Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/323830343a323561383a3a2f33322d3332203d3e20323634323933.roa
File:                     323830343a323561383a3a2f33322d3332203d3e20323634323933.roa (raw, json)
Hash identifier:          EyNET1xvmy4RY8Ccm1mmVojEhv4rb7RBJAMCRdszA60=
Subject key identifier:   34:60:41:70:2C:92:4D:34:06:12:0B:C1:A9:92:B9:96:11:05:E1:06
Certificate issuer:       /CN=29D3E0DFE7A631ED085D28B245B431803B99F625
Certificate serial:       40A96AC4DF917CC7D2372CF5AC0892846D8D8C78
Authority key identifier: 29:D3:E0:DF:E7:A6:31:ED:08:5D:28:B2:45:B4:31:80:3B:99:F6:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D3E0DFE7A631ED085D28B245B431803B99F625.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/323830343a323561383a3a2f33322d3332203d3e20323634323933.roa
Signing time:             Thu 04 Apr 2024 16:57:02 +0000
ROA not before:           Thu 04 Apr 2024 16:52:02 +0000
ROA not after:            Thu 03 Apr 2025 16:57:02 +0000
asID:                     264293
IP address blocks:        2804:25a8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a9:6a:c4:df:91:7c:c7:d2:37:2c:f5:ac:08:92:84:6d:8d:8c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29D3E0DFE7A631ED085D28B245B431803B99F625
        Validity
            Not Before: Apr  4 16:52:02 2024 GMT
            Not After : Apr  3 16:57:02 2025 GMT
        Subject: CN=346041702C924D3406120BC1A992B9961105E106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:3a:bb:1e:76:d5:72:32:34:80:3e:bd:95:
                    e7:85:1d:54:f7:fb:7c:34:27:6b:68:24:dd:40:3a:
                    df:17:99:27:2e:76:62:aa:99:25:63:aa:1f:f3:f3:
                    c2:3e:97:a3:85:2b:3d:2d:a9:ad:42:21:73:cb:c0:
                    1e:42:f1:2c:60:93:c3:55:74:4b:85:a0:07:46:41:
                    a7:1f:01:a6:c2:2c:86:81:98:bb:09:e9:e7:f6:0d:
                    9f:3d:2f:e2:b4:a1:2f:6b:2b:85:9a:75:02:f9:97:
                    9c:4e:7a:9a:eb:bf:fc:94:ac:d0:70:62:f3:0c:4c:
                    c4:5c:3e:e9:39:89:22:48:76:f7:0f:cc:51:b8:3e:
                    c9:f7:e4:1f:c4:20:fd:68:6b:63:79:ee:3a:b2:a3:
                    a8:54:70:20:ee:10:19:3c:eb:ed:1b:50:c7:ad:72:
                    70:70:bd:e7:17:6c:55:ee:3d:f2:3f:2c:b1:87:bf:
                    4c:97:58:43:c2:f4:8d:cf:cf:e6:9f:ba:af:ad:e9:
                    02:cd:b9:07:22:51:3c:ed:a8:75:84:8c:f4:54:31:
                    e8:b5:8e:ba:05:97:48:85:f1:c1:b9:96:53:6f:ee:
                    c5:9a:5e:91:62:38:aa:27:0d:04:d4:9d:4b:17:13:
                    44:93:38:06:6c:c5:18:d4:95:59:ce:ea:ca:92:22:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:60:41:70:2C:92:4D:34:06:12:0B:C1:A9:92:B9:96:11:05:E1:06
            X509v3 Authority Key Identifier:
                keyid:29:D3:E0:DF:E7:A6:31:ED:08:5D:28:B2:45:B4:31:80:3B:99:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/29D3E0DFE7A631ED085D28B245B431803B99F625.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D3E0DFE7A631ED085D28B245B431803B99F625.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/323830343a323561383a3a2f33322d3332203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:95:69:64:0a:87:d4:05:25:56:b8:95:3f:d2:66:b2:ce:fb:
         e0:ac:b3:8a:68:9b:82:8d:f8:57:b4:f5:1c:bd:29:0b:ea:bc:
         7c:7e:ff:09:20:52:83:95:30:d7:b6:7c:91:bc:88:b3:dc:7d:
         2f:91:de:ac:b2:e1:30:8c:8b:b5:b9:08:0d:42:2f:d3:4f:0b:
         74:53:c6:bd:f8:2b:4d:f3:05:cf:e3:17:e4:c7:f5:0b:a0:38:
         06:83:dc:d1:de:86:b0:54:86:b2:ce:85:f7:08:d3:7c:2b:69:
         f6:b9:ca:65:b0:60:a2:be:17:ba:c1:b9:58:6f:ef:b8:23:2c:
         f6:09:da:bf:e9:32:28:3b:37:ef:63:93:ed:f2:5e:92:ea:4c:
         0a:ce:82:27:57:f6:f1:d7:7e:50:1f:18:4b:61:c2:09:02:e2:
         6f:eb:0c:2f:83:99:3e:e4:76:9b:a3:a3:a2:48:52:af:cb:ad:
         94:cb:1b:63:86:60:67:d5:63:05:9b:06:9e:e5:12:90:d0:42:
         ee:f4:0b:f5:a9:49:41:7e:67:d2:75:13:9c:03:3d:59:db:d2:
         f7:82:33:17:71:88:2f:9f:ea:e8:fc:13:7e:88:f4:1c:ff:51:
         ae:1a:11:58:d7:3b:12:35:ff:63:5d:07:74:df:c0:00:57:1b:
         bd:42:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----