Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/323830343a376661343a3a2f33322d3438203d3e20323731373030.roa
File:                     323830343a376661343a3a2f33322d3438203d3e20323731373030.roa (raw, json)
Hash identifier:          LH+9SfwyhKxur+/1H9xiHlcumWy6F/MHXTbfSOxiZdQ=
Subject key identifier:   81:33:33:90:D0:12:05:F4:66:4F:28:16:82:88:31:E9:9E:55:06:BC
Certificate issuer:       /CN=F8A856531D031C268A60E567AA8452F1F7F438A4
Certificate serial:       7D08C0C7981A685F9E14E11C8B6028E71D0E6195
Authority key identifier: F8:A8:56:53:1D:03:1C:26:8A:60:E5:67:AA:84:52:F1:F7:F4:38:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A856531D031C268A60E567AA8452F1F7F438A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/323830343a376661343a3a2f33322d3438203d3e20323731373030.roa
Signing time:             Mon 15 Jul 2024 18:06:44 +0000
ROA not before:           Mon 15 Jul 2024 18:01:44 +0000
ROA not after:            Mon 14 Jul 2025 18:06:44 +0000
asID:                     271700
IP address blocks:        2804:7fa4::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:08:c0:c7:98:1a:68:5f:9e:14:e1:1c:8b:60:28:e7:1d:0e:61:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A856531D031C268A60E567AA8452F1F7F438A4
        Validity
            Not Before: Jul 15 18:01:44 2024 GMT
            Not After : Jul 14 18:06:44 2025 GMT
        Subject: CN=81333390D01205F4664F2816828831E99E5506BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:ab:28:07:c2:5c:c6:72:93:b7:f0:99:11:
                    72:dd:c6:f4:b3:18:d0:e3:4d:ef:fd:7a:5c:7f:59:
                    df:fd:73:ca:e6:0b:f0:76:f4:c2:ca:fa:2f:d3:b9:
                    00:22:7b:e3:0b:5b:33:4b:0a:af:d3:35:a6:19:ba:
                    5f:c4:97:a1:0f:6b:8b:cd:e2:ab:51:47:9b:94:27:
                    e7:78:b2:6e:99:be:a2:94:13:17:ea:87:60:dc:8b:
                    16:49:15:2a:c0:d0:6d:e3:c1:04:ac:2e:49:7a:e1:
                    26:00:bd:20:ce:13:1c:f0:28:06:82:24:ad:31:b5:
                    b3:d4:8f:2c:4d:b7:5e:ae:00:2e:a8:fc:bd:6d:72:
                    9d:93:5c:8f:84:ed:37:95:e9:04:21:f4:5d:d0:1c:
                    45:1f:74:c6:a9:29:6d:71:08:57:f8:c8:93:d9:61:
                    57:87:46:10:a2:e6:f7:c1:cc:19:e3:33:4b:3b:5d:
                    0a:9b:ba:7f:93:0d:b7:23:b0:ab:74:28:61:78:af:
                    d7:28:d0:a4:b1:fc:93:e5:b8:19:c6:45:f6:e9:cf:
                    42:56:4c:02:ff:4d:76:08:5f:bb:36:56:f2:c9:8c:
                    62:76:88:db:d3:98:69:75:0c:b5:55:66:20:da:3f:
                    ec:23:39:78:3c:76:16:3b:23:5e:78:f4:0e:3e:93:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:33:33:90:D0:12:05:F4:66:4F:28:16:82:88:31:E9:9E:55:06:BC
            X509v3 Authority Key Identifier:
                keyid:F8:A8:56:53:1D:03:1C:26:8A:60:E5:67:AA:84:52:F1:F7:F4:38:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/F8A856531D031C268A60E567AA8452F1F7F438A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A856531D031C268A60E567AA8452F1F7F438A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/323830343a376661343a3a2f33322d3438203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:71:1f:02:24:8c:d0:9c:99:82:3d:68:9c:34:ce:43:a5:da:
         0c:7b:40:41:27:17:56:93:c7:e1:3b:d9:be:a2:05:76:cb:88:
         79:60:3c:9b:cf:df:4c:bf:23:c6:d2:13:f4:4d:f2:59:82:53:
         5b:cf:52:8e:03:d6:9a:6f:d1:cb:ee:7d:ee:cd:e5:14:e5:1a:
         88:a4:7d:11:c9:ea:59:e0:06:09:36:12:04:ac:08:d2:e9:e0:
         71:0c:cb:8a:3c:f9:04:5a:8e:43:a8:1a:3a:87:2b:a5:61:42:
         58:09:85:fa:fa:0f:dd:53:59:35:80:e2:01:04:e2:d8:5f:e0:
         0f:2d:54:a8:03:77:77:c9:74:c1:01:cf:fa:ab:3f:cf:f7:e6:
         e6:5d:e4:8a:81:b4:b8:b5:ee:27:e9:ac:55:d7:cd:92:1c:5f:
         ef:2c:29:bf:18:5e:3d:0e:eb:73:2f:bb:5e:6b:37:48:73:fc:
         2a:a0:44:56:8b:c2:bd:40:18:f9:73:c4:15:bd:a6:56:85:bf:
         d1:0b:15:b7:43:e5:37:47:b8:8b:e3:02:fc:7a:93:ea:f6:95:
         3a:4a:c4:1b:19:ca:06:bc:51:ad:4d:26:c2:0a:ce:62:6f:37:
         8e:9b:fc:c8:90:f8:f6:df:09:af:5b:2b:af:24:9f:b5:51:ef:
         56:e2:29:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----