a0:ba:11:
         c9:d6:0b:9b:9f:d7:65:ca:a1:65:58:cc:f5:08:86:b0:52:94:
         e6:d0:db:2f:d7:03:ca:49:1e:ef:49:60:87:24:4a:c6:b0:dc:
         8d:7e:33:ae:38:53:af:96:66:ae:10:15:ad:f0:e4:0a:f2:8e:
         0c:31:fd:14:42:ae:4f:4f:13:44:78:31:58:f1:e1:60:03:b9:
         81:c1:cf:a7:fa:24:98:ac:25:b7:6b:01:6a:05:5f:18:ba:54:
         07:80:4a:7f:07:f9:a5:ce:cc:3b:e3:e3:6f:3a:fb:88:b9:9b:
         09:d4:37:44:ba:77:f2:e4:41:4e:ff:11:db:8d:4b:11:91:3f:
         7b:ba:82:ca:da:dd:40:1f:e5:f8:cb:3f:14:e8:19:df:8a:db:
         a3:e0:6a:91:cb:40:f3:e9:b1:c8:f0:d3:ca:c3:0c:9c:10:4d:
         f5:05:6d:a9:a4:5a:4a:3c:6b:99:62:66:d0:3c:7c:19:1c:5a:
         f3:33:cc:10:92:30:85:c5:05:52:ba:f6:8d:96:91:d0:94:5d:
         39:22:ef:b6:0b:31:b3:41:a7:fc:66:f4:74:45:55:53:ff:bb:
         60:61:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----