Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a3a2f33322d3332203d3e20323731373434.roa
File:                     323830343a383035343a3a2f33322d3332203d3e20323731373434.roa (raw, json)
Hash identifier:          VDvz1EMqHC1VB9Z4OImnXM8WYyV1qAVRjC3/Ql7uujs=
Subject key identifier:   F0:BB:8D:26:E8:EE:A3:2F:86:45:3B:6C:CE:DF:6C:E0:BA:7E:CA:50
Certificate issuer:       /CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
Certificate serial:       19997B926E669598D5856FE83BFC4FCAC1C22A33
Authority key identifier: B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a3a2f33322d3332203d3e20323731373434.roa
Signing time:             Fri 05 Jul 2024 12:27:03 +0000
ROA not before:           Fri 05 Jul 2024 12:22:03 +0000
ROA not after:            Fri 04 Jul 2025 12:27:03 +0000
asID:                     271744
IP address blocks:        2804:8054::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:99:7b:92:6e:66:95:98:d5:85:6f:e8:3b:fc:4f:ca:c1:c2:2a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
        Validity
            Not Before: Jul  5 12:22:03 2024 GMT
            Not After : Jul  4 12:27:03 2025 GMT
        Subject: CN=F0BB8D26E8EEA32F86453B6CCEDF6CE0BA7ECA50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:ee:61:82:71:3f:d1:58:fb:ac:06:49:6b:
                    ee:a5:a3:32:ed:3e:4e:77:59:f1:01:a3:95:f5:b9:
                    29:13:e3:f5:2d:4a:6b:f0:8c:db:e7:5c:9f:35:37:
                    7c:fb:3a:6a:d9:48:be:c8:6f:97:49:97:40:d9:00:
                    77:84:e5:ff:52:9b:81:8d:e8:09:ec:c5:b8:65:2c:
                    cd:ad:d0:30:3c:9a:b7:57:3c:2a:83:a2:83:59:e6:
                    4a:97:dd:e0:1f:d0:1e:53:47:7c:a9:e0:10:f2:8c:
                    cc:7b:f2:62:ce:e8:2b:77:76:08:64:12:12:25:07:
                    e5:b9:a4:a1:41:b8:8d:98:e6:84:03:60:4f:79:41:
                    08:70:5b:51:14:a9:31:a5:ae:a2:ae:f0:ac:90:0f:
                    48:5d:2e:00:2d:65:f4:6d:45:95:23:27:2b:1e:f2:
                    f8:ce:00:fa:1d:45:ca:ce:95:0a:c5:2f:0e:e1:ce:
                    52:8a:ab:4c:2c:bc:06:a5:d5:84:53:c2:e8:78:fb:
                    4a:9d:59:d3:5d:35:c1:d8:cc:43:38:2c:a2:47:59:
                    05:2b:ec:f9:57:5d:46:87:11:4e:b7:b9:e1:48:7d:
                    9f:d0:79:42:4e:71:92:55:5b:99:e7:b0:ba:1c:10:
                    57:44:8a:51:28:38:0f:7c:02:5b:b4:8a:69:dd:ec:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BB:8D:26:E8:EE:A3:2F:86:45:3B:6C:CE:DF:6C:E0:BA:7E:CA:50
            X509v3 Authority Key Identifier:
                keyid:B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a3a2f33322d3332203d3e20323731373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8054::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:bb:d7:c9:ba:6e:39:12:cc:45:9e:83:20:c7:b9:42:40:91:
         bf:3c:ee:ab:bb:b8:52:df:5f:4d:5f:6d:6b:f6:0a:e4:2d:c3:
         d2:a4:43:75:a3:05:97:03:bc:78:10:80:a4:d8:d4:29:c6:2c:
         8f:2b:b2:03:60:3e:a1:07:9a:ef:45:17:1b:aa:5f:6d:11:92:
         d8:52:97:c6:d4:7f:d6:42:0e:b1:19:3f:e2:9c:a0:4e:de:37:
         36:1e:7d:59:3c:42:90:19:85:6c:cd:dc:5f:5f:76:09:74:21:
         14:e2:ae:8f:46:4e:ed:7f:e9:91:4a:00:a6:40:24:38:e5:8c:
         27:e3:44:35:84:80:ef:84:0e:53:15:f2:2c:77:17:1e:fb:e9:
         0b:03:5e:43:3f:5e:7c:d8:e2:d3:43:4a:18:de:03:d4:5d:08:
         6f:a6:ce:d2:0b:89:81:b9:20:c3:71:97:ab:29:4c:a3:a6:81:
         85:fc:50:fc:91:21:90:8c:4c:aa:5f:21:47:b2:17:4e:09:4f:
         2b:ed:fc:09:a5:ba:c2:92:82:4c:cb:30:66:fd:8a:6c:6d:9b:
         5a:9e:09:9f:c1:5e:85:85:95:92:fa:1c:14:d6:09:3f:3f:6b:
         22:fc:56:8c:7e:91:00:94:00:7a:11:02:44:57:e8:8a:0a:f5:
         fd:80:20:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----