Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/323830343a336661343a3a2f33322d313238203d3e20323635393034.roa
File:                     323830343a336661343a3a2f33322d313238203d3e20323635393034.roa (raw, json)
Hash identifier:          7fhLJbi+95CdA+glbBUCmUsxai0Al3HpcKnY/S07fJE=
Subject key identifier:   1A:EF:3D:6A:71:F8:12:A6:23:34:A7:3E:9B:1F:02:63:B3:84:D7:A9
Certificate issuer:       /CN=354A7D2E5655BD8DC81E7B22296D28E7FE5450F4
Certificate serial:       339878CF010E863F7C69C5B4C203C08EE9E710BA
Authority key identifier: 35:4A:7D:2E:56:55:BD:8D:C8:1E:7B:22:29:6D:28:E7:FE:54:50:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354A7D2E5655BD8DC81E7B22296D28E7FE5450F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/323830343a336661343a3a2f33322d313238203d3e20323635393034.roa
Signing time:             Wed 14 Aug 2024 18:32:46 +0000
ROA not before:           Wed 14 Aug 2024 18:27:46 +0000
ROA not after:            Wed 13 Aug 2025 18:32:46 +0000
asID:                     265904
IP address blocks:        2804:3fa4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:98:78:cf:01:0e:86:3f:7c:69:c5:b4:c2:03:c0:8e:e9:e7:10:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=354A7D2E5655BD8DC81E7B22296D28E7FE5450F4
        Validity
            Not Before: Aug 14 18:27:46 2024 GMT
            Not After : Aug 13 18:32:46 2025 GMT
        Subject: CN=1AEF3D6A71F812A62334A73E9B1F0263B384D7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:74:bb:4a:47:b8:98:d6:43:c3:de:10:35:
                    17:2f:9d:d9:5b:fa:44:00:e8:45:4f:d7:b5:dc:3d:
                    2a:16:70:01:35:0a:df:67:ef:ce:1e:98:9c:fb:a1:
                    d9:04:b5:77:23:6d:29:82:fa:d7:b5:aa:52:47:93:
                    f9:26:51:cb:27:d0:3a:ef:b4:29:bd:b0:34:a5:52:
                    e8:d8:0a:f5:fd:0e:23:ad:80:9f:4e:21:6c:6c:b0:
                    1b:fc:2f:9a:0a:d0:f9:d7:af:37:03:31:29:8f:e5:
                    13:c6:03:37:72:c5:f8:06:66:43:c5:a3:71:2e:75:
                    8c:b6:96:14:b2:8b:78:1e:82:c5:71:c8:07:bd:72:
                    05:e1:4b:3f:88:e5:fb:81:91:72:d9:3f:e3:0c:1c:
                    d6:91:69:ff:b6:ca:ac:f5:ee:50:b1:51:c0:1b:29:
                    e4:f0:fa:ae:8f:11:fa:93:b9:90:33:c1:57:2b:d2:
                    af:f9:93:b9:81:8c:96:be:e8:f5:77:24:1f:1b:5f:
                    90:a2:ca:47:46:57:dd:c3:4e:9c:29:18:b4:44:74:
                    b7:c2:74:cb:25:0b:a3:97:65:9a:49:9e:96:83:4b:
                    83:ae:9e:08:64:b9:90:03:f6:a6:e2:0c:d1:84:1f:
                    49:ce:6f:27:d9:f4:1e:ac:2a:14:34:cf:f2:2f:c4:
                    34:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EF:3D:6A:71:F8:12:A6:23:34:A7:3E:9B:1F:02:63:B3:84:D7:A9
            X509v3 Authority Key Identifier:
                keyid:35:4A:7D:2E:56:55:BD:8D:C8:1E:7B:22:29:6D:28:E7:FE:54:50:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/354A7D2E5655BD8DC81E7B22296D28E7FE5450F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354A7D2E5655BD8DC81E7B22296D28E7FE5450F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/323830343a336661343a3a2f33322d313238203d3e20323635393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:bf:7f:a5:7d:1a:f7:cf:a8:f7:2c:d9:4a:6c:a5:3e:f7:26:
         36:01:9e:02:ee:98:ac:35:27:c0:79:d1:90:74:b2:f8:20:fc:
         a5:9d:09:c4:41:8d:1f:56:a2:16:5a:40:cb:11:f3:7a:7c:57:
         58:ee:1e:ef:bf:89:37:3f:a0:9b:0c:3b:63:bb:c6:3d:7d:ec:
         10:75:01:27:6a:b9:ac:b1:72:35:c6:24:e0:7f:2d:1b:13:5c:
         36:cc:e0:ee:29:7c:f5:30:53:b0:6e:ab:cb:23:78:f1:0a:ad:
         ad:a0:6d:9a:7d:bb:7b:0b:fe:8d:df:4b:85:90:ef:09:de:86:
         b6:fe:85:50:81:cb:fa:9b:01:df:ad:c5:f6:a5:48:41:ed:56:
         fc:ad:f9:2a:ce:68:23:d0:e3:27:06:ba:a6:64:90:ee:d1:08:
         07:80:98:62:3f:5b:a3:45:64:c4:52:ef:43:46:60:c5:31:98:
         41:60:78:c8:9a:4e:d8:22:89:b4:6c:c4:01:7a:73:60:8f:93:
         0e:f8:67:42:3f:1a:58:a6:a5:4f:db:0f:e6:73:37:88:af:fe:
         3a:f7:bf:c0:72:6d:3a:46:fb:28:d2:df:7e:b9:2f:f0:82:93:
         ae:38:93:df:4a:51:98:41:aa:4f:4a:f0:a8:14:47:3b:ce:1c:
         61:26:3f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----