Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a383030303a3a2f33332d3333203d3e203631373337.roa
File:                     323830343a316239633a383030303a3a2f33332d3333203d3e203631373337.roa (raw, json)
Hash identifier:          GhYKkD9Vb+DiINx8lUN+hvdzv1ITPFWXTTGtIKH2qQw=
Subject key identifier:   6D:DE:C8:B5:8F:60:23:04:7D:1E:40:BC:FA:6A:8C:79:79:77:DD:47
Certificate issuer:       /CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
Certificate serial:       740E315E1C5D724BB82366324EBBA9DC0D49A61E
Authority key identifier: D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a383030303a3a2f33332d3333203d3e203631373337.roa
Signing time:             Wed 14 Aug 2024 19:45:38 +0000
ROA not before:           Wed 14 Aug 2024 19:40:38 +0000
ROA not after:            Wed 13 Aug 2025 19:45:38 +0000
asID:                     61737
IP address blocks:        2804:1b9c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0e:31:5e:1c:5d:72:4b:b8:23:66:32:4e:bb:a9:dc:0d:49:a6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
        Validity
            Not Before: Aug 14 19:40:38 2024 GMT
            Not After : Aug 13 19:45:38 2025 GMT
        Subject: CN=6DDEC8B58F6023047D1E40BCFA6A8C797977DD47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:1f:2c:be:7c:f8:36:aa:82:7b:d4:6b:10:
                    2f:f2:ef:df:52:4f:0a:fc:bc:bf:d3:d3:7a:5c:62:
                    0e:3b:d3:f8:99:e3:95:b3:4e:8e:5f:3b:8b:df:94:
                    44:c6:37:24:cd:4b:d4:3b:38:c1:e3:e0:b4:74:b3:
                    9d:7d:51:df:4a:11:71:fc:c5:d4:a8:7d:ff:80:99:
                    08:eb:96:99:72:41:1a:1d:e9:c2:6e:87:2d:5d:ee:
                    13:48:92:89:f4:19:5d:84:bd:75:e9:7b:a0:db:93:
                    d4:19:2a:d8:d4:73:6a:8e:b0:50:f5:97:5d:3c:6d:
                    16:94:99:eb:be:1e:f3:c8:2c:87:6a:2a:21:15:b1:
                    53:3f:74:a9:5b:e4:31:c0:78:91:98:52:ff:02:52:
                    d7:28:4f:76:c3:5d:ab:32:d2:f6:70:37:27:a4:58:
                    35:f5:21:04:a3:30:3d:78:e4:83:69:25:b8:70:e5:
                    2a:04:89:8f:28:70:9d:9f:be:50:6f:7a:22:c4:6c:
                    73:b3:b8:b5:a8:45:bb:26:51:c2:3f:4a:8e:7d:42:
                    50:bd:7f:86:00:28:0c:11:14:ec:35:91:f3:a7:51:
                    cf:3b:21:36:fd:5d:f5:e3:5d:f3:2b:43:cd:d3:af:
                    65:97:bf:c3:9a:b0:ef:70:eb:ec:47:6f:8e:1e:46:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DE:C8:B5:8F:60:23:04:7D:1E:40:BC:FA:6A:8C:79:79:77:DD:47
            X509v3 Authority Key Identifier:
                keyid:D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a383030303a3a2f33332d3333203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b9c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:8a:95:ca:be:fe:10:a8:a6:c1:7e:80:cd:11:92:54:18:8d:
         82:38:39:4d:12:04:bb:56:fc:dd:c1:d7:ab:54:76:62:91:7f:
         6a:32:38:38:ca:e8:0a:b7:74:00:67:8c:1c:fc:8d:94:95:ec:
         e8:d6:1b:7e:26:a0:08:b5:3d:d8:17:af:e5:a0:76:a2:85:c7:
         8c:df:0a:6a:7a:20:79:2a:6d:be:c7:ed:c0:b5:1f:4c:75:47:
         6b:57:f1:56:53:30:d1:ae:31:c7:24:3f:93:e4:85:c8:2f:8f:
         1a:07:91:2d:d7:c6:37:b6:37:29:5d:50:e3:cc:4c:04:f6:a7:
         b6:a2:b4:94:49:87:f1:8e:dc:f4:cf:de:04:ab:08:27:0c:2f:
         ab:0e:9a:b3:12:7b:45:b7:f5:60:7f:63:45:2b:b4:98:bb:76:
         c6:d6:ef:ce:ea:c6:4e:f6:01:80:8c:f8:1b:c0:aa:33:7c:c6:
         be:ba:2c:8e:05:8f:83:ef:c8:3a:5d:68:f3:1c:8c:0d:a7:cf:
         75:29:dc:2e:ba:07:6d:34:ed:57:c9:68:93:81:d4:74:f1:1b:
         42:98:64:06:49:f3:ab:1c:b9:aa:21:40:32:ea:a7:bb:d7:31:
         27:08:30:e3:02:4c:9d:69:24:82:bb:a6:db:e5:56:28:bf:53:
         fa:48:7b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----