Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a383030303a3a2f33332d3333203d3e20323632393733.roa
File:                     323830343a6563343a383030303a3a2f33332d3333203d3e20323632393733.roa (raw, json)
Hash identifier:          75JSdaQhC3tsil6fZ15aHayFz7dzh7WRLGGJKC4vqL4=
Subject key identifier:   1F:EC:80:00:BD:A7:F5:5C:73:34:73:3D:0A:DF:9A:BB:47:7F:02:57
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       42F11CE0D94023763E3F6CCA3703EB2FCF06FCC1
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a383030303a3a2f33332d3333203d3e20323632393733.roa
Signing time:             Tue 24 Sep 2024 17:45:30 +0000
ROA not before:           Tue 24 Sep 2024 17:40:30 +0000
ROA not after:            Tue 23 Sep 2025 17:45:30 +0000
asID:                     262973
IP address blocks:        2804:ec4:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f1:1c:e0:d9:40:23:76:3e:3f:6c:ca:37:03:eb:2f:cf:06:fc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 24 17:40:30 2024 GMT
            Not After : Sep 23 17:45:30 2025 GMT
        Subject: CN=1FEC8000BDA7F55C7334733D0ADF9ABB477F0257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:cb:95:2b:7f:9e:14:26:76:8a:5f:5a:8a:
                    b0:2e:9c:5f:09:44:8c:7d:d9:54:b8:9e:7a:87:9d:
                    77:32:a1:c3:dd:ad:b6:87:91:ab:8c:cb:ca:e8:b0:
                    ba:56:34:42:5c:d4:01:b5:23:03:16:c3:6e:1e:15:
                    03:cb:87:b3:e8:60:ab:10:04:85:6d:c4:c7:dc:ad:
                    40:2f:c1:1c:15:e7:b3:b8:cf:cc:29:4f:c8:54:87:
                    e9:be:fd:8b:e7:77:47:ea:d7:48:27:2e:41:d8:11:
                    41:60:42:06:28:56:01:e0:7a:27:da:72:07:d1:9c:
                    9a:1e:7d:b2:8b:36:7b:13:54:a9:7c:6b:1a:52:a1:
                    a2:78:fd:fc:33:62:29:4d:87:3e:3b:85:ac:07:5a:
                    0a:07:11:47:b6:6f:dd:90:70:40:7c:0f:91:74:64:
                    23:b6:d5:73:8f:be:23:ae:d0:76:88:cd:a5:6e:d4:
                    57:e6:81:64:94:f1:a0:4a:aa:75:93:45:2d:fc:c7:
                    fc:25:1a:e1:56:51:71:52:74:14:20:c0:64:a6:b6:
                    1e:2f:ac:fc:16:78:c2:7b:ea:a8:1b:1f:df:45:d7:
                    0d:36:2a:22:fd:d9:f2:c0:e1:c0:d3:33:aa:22:01:
                    33:a8:05:f4:e2:07:24:63:14:80:55:43:ad:77:b3:
                    ed:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EC:80:00:BD:A7:F5:5C:73:34:73:3D:0A:DF:9A:BB:47:7F:02:57
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a383030303a3a2f33332d3333203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         57:5e:e7:dd:d8:48:73:bf:f6:d0:96:a4:1f:55:c3:7e:72:b9:
         4c:8c:1a:ee:c3:b8:1c:db:00:44:b3:4b:25:19:7a:99:0c:b7:
         9b:ef:6e:91:55:0d:ca:46:88:73:81:3c:08:d7:16:db:b2:78:
         9e:42:a2:85:ce:67:e6:94:c5:a5:4b:50:c5:24:3c:30:e6:5c:
         6d:39:cc:f8:20:f8:62:08:bb:c9:19:29:5c:4e:d1:8b:c5:7d:
         93:f0:d4:ec:b3:83:80:74:36:b7:b9:10:85:fd:5f:f1:61:9d:
         58:4a:a5:45:74:90:d6:e3:81:62:5c:9a:59:e7:cf:ac:9c:b6:
         e5:69:60:74:92:37:f4:64:cf:19:2e:87:64:9d:da:4e:e6:17:
         e7:86:20:37:f4:f1:aa:bb:b1:5c:35:12:21:99:57:44:2c:3c:
         1e:fc:63:0a:2a:1b:c3:99:2a:41:61:95:91:da:42:bd:25:2f:
         d6:7e:ea:36:71:71:ec:04:ca:6d:b1:b0:8e:8e:fe:64:9e:f9:
         2c:c9:d7:d5:ca:93:87:3f:db:ef:57:b1:ca:51:f4:5a:5a:78:
         85:fb:4a:f1:92:ae:78:99:3f:e7:4d:ca:d6:89:c0:52:fc:c1:
         cc:d2:07:70:7d:12:98:5b:18:19:f0:aa:50:93:f6:16:d7:19:
         04:48:f7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----