Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33332d3333203d3e203631373337.roa
File:                     323830343a316239633a3a2f33332d3333203d3e203631373337.roa (raw, json)
Hash identifier:          /NudPeotwuc0jC8xsOD4AwCrYiyibUnoYgHrCkuU6uE=
Subject key identifier:   98:BB:A9:DB:66:88:7F:7D:A1:FB:45:78:14:54:5B:38:4D:B6:7F:A7
Certificate issuer:       /CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
Certificate serial:       39B11D3892DF31AA527CCDF7D864146533F3136D
Authority key identifier: D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33332d3333203d3e203631373337.roa
Signing time:             Wed 14 Aug 2024 19:45:38 +0000
ROA not before:           Wed 14 Aug 2024 19:40:38 +0000
ROA not after:            Wed 13 Aug 2025 19:45:38 +0000
asID:                     61737
IP address blocks:        2804:1b9c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b1:1d:38:92:df:31:aa:52:7c:cd:f7:d8:64:14:65:33:f3:13:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
        Validity
            Not Before: Aug 14 19:40:38 2024 GMT
            Not After : Aug 13 19:45:38 2025 GMT
        Subject: CN=98BBA9DB66887F7DA1FB457814545B384DB67FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:4a:8b:b5:63:38:e9:83:cc:65:c3:70:cd:
                    8d:f8:7a:47:42:c0:e8:ba:d7:85:dd:42:9d:29:36:
                    0c:c2:12:a4:c3:cc:5f:ba:5c:6c:f6:21:08:63:70:
                    1f:27:0b:3c:c8:ae:3b:c0:9b:c4:12:bc:d7:6a:f1:
                    ce:ec:23:6c:69:a0:27:4b:8e:c8:39:c4:80:46:eb:
                    5d:0b:d7:9f:48:52:b7:5c:b7:fc:ba:19:92:06:c1:
                    0c:b7:19:06:d9:e5:55:61:6a:e9:97:10:0b:35:43:
                    4a:74:cd:97:64:15:9a:b1:c9:38:ba:b1:bb:88:69:
                    b0:fc:77:92:20:3b:96:99:fd:49:ae:dc:1e:79:40:
                    d3:26:77:70:75:03:05:70:55:79:cc:db:ca:a4:5c:
                    12:74:54:e5:54:4c:d4:fd:43:2d:e5:6f:18:1c:74:
                    75:d5:33:aa:16:0b:df:76:c1:99:fc:c1:53:8c:60:
                    7a:ba:b8:f6:2b:48:9c:b9:02:85:b3:5b:0d:bc:d2:
                    92:ff:af:4c:e6:d7:9e:ea:9b:81:18:ef:a0:58:3f:
                    08:e0:98:2f:f1:7c:0a:22:5b:96:99:a6:b9:68:15:
                    7c:34:4b:fd:fc:00:1f:fc:ba:29:00:6b:5d:00:b6:
                    04:04:f6:8c:c0:3d:fc:05:6f:fe:b5:a3:38:76:a7:
                    02:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BB:A9:DB:66:88:7F:7D:A1:FB:45:78:14:54:5B:38:4D:B6:7F:A7
            X509v3 Authority Key Identifier:
                keyid:D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33332d3333203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b9c::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:5d:a1:04:4a:27:67:47:f7:a7:49:67:de:ce:c3:2a:ed:f8:
         c8:a2:96:98:28:91:c0:4d:42:87:35:60:cc:03:99:95:51:86:
         b6:d6:34:02:7c:00:28:28:b3:43:98:71:ac:c2:8d:a3:58:84:
         99:f2:d3:d2:ce:01:2a:aa:d1:a9:f2:54:e6:e3:36:c1:d6:1e:
         bd:a8:be:e7:f5:16:f8:9c:7a:ef:b5:cf:e2:a1:fb:4e:7a:6a:
         2b:a8:0f:71:d2:cd:3c:64:89:6e:6c:3e:9b:70:20:6e:54:f5:
         de:0a:55:f0:0f:75:94:fe:ba:3f:76:6e:45:f9:25:3c:77:45:
         f0:79:b6:d3:e5:f3:37:ff:8e:58:75:54:91:12:f4:5e:3f:6f:
         94:bc:2d:73:ab:ae:b2:5f:43:73:27:2d:cd:24:92:d0:4e:3c:
         09:b3:78:25:cd:e7:0b:fd:cd:ed:52:55:4e:0c:f6:c5:a6:b4:
         85:48:eb:2f:a7:2d:47:cd:fd:20:b6:08:ec:16:7d:4d:f1:7b:
         b1:69:75:93:14:2c:33:9f:68:12:fa:91:bc:66:ac:27:61:e4:
         0f:ff:02:70:80:b1:da:20:e6:2b:a7:04:2a:2e:3f:73:12:f1:
         8f:ec:64:09:3a:cf:76:90:78:f6:3d:f8:3d:b2:57:58:14:b6:
         82:e5:6c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----