Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a38303a3a2f34322d3432203d3e20323639333539.roa
File:                     323830343a363336383a38303a3a2f34322d3432203d3e20323639333539.roa (raw, json)
Hash identifier:          JbRfPG577EmUfqHRx58aqD7OqZ9m/UaDO9fus1rEk4w=
Subject key identifier:   14:5B:11:AD:CB:B6:24:B0:1C:BE:82:28:E8:36:69:D8:D6:FD:1A:4A
Certificate issuer:       /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial:       21F7898CC1ADF8EEDD5D527AD29970AB0FEC5A0D
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a38303a3a2f34322d3432203d3e20323639333539.roa
Signing time:             Mon 26 Aug 2024 19:33:08 +0000
ROA not before:           Mon 26 Aug 2024 19:28:08 +0000
ROA not after:            Mon 25 Aug 2025 19:33:08 +0000
asID:                     269359
IP address blocks:        2804:6368:80::/42 maxlen: 42

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f7:89:8c:c1:ad:f8:ee:dd:5d:52:7a:d2:99:70:ab:0f:ec:5a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Validity
            Not Before: Aug 26 19:28:08 2024 GMT
            Not After : Aug 25 19:33:08 2025 GMT
        Subject: CN=145B11ADCBB624B01CBE8228E83669D8D6FD1A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1d:91:09:42:72:53:af:35:b1:70:b0:97:ad:
                    5c:2a:c7:b3:b4:5f:c9:f5:98:85:fe:73:5a:7f:5e:
                    f3:e0:0f:82:5e:51:77:9c:ac:6e:0e:c3:cc:d8:8a:
                    4f:a6:14:1d:d8:a4:bc:43:4c:b1:8b:61:5a:1f:d5:
                    72:f3:35:ee:9f:38:bf:8e:b7:8d:d4:23:88:bd:bc:
                    72:29:3b:c4:51:29:4c:96:16:29:7a:d9:1b:f1:cf:
                    08:af:d0:64:bf:b2:b1:8d:c4:d8:2c:20:b9:9c:d3:
                    af:28:4a:d4:01:05:63:ef:76:7a:00:38:f4:a8:6d:
                    ce:7e:55:d1:8e:80:c1:3b:cb:44:74:b5:e8:d1:78:
                    91:73:b6:e8:3f:37:52:bc:db:a1:83:df:25:f3:31:
                    cd:45:b6:0e:4f:da:3a:08:3a:a8:0f:4d:28:3e:e6:
                    fa:3e:f3:6c:cf:40:a4:3f:16:52:97:64:22:f1:fe:
                    b1:0e:6a:4a:94:d8:94:53:4c:1b:d0:64:33:9e:4d:
                    7f:4d:17:0a:bc:2f:db:cb:df:39:a1:27:b7:17:20:
                    17:cb:73:17:3e:82:fd:cc:6b:74:36:f8:88:f1:8e:
                    bc:5e:55:31:4a:da:c7:16:04:0d:4b:5c:ea:ae:1a:
                    c6:fa:55:4f:90:b9:be:84:d6:f4:d1:87:e5:ce:09:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5B:11:AD:CB:B6:24:B0:1C:BE:82:28:E8:36:69:D8:D6:FD:1A:4A
            X509v3 Authority Key Identifier:
                keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a38303a3a2f34322d3432203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6368:80::/42

    Signature Algorithm: sha256WithRSAEncryption
         95:45:c1:10:33:e6:9e:5b:86:60:28:92:f9:c3:c9:ea:75:c0:
         a9:fe:16:7e:ae:67:d3:4f:80:97:3d:69:3d:1c:21:37:c9:94:
         df:95:1d:b6:4d:6c:a9:9d:70:e2:97:e4:8b:d7:41:db:9a:0f:
         19:19:2a:4e:4a:dc:e0:6c:5b:b8:8c:10:e5:fe:4d:74:5f:90:
         cf:91:5b:39:2a:4d:28:70:c1:37:e8:91:b4:5d:85:0f:5f:63:
         3d:15:4a:e2:3e:21:85:35:70:e1:b4:03:80:24:66:8f:02:59:
         49:21:0c:1a:ed:43:4f:1e:ef:c8:28:00:20:d9:58:e7:f9:43:
         6e:48:13:2d:65:3e:88:7c:f6:e0:2b:c1:a4:31:9e:98:64:d9:
         26:30:27:bf:2e:62:ba:e5:f6:b7:e7:ba:98:e7:73:56:98:dc:
         e5:17:bf:15:50:d6:64:a5:4d:47:24:7b:bb:a6:6c:0f:4a:e8:
         91:a6:09:c9:39:d2:31:e3:06:59:e9:b8:72:51:3c:7c:01:5f:
         df:d0:5a:8c:13:2c:90:93:9c:fe:8f:0d:19:d0:60:90:31:73:
         6b:1f:37:4a:82:01:66:57:32:5a:82:59:61:ad:5a:1e:31:68:
         5a:66:8c:ab:57:23:0e:7b:16:2a:5b:25:6b:2a:05:c6:66:e6:
         b8:9c:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----