Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/323830343a363739383a3a2f33322d3438203d3e20323639363338.roa
File:                     323830343a363739383a3a2f33322d3438203d3e20323639363338.roa (raw, json)
Hash identifier:          4v8CC6SSipa+paOKZSInxyXwtZL6B2tMW0JlZm5CwJs=
Subject key identifier:   CB:FA:F5:C2:C9:15:27:C0:62:7F:5E:2C:2A:AF:DD:77:58:5C:81:BC
Certificate issuer:       /CN=ACC640880752C6C701BBAD7E1B2D0C3270F5E083
Certificate serial:       6BFAF6ABB1EA87FBB49DA72EFBD2388FA396E39C
Authority key identifier: AC:C6:40:88:07:52:C6:C7:01:BB:AD:7E:1B:2D:0C:32:70:F5:E0:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACC640880752C6C701BBAD7E1B2D0C3270F5E083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/323830343a363739383a3a2f33322d3438203d3e20323639363338.roa
Signing time:             Thu 19 Sep 2024 20:15:27 +0000
ROA not before:           Thu 19 Sep 2024 20:10:27 +0000
ROA not after:            Thu 18 Sep 2025 20:15:27 +0000
asID:                     269638
IP address blocks:        2804:6798::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fa:f6:ab:b1:ea:87:fb:b4:9d:a7:2e:fb:d2:38:8f:a3:96:e3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACC640880752C6C701BBAD7E1B2D0C3270F5E083
        Validity
            Not Before: Sep 19 20:10:27 2024 GMT
            Not After : Sep 18 20:15:27 2025 GMT
        Subject: CN=CBFAF5C2C91527C0627F5E2C2AAFDD77585C81BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:da:39:b5:7d:a4:9e:6c:b8:d3:39:76:29:
                    6b:a6:07:a6:bb:be:46:c5:e9:d8:35:df:11:38:fe:
                    ae:58:86:a9:19:3b:4f:1d:c3:12:cd:05:72:a3:5f:
                    c1:28:82:a9:bd:c6:e1:ac:ac:99:e8:ac:bf:ec:64:
                    45:d5:bc:3f:75:52:d5:c9:8d:f1:e7:09:14:5e:55:
                    2a:71:9e:0a:16:e5:7e:e9:11:7e:fb:ff:7c:1d:78:
                    e8:9e:af:50:68:bb:1a:db:20:ad:b3:cb:23:24:5d:
                    4e:dc:04:63:58:1d:70:0d:23:64:5c:d1:e6:4c:ce:
                    41:4a:b7:93:56:74:a6:9f:3f:97:67:94:df:1d:45:
                    80:99:ca:45:cf:23:14:3a:e2:70:67:50:b6:10:e7:
                    8d:16:eb:68:0a:78:18:f3:74:7d:c7:a5:4a:f3:6a:
                    49:6b:7b:82:a5:56:53:a6:ad:89:fa:68:16:60:6b:
                    d4:e3:60:ce:d5:c1:b4:8d:ea:34:e4:0b:04:b8:b8:
                    30:4b:e1:ac:39:91:1c:8e:eb:78:0f:94:a1:c2:33:
                    5c:2a:35:17:55:1e:0c:95:0b:79:f0:8f:f2:2e:29:
                    3c:e1:73:17:e1:a3:46:23:83:bf:3a:f8:b0:93:d6:
                    2a:c7:19:52:70:79:c1:2a:ee:41:bb:5b:0f:f3:43:
                    12:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FA:F5:C2:C9:15:27:C0:62:7F:5E:2C:2A:AF:DD:77:58:5C:81:BC
            X509v3 Authority Key Identifier:
                keyid:AC:C6:40:88:07:52:C6:C7:01:BB:AD:7E:1B:2D:0C:32:70:F5:E0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/ACC640880752C6C701BBAD7E1B2D0C3270F5E083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACC640880752C6C701BBAD7E1B2D0C3270F5E083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/323830343a363739383a3a2f33322d3438203d3e20323639363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6798::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:7e:83:93:e1:59:25:8a:f3:31:f9:be:d8:89:55:6d:40:5f:
         46:53:be:85:7f:de:0b:88:4e:a0:fb:d8:43:92:d4:82:75:a6:
         a9:6a:c2:33:6e:9a:67:b1:8f:f9:f3:4c:f8:9b:80:2a:76:37:
         f5:69:0d:a6:73:83:af:a0:30:2c:3d:52:b1:23:bd:30:25:14:
         d7:62:80:1e:c2:c8:e7:08:f9:78:84:55:2e:92:a0:97:33:5a:
         40:e1:a8:c7:e4:f0:a1:7b:79:9b:45:e9:67:26:c0:cd:d2:ae:
         94:0f:41:75:28:9c:d6:f7:2a:21:e5:8c:a9:5d:e4:39:10:83:
         5d:12:49:41:a9:2d:77:0e:a0:c7:a7:d2:4e:29:84:62:d9:e5:
         be:aa:8b:aa:4e:a2:81:b7:51:88:96:d8:c0:6f:db:a8:5f:21:
         f7:57:f9:3a:5a:69:7e:d9:aa:04:3f:7d:f6:0c:0f:82:11:bf:
         0e:21:f5:66:58:3b:38:92:c6:bd:d6:c3:f7:18:e3:d4:73:03:
         2c:99:61:15:6f:2a:98:c1:1d:7e:e6:e3:e5:76:e2:0e:45:15:
         f3:8a:22:e1:e5:23:04:56:63:0d:3e:ea:ec:84:7b:cf:cd:bc:
         bf:91:39:d2:35:aa:c8:f5:a4:30:f9:32:95:a5:16:01:3e:4a:
         f3:18:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----