Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/323830343a326138343a3a2f33322d313238203d3e20323634303736.roa
File:                     323830343a326138343a3a2f33322d313238203d3e20323634303736.roa (raw, json)
Hash identifier:          JG914S/fdbTJFPG6WNK05yQ8cDfAYcEE3wxujAY/MVo=
Subject key identifier:   05:19:3F:8E:99:EC:D2:2A:03:1A:D4:97:08:1F:9D:13:16:34:DC:D3
Certificate issuer:       /CN=D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07
Certificate serial:       22AEFECA7B5083EAAD02BECAF8438676752F8D2A
Authority key identifier: D2:25:BD:31:4D:5C:EA:6E:CF:BE:E9:60:E2:57:F1:9E:4D:7D:0C:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/323830343a326138343a3a2f33322d313238203d3e20323634303736.roa
Signing time:             Fri 26 Apr 2024 19:58:03 +0000
ROA not before:           Fri 26 Apr 2024 19:53:03 +0000
ROA not after:            Fri 25 Apr 2025 19:58:03 +0000
asID:                     264076
IP address blocks:        2804:2a84::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ae:fe:ca:7b:50:83:ea:ad:02:be:ca:f8:43:86:76:75:2f:8d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07
        Validity
            Not Before: Apr 26 19:53:03 2024 GMT
            Not After : Apr 25 19:58:03 2025 GMT
        Subject: CN=05193F8E99ECD22A031AD497081F9D131634DCD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:b9:2f:70:66:04:c3:63:66:1b:15:b3:fd:
                    b7:3b:e4:f0:ad:80:36:0f:af:e9:06:d4:1d:a1:b8:
                    60:e5:9e:6c:eb:ca:a9:99:ac:d2:41:7f:77:06:05:
                    a6:4a:86:e3:ec:43:b4:e9:b2:30:86:da:7c:cc:38:
                    ec:0e:f3:34:f3:bd:5c:b4:70:a5:d2:dd:e8:79:73:
                    91:fa:66:6c:5b:98:55:e8:de:3c:4b:ef:2e:84:e5:
                    79:46:92:7e:be:65:91:6f:68:5f:9e:86:6b:5b:ed:
                    bc:8f:51:59:da:b9:c8:98:49:da:9f:73:d5:2a:bc:
                    ef:a5:00:55:ff:3f:f3:60:04:ce:5c:17:91:2a:04:
                    99:7d:33:43:29:7e:8b:5b:e6:af:20:14:57:3d:a8:
                    ae:0a:64:b8:30:63:6b:78:e0:15:a4:52:60:c8:f8:
                    9d:f3:32:f3:32:2e:91:7d:96:45:ea:d5:d0:01:a5:
                    7a:a9:df:e0:5e:98:ac:32:5f:99:bb:ac:ff:66:c8:
                    20:0a:f5:20:9c:4d:bf:a6:38:62:ba:a5:ae:66:6b:
                    7a:3f:58:aa:96:b2:8e:4b:d6:ac:43:c8:09:06:a7:
                    f3:b2:16:11:b6:f0:3e:ce:d5:c5:a6:ba:1f:31:e6:
                    ae:7b:98:92:c2:c0:5a:31:28:97:08:ab:1a:f3:a1:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:19:3F:8E:99:EC:D2:2A:03:1A:D4:97:08:1F:9D:13:16:34:DC:D3
            X509v3 Authority Key Identifier:
                keyid:D2:25:BD:31:4D:5C:EA:6E:CF:BE:E9:60:E2:57:F1:9E:4D:7D:0C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/323830343a326138343a3a2f33322d313238203d3e20323634303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a84::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:49:3a:27:84:33:b5:11:4d:f2:2e:9d:1c:38:9f:c9:50:b4:
         05:7a:19:7c:8e:c1:ac:ab:cb:74:2b:39:19:24:4a:5e:2c:f5:
         2d:0b:7b:18:a8:d8:d8:78:9e:1e:fe:cb:93:bd:3e:33:41:6c:
         e7:ac:c6:9c:0d:af:5e:16:8d:aa:bf:ed:9d:7d:aa:44:8b:3c:
         c1:70:e1:84:ee:5d:69:23:b8:06:af:30:b8:a4:5c:e9:45:f9:
         67:46:1f:e4:5e:ce:b1:f1:30:45:8b:79:81:8e:e9:40:c6:0d:
         45:74:16:ce:26:1b:7f:80:a3:58:47:c5:dd:11:da:f2:52:f3:
         1a:51:37:fa:a2:d8:7b:0e:8c:ee:79:57:1e:2b:28:49:95:a1:
         bd:6b:00:1b:df:55:ed:64:95:49:4c:f8:48:7c:57:a8:ca:7f:
         ba:68:d9:7e:c0:e9:65:3a:db:25:ab:63:29:68:9a:d4:23:1a:
         ec:0c:79:94:a0:fd:71:3b:5c:f3:6b:84:1a:71:c2:65:fb:93:
         2e:f8:f7:85:9c:3d:bf:6c:e2:e8:a4:49:cc:c1:7d:ba:f0:a0:
         53:83:ef:ae:8c:29:03:2d:c4:c5:ed:6e:a4:09:2e:f9:5f:36:
         15:5c:ac:e1:84:c5:18:c0:76:a2:0d:94:13:af:f2:94:13:84:
         5c:41:52:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----