Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a3a2f33332d3333203d3e20323638383538.roa
File:                     323830343a356239633a3a2f33332d3333203d3e20323638383538.roa (raw, json)
Hash identifier:          bxgBGC6dK/8A5bWkDITDezMK8QRxK2ltV6R7MtxP0C4=
Subject key identifier:   F5:1F:5E:2F:E6:23:FF:AA:B9:3D:1C:4C:9C:2B:D8:7A:7F:FC:D5:01
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       32D18784EA8B09AC0B507A64FEF721DBE70C92CD
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a3a2f33332d3333203d3e20323638383538.roa
Signing time:             Fri 12 Jul 2024 19:41:51 +0000
ROA not before:           Fri 12 Jul 2024 19:36:51 +0000
ROA not after:            Fri 11 Jul 2025 19:41:51 +0000
asID:                     268858
IP address blocks:        2804:5b9c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d1:87:84:ea:8b:09:ac:0b:50:7a:64:fe:f7:21:db:e7:0c:92:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Jul 12 19:36:51 2024 GMT
            Not After : Jul 11 19:41:51 2025 GMT
        Subject: CN=F51F5E2FE623FFAAB93D1C4C9C2BD87A7FFCD501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:a4:b7:4e:50:8f:4a:9b:c1:22:61:8e:2b:
                    c7:41:60:06:f0:48:4c:ac:bc:c5:a8:f6:16:9b:75:
                    a5:f1:74:4d:a1:1b:60:f6:ce:75:b2:1b:03:b2:71:
                    a4:a1:c8:07:f0:ab:1e:ab:b2:58:f6:50:0e:3f:89:
                    9f:47:0e:5a:2b:cc:89:6e:e9:1b:f0:a6:50:90:7f:
                    5c:25:d5:78:50:5b:8a:78:cd:d4:8e:ad:ef:23:0e:
                    f0:3c:b4:37:82:58:91:58:db:97:14:ab:20:c4:e1:
                    98:f3:75:69:a3:5a:81:e3:f4:64:4a:7d:b9:a7:09:
                    a5:79:3a:43:74:7a:d9:63:cd:5f:a8:5a:ee:9d:6f:
                    00:d1:63:c1:70:60:32:21:fd:53:d3:b0:ab:bd:09:
                    7e:82:4a:fe:1b:32:42:e9:b9:4b:ee:d8:f3:99:13:
                    32:76:dd:6b:74:05:42:af:c2:e4:0d:28:38:a1:25:
                    8d:e0:8f:e9:69:73:44:75:56:5b:68:cf:8d:04:8c:
                    b1:18:11:aa:0b:cc:f3:3d:87:d2:14:7e:7e:6f:aa:
                    f9:ba:77:fd:e9:76:c2:8b:40:ae:e1:f3:75:9b:60:
                    b4:ff:ba:b7:d4:fc:a9:0a:09:0e:42:59:14:17:b6:
                    65:9d:6f:42:c8:16:c9:4b:b5:3b:78:70:99:77:4c:
                    6e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1F:5E:2F:E6:23:FF:AA:B9:3D:1C:4C:9C:2B:D8:7A:7F:FC:D5:01
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a3a2f33332d3333203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c::/33

    Signature Algorithm: sha256WithRSAEncryption
         8f:af:1e:72:51:49:4f:0f:f9:a6:43:6e:ed:0c:f5:9e:24:80:
         9b:a2:86:b9:07:ac:c7:77:d6:95:19:d4:f9:7c:bf:00:ec:14:
         fa:67:1d:2e:e1:f7:c9:53:90:d1:93:43:75:06:69:7a:01:06:
         83:7e:37:05:7e:ff:8b:75:1f:74:62:dc:46:c0:cb:ec:6d:c8:
         93:4d:87:c9:11:35:2d:14:7c:be:08:f5:e5:40:1e:ec:11:14:
         47:25:b0:63:63:f2:21:9c:e0:15:19:e2:bf:3d:6b:10:2d:f2:
         3c:58:57:ba:1d:ae:14:ee:b7:ae:fb:32:af:eb:38:1b:e2:87:
         bb:ad:0f:e7:c9:da:83:c1:b6:2c:32:82:55:cf:b7:0f:33:c8:
         1a:27:64:6a:8d:45:93:58:c7:6d:a3:17:5e:44:49:68:dd:a2:
         f4:c9:f3:e9:5c:67:88:03:a4:a4:ce:f1:22:bc:bb:87:26:0a:
         85:09:1c:94:13:2a:00:5f:0b:91:ea:bb:78:5e:9e:88:2a:ad:
         40:eb:11:7c:9e:b3:83:30:95:17:94:b2:98:0e:f8:e7:c7:6a:
         ae:51:18:28:11:24:a2:3c:b8:36:dc:bd:93:61:44:ab:51:29:
         03:dd:fa:d4:b6:3f:ba:c3:7e:35:8d:ac:6d:8d:54:86:b3:b0:
         b6:6e:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----