Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a3a2f33322d3332203d3e20323632393733.roa
File:                     323830343a6563343a3a2f33322d3332203d3e20323632393733.roa (raw, json)
Hash identifier:          0Xq9f9wheFY5d/pD04fjNojloRoywrEuj/f9GvIQ/bU=
Subject key identifier:   6D:48:44:AD:DF:0E:39:AB:D4:90:31:65:E2:7D:73:CD:F1:E4:C0:ED
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       22792A58DABB8B789C2F0FE2DD0C155F1FA772A9
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a3a2f33322d3332203d3e20323632393733.roa
Signing time:             Tue 24 Sep 2024 17:45:30 +0000
ROA not before:           Tue 24 Sep 2024 17:40:30 +0000
ROA not after:            Tue 23 Sep 2025 17:45:30 +0000
asID:                     262973
IP address blocks:        2804:ec4::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:79:2a:58:da:bb:8b:78:9c:2f:0f:e2:dd:0c:15:5f:1f:a7:72:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 24 17:40:30 2024 GMT
            Not After : Sep 23 17:45:30 2025 GMT
        Subject: CN=6D4844ADDF0E39ABD4903165E27D73CDF1E4C0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c5:0f:5b:8b:15:35:3e:35:a7:ec:5a:f7:56:
                    d9:95:09:ce:37:0f:05:42:bd:32:39:af:05:b2:c9:
                    27:c0:ee:5a:cd:ae:00:f5:1e:1d:98:f1:c0:9d:c1:
                    96:31:0a:ba:bd:a7:5c:3f:0b:cb:ed:ed:cc:06:cd:
                    dc:bd:9a:59:b5:f7:87:bf:c0:7e:42:b4:8a:c3:5c:
                    28:47:26:79:1c:63:9c:81:70:d6:1d:b2:53:30:cd:
                    0f:ca:7d:12:94:28:b5:37:a6:82:04:e8:c6:ae:b7:
                    82:4b:88:a7:70:b7:37:f6:cf:68:da:2d:22:1f:af:
                    87:9f:57:d3:a8:8c:cd:f3:93:c6:60:6b:58:42:3a:
                    05:02:96:6d:d8:b2:9d:24:87:31:71:9e:e8:88:55:
                    ad:c9:8a:7f:a1:9a:c2:e7:01:c9:75:cb:ca:ba:20:
                    a9:84:81:5a:0f:1e:fb:2a:c7:81:c9:3c:d6:da:b0:
                    6d:8c:91:c2:43:0f:f5:c1:90:ef:4f:8f:7f:3b:25:
                    e8:36:36:f9:42:63:41:9e:57:d3:69:04:2c:82:6d:
                    20:db:e5:23:06:41:97:64:81:ee:36:5e:a0:32:90:
                    5b:f8:a5:32:45:ec:ef:2d:c6:ed:09:70:c2:99:c2:
                    74:7e:28:3d:e0:4c:15:b7:64:3c:2b:89:b9:1f:49:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:48:44:AD:DF:0E:39:AB:D4:90:31:65:E2:7D:73:CD:F1:E4:C0:ED
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a3a2f33322d3332203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec4::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:e5:a2:00:db:0d:06:fc:85:f8:1d:7e:cd:9d:46:ec:c0:35:
         72:38:25:c7:59:b3:73:cd:8a:01:69:5d:f4:85:c4:69:fd:35:
         59:25:4e:db:d0:1c:c7:1c:bf:ea:50:a4:10:cc:41:d6:bd:d9:
         62:c7:7f:a4:6e:65:3d:3e:2d:c3:08:ad:90:16:39:72:85:2a:
         f1:e6:cc:4c:bc:6e:83:1b:d8:6e:04:69:b1:dd:1f:38:a5:dd:
         23:e5:1d:a3:1d:13:22:1a:b9:8c:1d:3f:89:d5:83:90:3a:5c:
         d5:e0:82:1d:14:55:2b:1c:94:3c:41:c1:76:f5:e4:0a:8d:d3:
         11:3a:2f:57:07:55:07:af:78:50:6a:8b:ae:65:94:43:e9:8d:
         85:31:f4:c6:80:68:8d:90:66:de:6f:aa:2a:68:73:5e:93:08:
         2b:c3:1e:fa:c2:83:16:33:3a:29:61:be:7e:a4:d0:9f:71:89:
         05:39:f8:8b:d2:e5:09:4a:e4:71:58:05:50:97:ef:bd:1e:cb:
         f0:de:3e:66:c5:c5:63:8c:4b:68:ad:4f:12:5d:09:3e:ab:6c:
         58:ec:ac:d8:b0:1d:b5:66:b6:77:3f:a7:ca:3f:6b:4e:3c:5a:
         05:74:ef:3c:0a:dc:28:4b:7c:3a:aa:c2:80:35:97:8f:b9:73:
         0f:10:3c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----