Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/323830343a316339383a3a2f33322d3438203d3e203631363634.roa
File:                     323830343a316339383a3a2f33322d3438203d3e203631363634.roa (raw, json)
Hash identifier:          VFwepX21D1VjjpL4yJX8Hz2SwYCpTk1QQSmrOAXvW4g=
Subject key identifier:   02:65:EC:4F:4B:5E:C9:A8:E1:23:98:C4:EA:E9:4A:98:51:E3:03:96
Certificate issuer:       /CN=A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB
Certificate serial:       151253C49572C96484B6577530FD55CD75206205
Authority key identifier: A9:1A:7A:0D:FE:9D:4E:42:EA:16:1E:14:DE:8B:AA:89:77:E2:9F:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/323830343a316339383a3a2f33322d3438203d3e203631363634.roa
Signing time:             Mon 22 Jul 2024 15:08:00 +0000
ROA not before:           Mon 22 Jul 2024 15:03:00 +0000
ROA not after:            Mon 21 Jul 2025 15:08:00 +0000
asID:                     61664
IP address blocks:        2804:1c98::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:12:53:c4:95:72:c9:64:84:b6:57:75:30:fd:55:cd:75:20:62:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB
        Validity
            Not Before: Jul 22 15:03:00 2024 GMT
            Not After : Jul 21 15:08:00 2025 GMT
        Subject: CN=0265EC4F4B5EC9A8E12398C4EAE94A9851E30396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:d2:d0:40:f8:7a:28:a1:30:f0:55:7c:b3:
                    97:75:94:39:c4:ac:7e:9a:bd:e7:12:91:59:4b:9f:
                    2f:ce:a9:94:db:f1:49:94:15:e5:2d:32:31:25:e5:
                    75:5c:48:81:fa:d6:d0:71:e8:83:44:5d:46:98:69:
                    88:fb:8a:08:19:d0:31:ed:19:bf:ce:67:90:d6:a1:
                    3f:22:eb:2c:b8:61:a5:72:cc:8d:25:2d:8a:83:2d:
                    28:0f:d8:1a:da:22:6a:42:f9:71:83:a3:ab:53:c4:
                    49:fd:74:b0:11:ae:cd:ff:e2:ed:32:3e:73:4a:d3:
                    99:18:d3:48:67:89:8e:94:71:dd:27:53:3a:a2:72:
                    f8:96:c9:9d:22:64:38:dd:51:6b:0c:97:e1:77:f4:
                    20:df:78:5c:9c:7d:b4:82:31:5e:3c:4f:b2:e4:7f:
                    74:28:61:7b:ad:98:b1:43:13:7a:ca:8c:74:8c:bb:
                    d4:f4:56:34:01:de:fc:5b:9b:3f:a7:c0:66:2c:fe:
                    5d:ad:f3:30:62:87:a7:61:9c:66:2e:5a:9f:20:b7:
                    ad:c6:a0:00:2d:bd:6a:3b:99:a0:82:07:a1:c4:16:
                    5d:4b:08:e5:08:d5:18:c9:1b:eb:45:3e:df:9c:29:
                    d8:90:da:d0:3c:49:41:09:66:1e:fe:89:c7:ad:f5:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:65:EC:4F:4B:5E:C9:A8:E1:23:98:C4:EA:E9:4A:98:51:E3:03:96
            X509v3 Authority Key Identifier:
                keyid:A9:1A:7A:0D:FE:9D:4E:42:EA:16:1E:14:DE:8B:AA:89:77:E2:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/323830343a316339383a3a2f33322d3438203d3e203631363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c98::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:dd:a9:d8:99:ad:1a:ee:07:fa:86:5b:84:c6:4a:fb:55:f1:
         9e:de:7b:47:d9:f4:b0:2d:53:13:44:a2:b2:ed:06:f9:1e:cd:
         36:33:30:e9:74:ce:7f:d5:91:79:d2:94:91:54:6c:3c:48:5f:
         57:5d:68:f8:ca:ff:6d:0b:cf:bc:68:aa:1d:24:7b:70:d8:42:
         d1:dc:60:14:5e:af:ac:b9:62:26:0b:dc:7d:89:a7:cb:91:49:
         02:9a:26:b4:1e:66:25:67:49:95:88:1c:b2:3b:1f:b8:b4:66:
         54:b9:d7:ac:02:4e:27:89:30:19:d8:f6:96:cc:d4:c7:a5:7a:
         00:ca:a0:2b:70:11:a4:81:73:81:76:0f:8b:f4:d0:9a:ea:2b:
         8e:84:ef:b7:b1:9d:fc:0c:3a:71:ed:cf:7e:02:73:cf:1e:15:
         73:53:eb:74:f7:32:46:df:97:0f:ad:2a:81:85:a6:96:3f:f9:
         5a:6c:ad:d7:25:46:ae:8f:0e:13:ac:fd:cc:77:e3:ba:7b:b5:
         d2:b3:df:0b:f9:6f:21:06:25:f7:76:2a:05:d8:e6:74:f9:78:
         dc:ec:3f:50:4c:7b:0c:f6:21:26:7c:7a:0b:6a:1e:fb:a7:ed:
         c9:58:d5:79:84:b2:66:be:ca:b0:7a:91:60:b8:19:31:c2:a3:
         6d:e5:ac:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----